last executing test programs: 5m20.258925427s ago: executing program 5 (id=3276): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000001380)='./file1\x00', 0x2200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1fc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2002, 0x176) 5m18.44323398s ago: executing program 5 (id=3283): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14) 5m17.148290255s ago: executing program 5 (id=3287): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m15.694569665s ago: executing program 5 (id=3288): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lremovexattr(0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2, 0x3a, '.+!', 0x3a, ',$*', 0x3a, './file0', 0x3a, [0x46, 0x46]}, 0x2f) 5m14.662660838s ago: executing program 5 (id=3290): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) 5m14.08649821s ago: executing program 5 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) 5m12.782928461s ago: executing program 32 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) 26.147956155s ago: executing program 4 (id=3931): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x2c, 0x40, 0x9, 0x70bd2d, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0xc, 0x4, 0x0, 0x1, [@nested={0x5, 0x65, 0x0, 0x1, [@generic='a']}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 25.630235081s ago: executing program 4 (id=3935): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x8) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 24.081999097s ago: executing program 4 (id=3938): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 23.720473184s ago: executing program 4 (id=3942): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000000c001700040004"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.462597862s ago: executing program 4 (id=3943): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.988293641s ago: executing program 4 (id=3946): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}]}}, 0xf) 15.954048143s ago: executing program 1 (id=3964): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) 14.820384399s ago: executing program 1 (id=3966): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3cba, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 13.616620098s ago: executing program 2 (id=3967): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 12.700752839s ago: executing program 1 (id=3972): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 11.270418206s ago: executing program 3 (id=3976): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}]}}, 0xf) 11.201261296s ago: executing program 1 (id=3977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xf500000000000000, 0x1000000}) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1, 0x8, 0x9, 0x3d) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) 11.130920705s ago: executing program 2 (id=3978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56e00337}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e8d6efb}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000e008}, 0x0) 10.980377129s ago: executing program 6 (id=3979): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000004c0)={[{@utf8}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@unhide}, {@noadinicb}, {@nostrict}, {@uid_forget}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x11}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) rmdir(&(0x7f0000000340)='./bus/file0\x00') 10.822511045s ago: executing program 2 (id=3981): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="36f8c35371956e4f97a54fd2c44dba6172b1db9c34c1"], 0x1, 0xda6, &(0x7f0000003c80)="$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") socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x84, 0x40000000, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xff07}, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioprio_set$pid(0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 9.860777286s ago: executing program 1 (id=3982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) 9.860017337s ago: executing program 3 (id=3983): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x14787e, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0xb, 0x0, 0x0, 0x24ca}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="90", 0x1}], 0x1) 9.764196012s ago: executing program 6 (id=3984): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x5, 0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfffd, r6, 0x0}]) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) preadv(r8, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 8.264596213s ago: executing program 2 (id=3985): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008a7080000a4cab77c7b8af8ff00000000bfa200000000000207020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 8.166252226s ago: executing program 3 (id=3986): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x40000000, @empty}, 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000280)=0xc) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x9, 0x0, {0x0, 0x10001, 0x100000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) 7.913662792s ago: executing program 0 (id=3987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, 0x0) read$FUSE(r1, &(0x7f00000095c0)={0x2020}, 0x2020) io_submit(0x0, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) 6.800474446s ago: executing program 0 (id=3988): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x191400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 6.76995905s ago: executing program 2 (id=3989): r0 = io_uring_setup(0x7fad, &(0x7f0000000080)={0x0, 0x86b5, 0x200, 0x0, 0x2af}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x551e, &(0x7f00000079c0)="$eJzs3E1rY+UXAPCTvsz7f6b8ceFuLgxCC5Mw6bSD7qrO4At2KKOCrjRN0pCZJLc0aVq7cuFSXPhNRMGVSz+DC9fuxIXiTlBy76226kDFpJmpvx/cnPs8eXJyntAWzr0lAfxnLSQ//1iKq3ExImYj4kpEdl4qjsxaHp6NiOsRMXPkKBXzv0+ci4hLEXF1lDzPWSqe+vTm8MbqD6//9NU35+cuf/blt9PbNTBtz0VEdzs/3+vmMW3l8WExXxu2s9hdGRYxf6L7qBinedxrbmYZ9mqH62pZvN3K16fbu/1R3OrU6qPYam9l89u9/A37w9ZhnuwFD2s72bjR3Mxiu59msXWQ17V/kP9tO+gP8jyNIt8HWfoYDA5jPt/cb+b72X6UxXpvUMznedNGc38Uh0Us3i7qaaeR1bH5bz7pJ9sb7d7ufjJs7vTbaS9ZrVSfr1TvlKs7aaM5aK6Ua93GnZVksdUZLSsPmrXuWitNW51mpZ52l64ttur1crWaLN5tbrZrvaRardyu3CqvLhVnN5NX7r+ddBrJ4ii+1O7tDtqdfrKV7iT5K5aS5crtF5aSG9XkzfWNZOPBvXvrG2+9d/fd+y+uv/ZysegvZSWLy7eWl8vVW+Xl6tJJdlmazP6TY/t/ZzZisvv/qCj6H+8fJuTxv1pHzU28DoCniP4fmIbJ9f87DyIm3/+H/n8sxtj/PsH9v/3DRJys/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Az6bv7zV7OThXx8uZj/XzH1/2JcioiZiPj1b8zGuWM5Z4s8849ZP/+nGr4uRZZh9B7ni+NSRKwVxy/XJv0pAAAAwNn1xYfXP8m79fxhYdoFcZryizYzV94fU75SRMwvfD+mbDOjh2fGlCz7+Z6L/TFlyy5gXRhTsvyS29y4sp3I7LFw4Ugo5WHmVMsBAABOxfFO4HS7EAAAAE7Tx9MugOkoxeGtzMN7wdl/3v9xQ/DisREAAADwFCpNuwAAAABg4rL+3/f/AQAAwNmWf/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MbO3eSmDcRxAP3b4EK/VFR136t0B8foEbrssuIAvQQHyIJcIRfgDGSXI0QQ4XEIRCyQPLaV6D3JDGONfp5BZjEz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL238//7fN2e3byTMaAAAA4JJttV7UX2ap/rm5/7W59b2pFxFRRsSlufsoPpxljpqc6qX9zWn76lUf7iLqhMMzJs31KSJ+Ndfjt65/BQAAAHi/NsvVPM3W08ds6A6RR3lVq7RoU375nempRURUs4dMaeUh70emsPr9HsffTGn1AtY0U1hachvnSrtK/Xc/rtpNT4oiFZffoGMns40dAADo0eis6HcWAgAAQJ/+DN0BhlHE81bmcStwkopme+/jWQ0AAAB4g4qhOwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7Yn3cUiGEoBoBas/l1wfc/bBCkSJU2zQwYhISLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndLyPj0Z5J/m0bllYzydqpYevUsHduOPphfncHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBdv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz+vcVRxAMDfzOxsbVRco+whIgoe9GK329ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLeQSbznsIYJnZWZnspMf4PprZpP9fODN++4wzPu+WQj5znsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlEZvT+IkO3TGcVyce7R3bzXrHx/qMw82t5eylsVRnUmfDC9WP0Td5hIBAABgfiRlfR9C2Em3lrM+7uT1f1pek9X83z49jst6/nDdX/Zl7Z+1X37efX5/oM54nOym19aGg/NHU2n9f7Ocbc/85RWt/Mnn716S/AuJ39t4bpTmzzP6+uHDd9p5eKaObAGAf+Jc2RdB+ftQ1vebTAyAudGqFN5l/Z90ms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA6jjfBkGUchhKXWJM483ru3elz/YHN7qWyX79/fDF9O7pndIg0hXFsbDs7XOpvZdvvO3Rsrw+HgVv3BSyGEpkZ/q5j+jQ+muDiE/270hQYf+LwGcfFlz0o+JyNo8IcSAACnUlq0rK7fSbeWs3PRYgh/fHew/n+1Eocp6//dDy8/qo5Vrf/7tc1w9vXWb37au33n7utrN1euD64PPn7jQv/N/sUrly5d6eXvSnremAAAAPDvtItWrf/jxaPr/wuVOExZ/3/2Tf+L6liJ+v9Yk0W/pjMBAACYb8++/Ptv0THno3Y7fL6yvn6rPz7uf74wPjaQ6t92pmjV+j9ZbDorAAAAoA6jjejA+v/VShymXP9/6vsXfqzeMwkhnC3W/8+tfjK8Wt90Zlodf07c9BwBAABo1tmiVdf/03z/f7y/5SEOIbz2yjgu/g3gVPV/8u5XP1THqu7/v1jfFGdS3B0/j7zvhtDqNp0RAAAAp9kTRcuK/V/TreWPflp4v23/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/gwAAP//Skw9WQ==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) syz_open_procfs(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) io_uring_setup(0x6ddd, &(0x7f0000000440)={0x0, 0x200000, 0x0, 0x800000, 0xf3, 0x0, r0}) sched_setscheduler(0x0, 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x145142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r4, 0x20, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 6.690964761s ago: executing program 6 (id=3990): dup(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0) 6.689890181s ago: executing program 3 (id=3991): ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x9, 0x0, 0xb83, 0x3}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4772507cbe3d7826", "a200c1a19549c55ab4d93fb750dac8ae286eb70d8b069276f8385b53069bc694", "0600", "8ecb156f4fd9e229"}, 0x38) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(0x4) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000040)={[{@discard}, {@snapshot={'cp', 0x3d, 0x3}}, {@discard}, {@snapshot={'cp', 0x3d, 0xfffffffffffffffd}}, {@norecovery}, {@snapshot={'cp', 0x3d, 0x3}}, {@discard}, {@order_relaxed}, {@nodiscard}]}, 0xff, 0xa0d, &(0x7f00000014c0)="$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") socket(0x15, 0x5, 0x0) 3.982457074s ago: executing program 1 (id=3992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], 0x1) getpgid(r0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.966777311s ago: executing program 2 (id=3993): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b8000"/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) 3.451433852s ago: executing program 0 (id=3994): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}]}}, 0xf) 3.392361263s ago: executing program 6 (id=3995): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000004c0)={[{@utf8}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@unhide}, {@noadinicb}, {@nostrict}, {@uid_forget}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x11}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) rmdir(&(0x7f0000000340)='./bus/file0\x00') 2.558715391s ago: executing program 6 (id=3996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_register(r0, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]\xc5$\xe4\x92p\xa2ay\xf6\x1f\xc7\x18Z\xefU\xf7\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd70000000000009006451e3d83dcf60c000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x2) 2.450407472s ago: executing program 0 (id=3997): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1e, 0x20, 0x104, &(0x7f0000000240)="98e3f914795e11486b1012a8ace11d1c7660887aa165c255f48cb418d61382f5e3cea385938f78c9e49fb498969ffea8c035f3faf77f391c582dea8157bbc7ce3ebd7b2f62628051deb1d46f3f583f809de2c198a98c214986758dd96b07d52180ce8278d13d66da857cd4311cbaa2b4f642b1b3943e9a4a94e7925cdbe44fc3e8b8f1ead00ee7027a44f50678ae47404f07f4931f141ebf4d8df7fa7d18d9b3d3d507d5c3e61a6e318b1f8e3c36ea87913c39ddaf5e3c6f97617a73419e4818f7aa66dbcc80d54930453a12017457557ef260d16b3cd65aaad00bb8335dee75d4c5e4eab56a71d9413c1291d20dc6e246e0f5924c9248582aa5b11963521499b1bddcca593ee92de59f03e47382cd96ca4358b2046144e4380ce57551b4e4cbc0b39ae8a2009862287d7052d1747bd50d8d81caf9c1981f0430f9964942fa64db7ebd14f34a49bfed3bdd9071f87f463f735b24dd6ea08def996a390e0512315fec6f036e512354829b893e7681cce8783d7421943969acfbba2b52e6071ba47ee0281750e2d160fe82ae2774064b8bcb51db5fb77a4086a7d3dddf674689959e66fb9a35849a5a1954e01b0052649e36af12b6b439ef9e58ce22069859f52da8ee07aa920bbd4a70849646f87ed7f47c92db7dfc75c8c12d51638a7b4efc089654d5bd2656dcb62c5cc001dbc6ebcbd6666d71960afb793421f3da14272b6fd558a22d341787cad0cdf935c80612c6927ff28fdb8926399379435be9e5dca2b12d709147ba546b714af4c40cc2309bc89929430a6f0b6975ed286276699c153b30e8fc0bca490ca817c163fce603f498a484b6308b6a2f9c7fc85484cc9517293888d483efb60c9e0241161a2b218992e766116831a718e137b45f51f977afb71cc208b00d024e4bb052c2f2e5afdbda71da20968aff298de90305e33cd48a4846803dc138cb1f387b421c37a7c726785ffea42757ce20cfa72d4c22d674e46db928e4f41a13751b2dff3ec03b0dec6f59a19be92c56513103e1722b4841c0ac6d7cab8be37842062357db39c28f4b108ae7f4d24415294323573d19b479bea1dd3b3057b0782d0453af3011feafbdab0e36518c71871f2c4b403ad4111e0970f95abf10b1d2577ece8c44cf413a5a9411fedbcd1e14fe3b7c022821fb380561ad83dfae7b484ca5877ffa6f3d4be3f531c2358e532274b2593124b5117fb5b2756fddf519b94fce9f643bd75262605a82eb8d35c7d4ef18837792cbfef6e13d2ccf09120193d096518a86d3cdce843c38e6bbc9492c067f45479c04ec498a5a9786ce6ae049ec656b7974fe628313fda36b5eac62c5bbb8a2b451214ad92613e8626df64bac51bc59e5a4cdeebeec22e1dabc1d5dc70e2f467fe645dcdf8bcc9870f27eba8c55d3df2a567876d30d1288cd3426cc6a1f16e302bf22c3582d"}) io_uring_setup(0x7d98, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma +cpusek '], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.417741194s ago: executing program 3 (id=3998): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="6b5ea0cd187ede3e538bc3543948db9297109ca599cded039b156251280c7ab65af41be8ce62414fe0e3ec3ee9e934d857d01d2100604b4cb96352c190d2a873f0456fbfe4300bb80f3eb66e6ac9489e2c0a22124aa2564aa23304616ea710e465bb0aa8ba8801dc0b08424236366badeb", 0x71}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ioctl(r1, 0x1, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6daf8d4a4b9c578b) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_connect(0x0, 0x3c, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xbd, 0xe3, 0x81, 0x10, 0x582, 0x10, 0xf0ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x1, 0x9, 0xb0, 0x2, [{{0x9, 0x4, 0x9b, 0x5, 0x2, 0x3a, 0xd3, 0x4b, 0xf0, [], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0xfb, 0x6, [@generic={0x6, 0xb, '-thQ'}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) 1.320152123s ago: executing program 0 (id=3999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, 0x0) read$FUSE(r1, &(0x7f00000095c0)={0x2020}, 0x2020) io_submit(0x0, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) 220.465056ms ago: executing program 0 (id=4000): syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 14.749657ms ago: executing program 3 (id=4001): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x5, 0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfffd, r6, 0x0}]) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) preadv(r8, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 0s ago: executing program 6 (id=4002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) kernel console output (not intermixed with test programs): nused estimator thread 0... [ 1555.537441][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.374075][T17798] loop6: detected capacity change from 0 to 63 [ 1556.403436][T17798] buffer_io_error: 91 callbacks suppressed [ 1556.403462][T17798] Buffer I/O error on dev loop6, logical block 0, async page read [ 1556.512983][T17798] Buffer I/O error on dev loop6, logical block 1, async page read [ 1556.583811][T17798] Buffer I/O error on dev loop6, logical block 2, async page read [ 1556.830500][T17798] Buffer I/O error on dev loop6, logical block 3, async page read [ 1558.288503][T17804] Buffer I/O error on dev loop6, logical block 0, async page read [ 1558.430261][T17804] Buffer I/O error on dev loop6, logical block 1, async page read [ 1558.438668][T17804] Buffer I/O error on dev loop6, logical block 2, async page read [ 1558.456622][T17804] Buffer I/O error on dev loop6, logical block 3, async page read [ 1558.509472][T17809] Buffer I/O error on dev loop6, logical block 0, async page read [ 1558.539631][T17809] Buffer I/O error on dev loop6, logical block 1, async page read [ 1558.604606][T17818] loop1: detected capacity change from 0 to 16 [ 1558.644039][T17818] erofs (device loop1): mounted with root inode @ nid 36. [ 1558.661497][T17818] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1558.682096][T17818] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851] [ 1558.690591][T17818] erofs (device loop1): read error -117 @ 43 of nid 36 [ 1559.677749][T17821] loop3: detected capacity change from 0 to 40427 [ 1559.725236][T17821] F2FS-fs (loop3): invalid crc value [ 1559.750053][T17821] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1559.832525][T17821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1559.863223][ T30] audit: type=1800 audit(1752626107.770:207): pid=17821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3580" name="file1" dev="loop3" ino=14 res=0 errno=0 [ 1559.977770][ T5850] syz-executor: attempt to access beyond end of device [ 1559.977770][ T5850] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1560.003046][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1560.003101][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1560.003123][ T5850] Call Trace: [ 1560.003135][ T5850] [ 1560.003149][ T5850] dump_stack_lvl+0x16c/0x1f0 [ 1560.003212][ T5850] f2fs_handle_critical_error+0x621/0x9f0 [ 1560.003260][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.003304][ T5850] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1560.003353][ T5850] f2fs_write_end_io+0x785/0xc20 [ 1560.003406][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1560.003461][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.003514][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1560.003562][ T5850] bio_endio+0x70d/0x850 [ 1560.003603][ T5850] submit_bio_noacct+0x56d/0x1eb0 [ 1560.003666][ T5850] __submit_merged_bio+0x33c/0x770 [ 1560.003721][ T5850] __submit_merged_write_cond+0x319/0x3f0 [ 1560.003783][ T5850] f2fs_write_cache_pages+0x2067/0x2570 [ 1560.003866][ T5850] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1560.003932][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.003976][ T5850] ? __lock_acquire+0x622/0x1c90 [ 1560.004046][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.004171][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.004216][ T5850] ? bpf_ksym_find+0x124/0x1c0 [ 1560.004269][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.004321][ T5850] f2fs_write_data_pages+0x4ad/0xd90 [ 1560.004384][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1560.004455][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.004501][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1560.004561][ T5850] do_writepages+0x27a/0x600 [ 1560.004628][ T5850] ? __pfx_do_writepages+0x10/0x10 [ 1560.004691][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 1560.004735][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.004779][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 1560.004833][ T5850] filemap_fdatawrite_wbc+0x104/0x160 [ 1560.004898][ T5850] __filemap_fdatawrite_range+0xb2/0xf0 [ 1560.004945][ T5850] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1560.005046][ T5850] ? find_held_lock+0x2b/0x80 [ 1560.005084][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005118][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 1560.005151][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005189][ T5850] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1560.005249][ T5850] block_operations+0x2a3/0xfd0 [ 1560.005299][ T5850] ? __pfx___schedule+0x10/0x10 [ 1560.005340][ T5850] ? __pfx_block_operations+0x10/0x10 [ 1560.005425][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005458][ T5850] ? down_write+0x14d/0x200 [ 1560.005485][ T5850] ? __pfx_down_write+0x10/0x10 [ 1560.005513][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005546][ T5850] ? rcu_is_watching+0x12/0xc0 [ 1560.005587][ T5850] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1560.005637][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005674][ T5850] ? kfree+0x2b4/0x4d0 [ 1560.005696][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005732][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005765][ T5850] ? rcu_is_watching+0x12/0xc0 [ 1560.005800][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.005833][ T5850] ? kthread_stop+0x273/0x650 [ 1560.005863][ T5850] kill_f2fs_super+0x3c2/0x470 [ 1560.005889][ T5850] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1560.005914][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 1560.005969][ T5850] deactivate_locked_super+0xc1/0x1a0 [ 1560.006000][ T5850] deactivate_super+0xde/0x100 [ 1560.006030][ T5850] cleanup_mnt+0x225/0x450 [ 1560.006064][ T5850] task_work_run+0x150/0x240 [ 1560.006096][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 1560.006124][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.006160][ T5850] ? __pfx___x64_sys_umount+0x10/0x10 [ 1560.006202][ T5850] exit_to_user_mode_loop+0xeb/0x110 [ 1560.006237][ T5850] do_syscall_64+0x3f6/0x4c0 [ 1560.006299][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.006327][ T5850] RIP: 0033:0x7fb05618fc57 [ 1560.006349][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1560.006377][ T5850] RSP: 002b:00007ffef8affee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1560.006405][ T5850] RAX: 0000000000000000 RBX: 00007fb056210925 RCX: 00007fb05618fc57 [ 1560.006424][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef8afffa0 [ 1560.006441][ T5850] RBP: 00007ffef8afffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1560.006459][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef8b01030 [ 1560.006477][ T5850] R13: 00007fb056210925 R14: 000000000017cd6a R15: 00007ffef8b01070 [ 1560.006513][ T5850] [ 1560.010291][ T5850] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1560.803853][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1560.803908][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1560.803932][ T5850] Call Trace: [ 1560.803948][ T5850] [ 1560.803963][ T5850] dump_stack_lvl+0x16c/0x1f0 [ 1560.804019][ T5850] f2fs_handle_critical_error+0x621/0x9f0 [ 1560.804056][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804089][ T5850] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1560.804128][ T5850] f2fs_write_end_io+0x785/0xc20 [ 1560.804169][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1560.804212][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804254][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1560.804291][ T5850] bio_endio+0x70d/0x850 [ 1560.804322][ T5850] submit_bio_noacct+0x56d/0x1eb0 [ 1560.804368][ T5850] __submit_merged_bio+0x33c/0x770 [ 1560.804416][ T5850] __submit_merged_write_cond+0x319/0x3f0 [ 1560.804465][ T5850] f2fs_write_cache_pages+0x2067/0x2570 [ 1560.804533][ T5850] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1560.804584][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804616][ T5850] ? __lock_acquire+0x622/0x1c90 [ 1560.804672][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804781][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804815][ T5850] ? bpf_ksym_find+0x124/0x1c0 [ 1560.804856][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.804896][ T5850] f2fs_write_data_pages+0x4ad/0xd90 [ 1560.804947][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1560.805004][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805038][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1560.805084][ T5850] do_writepages+0x27a/0x600 [ 1560.805135][ T5850] ? __pfx_do_writepages+0x10/0x10 [ 1560.805178][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 1560.805211][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805244][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 1560.805285][ T5850] filemap_fdatawrite_wbc+0x104/0x160 [ 1560.805335][ T5850] __filemap_fdatawrite_range+0xb2/0xf0 [ 1560.805371][ T5850] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1560.805459][ T5850] ? find_held_lock+0x2b/0x80 [ 1560.805496][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805529][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 1560.805562][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805601][ T5850] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1560.805664][ T5850] block_operations+0x2a3/0xfd0 [ 1560.805713][ T5850] ? __pfx___schedule+0x10/0x10 [ 1560.805754][ T5850] ? __pfx_block_operations+0x10/0x10 [ 1560.805847][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805880][ T5850] ? down_write+0x14d/0x200 [ 1560.805907][ T5850] ? __pfx_down_write+0x10/0x10 [ 1560.805936][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.805969][ T5850] ? rcu_is_watching+0x12/0xc0 [ 1560.806011][ T5850] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1560.806064][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.806096][ T5850] ? kfree+0x2b4/0x4d0 [ 1560.806119][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.806156][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.806189][ T5850] ? rcu_is_watching+0x12/0xc0 [ 1560.806224][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.806257][ T5850] ? kthread_stop+0x273/0x650 [ 1560.806301][ T5850] kill_f2fs_super+0x3c2/0x470 [ 1560.806328][ T5850] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1560.806352][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 1560.806427][ T5850] deactivate_locked_super+0xc1/0x1a0 [ 1560.806459][ T5850] deactivate_super+0xde/0x100 [ 1560.806490][ T5850] cleanup_mnt+0x225/0x450 [ 1560.806526][ T5850] task_work_run+0x150/0x240 [ 1560.806559][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 1560.806587][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1560.806623][ T5850] ? __pfx___x64_sys_umount+0x10/0x10 [ 1560.806668][ T5850] exit_to_user_mode_loop+0xeb/0x110 [ 1560.806703][ T5850] do_syscall_64+0x3f6/0x4c0 [ 1560.806751][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.806779][ T5850] RIP: 0033:0x7fb05618fc57 [ 1560.806801][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1560.806834][ T5850] RSP: 002b:00007ffef8affee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1560.806870][ T5850] RAX: 0000000000000000 RBX: 00007fb056210925 RCX: 00007fb05618fc57 [ 1560.806890][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef8afffa0 [ 1560.806907][ T5850] RBP: 00007ffef8afffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1560.806924][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef8b01030 [ 1560.806942][ T5850] R13: 00007fb056210925 R14: 000000000017cd6a R15: 00007ffef8b01070 [ 1560.806983][ T5850] [ 1561.281047][ T5850] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1561.445504][T17500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1561.630133][T17500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1561.642959][T17500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1561.680175][T17500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1562.726688][T16250] Bluetooth: hci5: command 0x0406 tx timeout [ 1563.342610][T17850] loop1: detected capacity change from 0 to 256 [ 1563.383584][T17850] FAT-fs (loop1): Directory bread(block 64) failed [ 1563.390139][T17850] FAT-fs (loop1): Directory bread(block 65) failed [ 1563.396796][T17850] FAT-fs (loop1): Directory bread(block 66) failed [ 1563.403341][T17850] FAT-fs (loop1): Directory bread(block 67) failed [ 1563.409937][T17850] FAT-fs (loop1): Directory bread(block 68) failed [ 1563.416503][T17850] FAT-fs (loop1): Directory bread(block 69) failed [ 1563.423710][T17850] FAT-fs (loop1): Directory bread(block 70) failed [ 1563.430252][T17850] FAT-fs (loop1): Directory bread(block 71) failed [ 1563.436881][T17850] FAT-fs (loop1): Directory bread(block 72) failed [ 1563.443469][T17850] FAT-fs (loop1): Directory bread(block 73) failed [ 1563.680580][T17500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.786025][T17500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.866752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.873970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.924214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.931447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.499591][T17861] loop1: detected capacity change from 0 to 4096 [ 1565.512347][T17864] nbd3: detected capacity change from 0 to 8589934592 [ 1565.615136][T17876] loop6: detected capacity change from 0 to 16 [ 1565.638851][T17876] erofs (device loop6): mounted with root inode @ nid 36. [ 1565.657409][T17876] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1566.469773][T17876] erofs (device loop6): failed to decompress -29 in[58, 4038] out[1851] [ 1566.610880][T17876] erofs (device loop6): read error -117 @ 43 of nid 36 [ 1566.678050][T17861] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1566.698675][T17866] block nbd3: shutting down sockets [ 1567.404197][T17883] ntfs3(loop1): failed to convert "0000" to iso8859-9 [ 1567.505819][T17861] ntfs3(loop1): failed to convert name for inode 1e. [ 1567.516385][T17883] ntfs3(loop1): failed to convert name for inode 1e. [ 1567.580129][T17861] ntfs3(loop1): ino=1f, mi_enum_attr [ 1567.590337][T17883] ntfs3(loop1): ino=1f, mi_enum_attr [ 1567.602181][T17861] ntfs3(loop1): ino=1f, mi_enum_attr [ 1567.731993][T17890] trusted_key: encrypted_key: insufficient parameters specified [ 1567.813199][T17883] ntfs3(loop1): ino=1f, mi_enum_attr [ 1568.155841][T17894] loop6: detected capacity change from 0 to 164 [ 1568.183487][T17894] Unable to read rock-ridge attributes [ 1568.263834][T17894] Unable to read rock-ridge attributes [ 1568.270590][T17500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.301245][T17894] Unable to read rock-ridge attributes [ 1568.361362][T17894] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1568.411932][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1568.542676][T17900] loop2: detected capacity change from 0 to 256 [ 1568.679996][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1568.882505][T17500] veth0_vlan: entered promiscuous mode [ 1568.898327][T17500] veth1_vlan: entered promiscuous mode [ 1568.926265][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1568.940551][T17500] veth0_macvtap: entered promiscuous mode [ 1568.982221][T17500] veth1_macvtap: entered promiscuous mode [ 1568.992683][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1569.002138][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1569.002538][T17894] Unable to read rock-ridge attributes [ 1569.010219][ T24] usb 2-1: SerialNumber: syz [ 1569.031018][T17894] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1569.044259][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1569.120236][T17900] FAT-fs (loop2): Directory bread(block 64) failed [ 1569.143240][T17900] FAT-fs (loop2): Directory bread(block 65) failed [ 1569.172090][T17900] FAT-fs (loop2): Directory bread(block 66) failed [ 1569.188663][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.204640][T17900] FAT-fs (loop2): Directory bread(block 67) failed [ 1569.276607][ T5943] usb 2-1: USB disconnect, device number 6 [ 1569.669322][T17900] FAT-fs (loop2): Directory bread(block 68) failed [ 1569.680906][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.688813][T17900] FAT-fs (loop2): Directory bread(block 69) failed [ 1569.713633][T17894] Unable to read rock-ridge attributes [ 1569.730572][T17900] FAT-fs (loop2): Directory bread(block 70) failed [ 1569.750256][T17500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.779961][T17900] FAT-fs (loop2): Directory bread(block 71) failed [ 1569.791797][T17500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.807752][T17900] FAT-fs (loop2): Directory bread(block 72) failed [ 1569.815169][T17500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.830844][T17900] FAT-fs (loop2): Directory bread(block 73) failed [ 1569.840643][T17500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.265674][T17908] syz.3.3602 (17908): drop_caches: 2 [ 1571.303731][T13230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.340631][T13230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.392061][ T5943] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1571.504498][T13001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.799836][T17916] loop2: detected capacity change from 0 to 40427 [ 1571.814410][T17916] F2FS-fs (loop2): invalid crc value [ 1571.832213][T13001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.832735][T17916] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1571.851005][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 1571.906948][ T5943] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.923686][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1571.936067][T17916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1571.951479][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1571.968270][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1571.986025][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.063294][ T5943] usbtmc 2-1:16.0: bulk endpoints not found [ 1572.091909][ T30] audit: type=1800 audit(1752626119.950:208): pid=17916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3606" name="file1" dev="loop2" ino=14 res=0 errno=0 [ 1572.102511][T17924] overlayfs: missing 'lowerdir' [ 1572.370688][T13958] usb 2-1: USB disconnect, device number 7 [ 1573.373325][ T5846] syz-executor: attempt to access beyond end of device [ 1573.373325][ T5846] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1573.401931][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1573.401985][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1573.402009][ T5846] Call Trace: [ 1573.402021][ T5846] [ 1573.402035][ T5846] dump_stack_lvl+0x16c/0x1f0 [ 1573.402098][ T5846] f2fs_handle_critical_error+0x621/0x9f0 [ 1573.402147][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.402192][ T5846] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1573.402241][ T5846] f2fs_write_end_io+0x785/0xc20 [ 1573.402294][ T5846] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1573.402354][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.402407][ T5846] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1573.402455][ T5846] bio_endio+0x70d/0x850 [ 1573.402494][ T5846] submit_bio_noacct+0x56d/0x1eb0 [ 1573.402552][ T5846] __submit_merged_bio+0x33c/0x770 [ 1573.402607][ T5846] __submit_merged_write_cond+0x319/0x3f0 [ 1573.402674][ T5846] f2fs_write_cache_pages+0x2067/0x2570 [ 1573.402756][ T5846] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1573.402813][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.402877][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.402922][ T5846] ? __lock_acquire+0x622/0x1c90 [ 1573.402995][ T5846] ? __lock_acquire+0x622/0x1c90 [ 1573.403078][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403159][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403202][ T5846] ? mod_memcg_lruvec_state+0x394/0x610 [ 1573.403270][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403322][ T5846] f2fs_write_data_pages+0x4ad/0xd90 [ 1573.403388][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1573.403443][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403498][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403546][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1573.403605][ T5846] do_writepages+0x27a/0x600 [ 1573.403674][ T5846] ? __pfx_do_writepages+0x10/0x10 [ 1573.403729][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 1573.403771][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.403813][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 1573.403866][ T5846] filemap_fdatawrite_wbc+0x104/0x160 [ 1573.403929][ T5846] __filemap_fdatawrite_range+0xb2/0xf0 [ 1573.403974][ T5846] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1573.404070][ T5846] ? find_held_lock+0x2b/0x80 [ 1573.404117][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404161][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 1573.404204][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404247][ T5846] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1573.404324][ T5846] block_operations+0x2a3/0xfd0 [ 1573.404385][ T5846] ? __pfx___schedule+0x10/0x10 [ 1573.404438][ T5846] ? __pfx_block_operations+0x10/0x10 [ 1573.404546][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404588][ T5846] ? down_write+0x14d/0x200 [ 1573.404622][ T5846] ? __pfx_down_write+0x10/0x10 [ 1573.404659][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404709][ T5846] ? rcu_is_watching+0x12/0xc0 [ 1573.404761][ T5846] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1573.404835][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404877][ T5846] ? rcu_is_watching+0x12/0xc0 [ 1573.404923][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1573.404967][ T5846] ? kthread_stop+0x273/0x650 [ 1573.405006][ T5846] kill_f2fs_super+0x3c2/0x470 [ 1573.405041][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1573.405095][ T5846] deactivate_locked_super+0xc1/0x1a0 [ 1573.405136][ T5846] deactivate_super+0xde/0x100 [ 1573.405178][ T5846] cleanup_mnt+0x225/0x450 [ 1573.405223][ T5846] task_work_run+0x150/0x240 [ 1573.405266][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 1573.405320][ T5846] exit_to_user_mode_loop+0xeb/0x110 [ 1573.405366][ T5846] do_syscall_64+0x3f6/0x4c0 [ 1573.405428][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.405466][ T5846] RIP: 0033:0x7f82eed8fc57 [ 1573.405495][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1573.405530][ T5846] RSP: 002b:00007ffe1cf53148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1573.405565][ T5846] RAX: 0000000000000000 RBX: 00007f82eee10925 RCX: 00007f82eed8fc57 [ 1573.405589][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1cf53200 [ 1573.405613][ T5846] RBP: 00007ffe1cf53200 R08: 0000000000000000 R09: 0000000000000000 [ 1573.405637][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1cf54290 [ 1573.405661][ T5846] R13: 00007f82eee10925 R14: 000000000017fcbe R15: 00007ffe1cf542d0 [ 1573.405716][ T5846] [ 1573.999247][ T5846] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1574.022600][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1574.022653][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1574.022675][ T5846] Call Trace: [ 1574.022687][ T5846] [ 1574.022701][ T5846] dump_stack_lvl+0x16c/0x1f0 [ 1574.022762][ T5846] f2fs_handle_critical_error+0x621/0x9f0 [ 1574.022810][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.022855][ T5846] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1574.022903][ T5846] f2fs_write_end_io+0x785/0xc20 [ 1574.022956][ T5846] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1574.023010][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023064][ T5846] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1574.023111][ T5846] bio_endio+0x70d/0x850 [ 1574.023150][ T5846] submit_bio_noacct+0x56d/0x1eb0 [ 1574.023208][ T5846] __submit_merged_bio+0x33c/0x770 [ 1574.023263][ T5846] __submit_merged_write_cond+0x319/0x3f0 [ 1574.023325][ T5846] f2fs_write_cache_pages+0x2067/0x2570 [ 1574.023416][ T5846] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1574.023474][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023538][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023582][ T5846] ? __lock_acquire+0x622/0x1c90 [ 1574.023653][ T5846] ? __lock_acquire+0x622/0x1c90 [ 1574.023734][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023814][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023857][ T5846] ? mod_memcg_lruvec_state+0x394/0x610 [ 1574.023924][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.023976][ T5846] f2fs_write_data_pages+0x4ad/0xd90 [ 1574.024040][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1574.024094][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.024149][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.024198][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1574.024258][ T5846] do_writepages+0x27a/0x600 [ 1574.024323][ T5846] ? __pfx_do_writepages+0x10/0x10 [ 1574.024380][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 1574.024427][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.024471][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 1574.024525][ T5846] filemap_fdatawrite_wbc+0x104/0x160 [ 1574.024590][ T5846] __filemap_fdatawrite_range+0xb2/0xf0 [ 1574.024636][ T5846] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1574.024733][ T5846] ? find_held_lock+0x2b/0x80 [ 1574.024781][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.024825][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 1574.024868][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.024918][ T5846] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1574.024996][ T5846] block_operations+0x2a3/0xfd0 [ 1574.025059][ T5846] ? __pfx___schedule+0x10/0x10 [ 1574.025113][ T5846] ? __pfx_block_operations+0x10/0x10 [ 1574.025223][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.025267][ T5846] ? down_write+0x14d/0x200 [ 1574.025302][ T5846] ? __pfx_down_write+0x10/0x10 [ 1574.025340][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.025384][ T5846] ? rcu_is_watching+0x12/0xc0 [ 1574.025443][ T5846] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1574.025517][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.025561][ T5846] ? rcu_is_watching+0x12/0xc0 [ 1574.025608][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1574.025652][ T5846] ? kthread_stop+0x273/0x650 [ 1574.025691][ T5846] kill_f2fs_super+0x3c2/0x470 [ 1574.025726][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1574.025780][ T5846] deactivate_locked_super+0xc1/0x1a0 [ 1574.025820][ T5846] deactivate_super+0xde/0x100 [ 1574.025860][ T5846] cleanup_mnt+0x225/0x450 [ 1574.025904][ T5846] task_work_run+0x150/0x240 [ 1574.025946][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 1574.026001][ T5846] exit_to_user_mode_loop+0xeb/0x110 [ 1574.026047][ T5846] do_syscall_64+0x3f6/0x4c0 [ 1574.026108][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.026146][ T5846] RIP: 0033:0x7f82eed8fc57 [ 1574.026175][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1574.026212][ T5846] RSP: 002b:00007ffe1cf53148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1574.026247][ T5846] RAX: 0000000000000000 RBX: 00007f82eee10925 RCX: 00007f82eed8fc57 [ 1574.026271][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1cf53200 [ 1574.026313][ T5846] RBP: 00007ffe1cf53200 R08: 0000000000000000 R09: 0000000000000000 [ 1574.026336][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1cf54290 [ 1574.026360][ T5846] R13: 00007f82eee10925 R14: 000000000017fcbe R15: 00007ffe1cf542d0 [ 1574.026413][ T5846] [ 1574.026426][ T5846] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1574.906437][T17940] loop0: detected capacity change from 0 to 16 [ 1574.930499][T17940] erofs (device loop0): mounted with root inode @ nid 36. [ 1574.948377][T17940] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1575.027403][T17940] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851] [ 1575.036073][T17940] erofs (device loop0): read error -117 @ 43 of nid 36 [ 1575.050571][T17942] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1575.059278][T17942] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851] [ 1575.068165][T17942] erofs (device loop0): read error -117 @ 43 of nid 36 [ 1577.296160][T16250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1577.310782][T16250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1577.321602][T16250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1577.341073][T16250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1577.355947][T16250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1578.378004][T17970] loop0: detected capacity change from 0 to 128 [ 1578.467003][T17970] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1578.564166][T17970] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.445139][T16250] Bluetooth: hci3: command tx timeout [ 1579.605021][T17985] overlayfs: missing 'lowerdir' [ 1579.869310][T17961] chnl_net:caif_netlink_parms(): no params data found [ 1579.926506][T17993] loop1: detected capacity change from 0 to 256 [ 1579.983550][T17500] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1580.158488][T17996] syz.1.3627: attempt to access beyond end of device [ 1580.158488][T17996] loop1: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 1580.243965][T17996] syz.1.3627: attempt to access beyond end of device [ 1580.243965][T17996] loop1: rw=2049, sector=608, nr_sectors = 96 limit=256 [ 1580.466815][T17993] syz.1.3627: attempt to access beyond end of device [ 1580.466815][T17993] loop1: rw=2049, sector=704, nr_sectors = 96 limit=256 [ 1580.490640][T17993] syz.1.3627: attempt to access beyond end of device [ 1580.490640][T17993] loop1: rw=2049, sector=832, nr_sectors = 192 limit=256 [ 1580.529417][T17993] syz.1.3627: attempt to access beyond end of device [ 1580.529417][T17993] loop1: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 1580.655200][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1580.812069][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 1580.833497][ T5929] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.874047][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1580.910188][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1581.005035][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1581.233459][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.584871][T16250] Bluetooth: hci3: command tx timeout [ 1581.691005][ T5929] usbtmc 4-1:16.0: bulk endpoints not found [ 1581.751503][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.799031][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.812113][T17961] bridge_slave_0: entered allmulticast mode [ 1581.820239][T17961] bridge_slave_0: entered promiscuous mode [ 1581.828869][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.838506][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.845892][T17961] bridge_slave_1: entered allmulticast mode [ 1581.874165][T17961] bridge_slave_1: entered promiscuous mode [ 1581.909418][ T5929] usb 4-1: USB disconnect, device number 8 [ 1582.103802][T18024] loop4: detected capacity change from 0 to 164 [ 1582.349369][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.361119][T18026] syz.1.3629: attempt to access beyond end of device [ 1582.361119][T18026] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1582.377077][T18024] Unable to read rock-ridge attributes [ 1582.396278][T18023] nbd1: detected capacity change from 0 to 8589934592 [ 1582.703556][T18027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1583.091140][T18026] block nbd1: Send control failed (result -89) [ 1583.178318][T18026] block nbd1: Request send failed, requeueing [ 1583.192348][T18031] Unable to read rock-ridge attributes [ 1583.209364][T18024] Unable to read rock-ridge attributes [ 1583.218759][T18024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1583.242589][T16250] block nbd1: Receive control failed (result -32) [ 1583.264824][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.273536][T16424] block nbd1: Dead connection, failed to find a fallback [ 1583.280942][T16424] block nbd1: shutting down sockets [ 1583.286832][T16424] blk_print_req_error: 15 callbacks suppressed [ 1583.286856][T16424] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.310978][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1583.320783][T18026] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.330332][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1583.344612][T18026] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.443446][T18031] Unable to read rock-ridge attributes [ 1583.449929][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 1583.484842][T18031] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1583.545971][T18034] Unable to read rock-ridge attributes [ 1583.586599][T18026] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.601933][T16250] Bluetooth: hci3: command tx timeout [ 1583.641976][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1583.784472][T17961] team0: Port device team_slave_0 added [ 1583.842951][T18026] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.864376][T18026] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1583.883680][T17961] team0: Port device team_slave_1 added [ 1583.941952][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1584.040953][T18026] I/O error, dev nbd1, sector 8589934588 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1584.139080][T18044] overlayfs: missing 'lowerdir' [ 1584.152832][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 1584.300571][T18026] I/O error, dev nbd1, sector 8589933564 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1584.354874][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.382100][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 1584.401934][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.443889][T18026] I/O error, dev nbd1, sector 8589934584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1584.495087][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 1584.552272][T18026] I/O error, dev nbd1, sector 8589933560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1584.825106][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.838029][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 1584.850645][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 1584.867408][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 1584.887310][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.914529][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.037561][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 1585.049437][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.091636][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 1585.141169][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 1585.192424][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 1585.256217][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1585.272928][T17961] hsr_slave_0: entered promiscuous mode [ 1585.289185][T17961] hsr_slave_1: entered promiscuous mode [ 1585.313085][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1585.333993][T17961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.341598][T17961] Cannot create hsr debugfs directory [ 1585.357881][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 1585.377853][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 1585.399426][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 1585.432395][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 1585.470942][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 1585.535668][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 1585.573210][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 1585.682828][T16250] Bluetooth: hci3: command tx timeout [ 1585.719437][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 1585.736166][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 1585.781018][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 1585.848128][T18026] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1585.897764][T18026] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1588.300016][T17961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.551968][T17961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.107981][T18087] overlayfs: missing 'lowerdir' [ 1592.100711][T17961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.427055][ T30] audit: type=1326 audit(1752626140.330:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1592.513779][ T30] audit: type=1326 audit(1752626140.380:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1592.539145][T17961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.119854][ T30] audit: type=1326 audit(1752626140.380:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1593.168778][ T30] audit: type=1326 audit(1752626140.380:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1593.236443][ T30] audit: type=1326 audit(1752626140.380:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1594.457281][ T30] audit: type=1326 audit(1752626140.380:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1594.622386][ T30] audit: type=1326 audit(1752626140.380:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05618e929 code=0x7ffc0000 [ 1595.132152][T18117] loop6: detected capacity change from 0 to 256 [ 1595.944738][T17961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1597.536532][T17961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1597.551534][T18117] FAT-fs (loop6): Directory bread(block 64) failed [ 1597.599335][T17961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1597.607006][T18117] FAT-fs (loop6): Directory bread(block 65) failed [ 1597.846128][T18117] FAT-fs (loop6): Directory bread(block 66) failed [ 1597.856656][T17961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1597.876601][T18117] FAT-fs (loop6): Directory bread(block 67) failed [ 1597.890562][T18136] overlayfs: missing 'lowerdir' [ 1597.894843][T18117] FAT-fs (loop6): Directory bread(block 68) failed [ 1597.906284][T18117] FAT-fs (loop6): Directory bread(block 69) failed [ 1598.701020][T18117] FAT-fs (loop6): Directory bread(block 70) failed [ 1598.804148][T18117] FAT-fs (loop6): Directory bread(block 71) failed [ 1598.810800][T18117] FAT-fs (loop6): Directory bread(block 72) failed [ 1598.871661][T18117] FAT-fs (loop6): Directory bread(block 73) failed [ 1599.152523][T17961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.230232][T17961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.001915][T17961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1600.031792][T17961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1600.056153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.063405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.120678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.127897][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.848959][T18154] loop4: detected capacity change from 0 to 32768 [ 1600.875467][T18154] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 1600.875467][T18154] clean (size 2912): [ 1600.875467][T18154] flags: 0 [ 1600.875467][T18154] journal_seq: 10 [ 1600.875467][T18154] usage: type=inodes v=8 [ 1600.875467][T18154] usage: type=key_version v=0 [ 1600.875467][T18154] usage: type=reserved v=0 [ 1600.875467][T18154] usage: type=reserved v=0 [ 1600.875467][T18154] usage: type=reserved v=0 [ 1600.875467][T18154] usage: type=reserved v=0 [ 1600.875467][T18154] data_usage: btree: 1/1 [0]=2816 [ 1600.875467][T18154] data_usage: journal: 1/1 [0]=0 [ 1600.875467][T18154] data_usage: user: 1/1 [0]=16 [ 1600.875467][T18154] dev_usage: dev=0 [ 1600.875467][T18154] free: buckets=83 sectors=0 fragmented=0 [ 1600.875467][T18154] sb: buckets=25 sectors=6152 fragmented=248 [ 1600.875467][T18154] journal: buckets=8 sectors=2048 fragmented=0 [ 1600.875467][T18154] btree: buckets=11 sectors=2816 fragmented=0 [ 1600.875467][T18154] user: buckets=1 sectors=16 fragmented=240 [ 1600.875467][T18154] cached: buckets=0 sectors=0 fragmented=13565952 [ 1600.875467][T18154] parity: buckets=0 sectors=0 fragmented=0 [ 1600.875467][T18154] stripe: buckets=0 sectors=0 fragmented=0 [ 1600.875467][T18154] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1600.875467][T18154] need_discard: buckets=0 sectors=0 fragmented=0 [ 1600.875467][T18154] clock: read=0 [ 1600.875467][T18154] blacklist_v2: start=1 end=1280 [ 1600.875467][T18154] btree_root: btree=extents level=0 u64s 11 type xattr SPOS_MAX len 0 [ 1600.876001][T18154] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1600.885868][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.157805][T17961] veth0_vlan: entered promiscuous mode [ 1603.203899][T17961] veth1_vlan: entered promiscuous mode [ 1603.344099][T17961] veth0_macvtap: entered promiscuous mode [ 1603.390085][T17961] veth1_macvtap: entered promiscuous mode [ 1603.508906][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.557999][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.575381][T17961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.601788][T17961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.611378][T17961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.636466][T18193] syz.6.3680: attempt to access beyond end of device [ 1603.636466][T18193] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1603.642168][T18192] overlayfs: missing 'lowerdir' [ 1603.661786][T17961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.703898][T18193] syz.6.3680: attempt to access beyond end of device [ 1603.703898][T18193] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1603.732357][T18190] nbd6: detected capacity change from 0 to 8589934592 [ 1603.768394][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1603.830034][T18193] block nbd6: Send control failed (result -89) [ 1604.029856][T18193] block nbd6: Request send failed, requeueing [ 1604.922446][T16424] block nbd6: Dead connection, failed to find a fallback [ 1604.929639][T16424] block nbd6: shutting down sockets [ 1604.934978][T16424] blk_print_req_error: 20 callbacks suppressed [ 1604.935002][T16424] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.092673][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 1605.461876][T18193] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.526460][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1, location=1 [ 1605.564834][T18193] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.621615][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1605.653385][T18193] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.732240][T18193] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.741677][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1605.831001][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.873430][T18209] loop3: detected capacity change from 0 to 512 [ 1605.883787][T18193] I/O error, dev nbd6, sector 8589934588 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1605.891059][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.905520][T18209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1605.960619][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 1605.994869][T18209] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1606.022369][T18193] I/O error, dev nbd6, sector 8589933564 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1606.102127][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 1606.141957][T18193] I/O error, dev nbd6, sector 8589934584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1606.164978][T18209] EXT4-fs (loop3): 1 truncate cleaned up [ 1606.185829][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 1606.190709][T18209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.202490][T18193] I/O error, dev nbd6, sector 8589933560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1606.741667][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 1606.807813][T18193] I/O error, dev nbd6, sector 8589934580 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1607.012155][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 1607.037825][T17245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.098115][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 1607.109513][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 1607.113001][T17245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.179514][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 1607.483824][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 1607.565410][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 1607.632886][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1607.713511][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1607.767105][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 1607.832771][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 1607.844201][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 1607.855418][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 1607.867238][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 1607.878636][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 1607.884636][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.889772][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 1607.965027][T18228] loop0: detected capacity change from 0 to 128 [ 1607.973983][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 1608.267494][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 1608.339461][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 1608.548976][T18193] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1608.893569][T18193] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1609.082598][T18228] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1609.194446][T18228] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1610.001587][T17500] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1611.603716][T18255] overlayfs: missing 'lowerdir' [ 1613.261462][T13866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1613.276547][T13866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1613.286367][T13866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1613.297590][T13866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1613.305473][T13866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1614.248656][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.247195][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.300585][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3706'. [ 1615.361863][T13866] Bluetooth: hci4: command tx timeout [ 1615.776015][T18288] loop0: detected capacity change from 0 to 128 [ 1615.859766][T18288] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1615.991956][T18288] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1616.027848][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.439245][T17500] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1616.545731][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.570036][T18280] loop4: detected capacity change from 0 to 40427 [ 1616.670283][T18280] F2FS-fs (loop4): invalid crc value [ 1616.969863][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.095080][T18263] chnl_net:caif_netlink_parms(): no params data found [ 1617.452412][T13866] Bluetooth: hci4: command tx timeout [ 1617.857302][T18280] F2FS-fs (loop4): Start checkpoint disabled! [ 1618.820244][ T1151] bridge_slave_1: left allmulticast mode [ 1619.085503][ T1151] bridge_slave_1: left promiscuous mode [ 1619.091617][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.108494][ T1151] bridge_slave_0: left allmulticast mode [ 1619.193060][ T1151] bridge_slave_0: left promiscuous mode [ 1619.281452][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.523631][T13866] Bluetooth: hci4: command tx timeout [ 1620.020091][T18329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'. [ 1620.969499][T18339] loop0: detected capacity change from 0 to 128 [ 1621.074031][T18339] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1621.093273][T18339] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1621.730176][T13866] Bluetooth: hci4: command tx timeout [ 1621.816869][T17500] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1624.936760][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.967412][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.010061][ T1151] bond0 (unregistering): Released all slaves [ 1625.099523][ T1151] bond1 (unregistering): Released all slaves [ 1625.899368][ T1151] bond2 (unregistering): Released all slaves [ 1626.414469][ T1151] tipc: Left network mode [ 1627.375218][T18371] loop1: detected capacity change from 0 to 64 [ 1627.428110][T18263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.436771][T18263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.452360][T18263] bridge_slave_0: entered allmulticast mode [ 1627.460565][T18263] bridge_slave_0: entered promiscuous mode [ 1627.651983][T18263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.662246][T18263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.702028][T18263] bridge_slave_1: entered allmulticast mode [ 1627.743775][T18263] bridge_slave_1: entered promiscuous mode [ 1628.601443][T18263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.862526][T18382] loop4: detected capacity change from 0 to 512 [ 1629.017885][T18263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.030547][T18382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1629.064762][T18387] syz.1.3733: attempt to access beyond end of device [ 1629.064762][T18387] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1629.081834][T18382] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1629.192392][T18382] EXT4-fs (loop4): 1 truncate cleaned up [ 1629.200122][T18382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1629.220719][T18386] nbd1: detected capacity change from 0 to 8589934592 [ 1629.263758][T18387] block nbd1: Send control failed (result -89) [ 1629.271467][T18387] block nbd1: Request send failed, requeueing [ 1629.331695][T17191] block nbd1: Dead connection, failed to find a fallback [ 1629.339504][T13866] block nbd1: Receive control failed (result -32) [ 1629.346104][T17191] block nbd1: shutting down sockets [ 1629.351336][T17191] blk_print_req_error: 19 callbacks suppressed [ 1629.351360][T17191] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1629.376863][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1629.419748][T18392] loop0: detected capacity change from 0 to 128 [ 1629.442747][T18387] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1629.505110][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1629.534968][T18392] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1629.574178][T18263] team0: Port device team_slave_0 added [ 1629.613583][T18392] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.640556][T18387] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1629.687580][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 1629.726627][ T1151] hsr_slave_0: left promiscuous mode [ 1629.733189][T18387] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1629.742747][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1629.754215][T18387] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1629.764627][ T1151] hsr_slave_1: left promiscuous mode [ 1629.770799][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.797407][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.072161][T18387] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1630.098711][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.119346][T17500] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1630.145354][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1630.160195][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.221568][T18374] loop6: detected capacity change from 0 to 40427 [ 1630.238096][T18387] I/O error, dev nbd1, sector 8589934588 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1630.253283][T18374] F2FS-fs (loop6): invalid crc value [ 1630.283942][ T1151] veth1_macvtap: left promiscuous mode [ 1630.311895][ T1151] veth0_macvtap: left promiscuous mode [ 1630.322070][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 1630.337726][ T1151] veth1_vlan: left promiscuous mode [ 1630.351997][ T1151] veth0_vlan: left promiscuous mode [ 1630.358470][T18387] I/O error, dev nbd1, sector 8589933564 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1630.397061][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 1630.438515][T18387] I/O error, dev nbd1, sector 8589934584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1630.478758][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 1630.489400][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.490248][T18387] I/O error, dev nbd1, sector 8589933560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1630.508599][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1630.516958][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 1630.543520][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 1630.554926][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 1630.566033][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 1630.577329][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 1630.588530][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 1630.600230][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 1630.611313][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1630.635333][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1630.653225][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 1630.670515][T18374] F2FS-fs (loop6): Start checkpoint disabled! [ 1630.679086][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 1630.692022][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 1630.710146][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 1630.734640][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1630.811349][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 1630.833175][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1630.935154][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1630.971251][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 1631.075766][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.105514][T18402] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1631.154529][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 1631.202314][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 1631.213561][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 1631.224767][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 1631.235918][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 1631.247212][T18387] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1631.256883][T18387] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1631.416831][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1631.426229][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.649872][ T1151] team0 (unregistering): Port device batadv1 removed [ 1631.747036][ T5929] usb 3-1: GET_CAPABILITIES returned 0 [ 1631.786787][ T5929] usbtmc 3-1:16.0: can't read capabilities [ 1631.950507][T18410] overlayfs: missing 'lowerdir' [ 1631.971060][ T5929] usb 3-1: USB disconnect, device number 12 [ 1632.011146][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1632.321990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1633.247966][T18420] loop1: detected capacity change from 0 to 1024 [ 1633.259944][T18420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1633.835118][T18424] loop2: detected capacity change from 0 to 32768 [ 1633.843274][T18424] XFS: ikeep mount option is deprecated. [ 1633.924668][T18424] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1634.026926][T18424] XFS (loop2): Ending clean mount [ 1634.043001][T18424] XFS (loop2): Quotacheck needed: Please wait. [ 1634.142075][T18424] XFS (loop2): Quotacheck: Done. [ 1635.052511][ T5906] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1635.627122][T18447] loop1: detected capacity change from 0 to 512 [ 1635.651606][T18447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1635.684592][T18447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1635.736859][T18447] EXT4-fs (loop1): 1 truncate cleaned up [ 1635.767301][T18447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.781534][T17961] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1636.940292][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.972807][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 1638.140257][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 1638.582044][ T5955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1638.796486][ T5955] usb 3-1: config 0 has no interfaces? [ 1640.091599][ T5955] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1640.171791][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.179857][ T5955] usb 3-1: Product: syz [ 1640.317227][ T5955] usb 3-1: Manufacturer: syz [ 1640.330789][ T5955] usb 3-1: SerialNumber: syz [ 1640.382186][T18459] loop1: detected capacity change from 0 to 40427 [ 1640.413089][ T5955] usb 3-1: config 0 descriptor?? [ 1640.436844][T18459] F2FS-fs (loop1): invalid crc value [ 1640.763286][T18474] loop6: detected capacity change from 0 to 1024 [ 1640.803192][T18474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1640.929161][T18459] F2FS-fs (loop1): Start checkpoint disabled! [ 1641.228352][T18263] team0: Port device team_slave_1 added [ 1642.484788][T18263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.518951][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.602372][T18263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.669925][T18263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.677296][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.912346][T18263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.124509][T18489] loop6: detected capacity change from 0 to 4096 [ 1644.165078][T18489] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1644.492267][ T5955] usb 3-1: USB disconnect, device number 14 [ 1644.543895][T18263] hsr_slave_0: entered promiscuous mode [ 1644.584559][T18263] hsr_slave_1: entered promiscuous mode [ 1644.631711][T18263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1644.639411][T18263] Cannot create hsr debugfs directory [ 1644.654529][T16250] Bluetooth: hci1: command 0x0406 tx timeout [ 1644.692865][T18499] loop1: detected capacity change from 0 to 512 [ 1644.700106][T18499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1644.806897][T18499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1645.146276][T18506] loop0: detected capacity change from 0 to 256 [ 1645.353121][T18489] ntfs3(loop6): ino=1d, mi_enum_attr [ 1645.359069][T18489] ntfs3(loop6): ino=1d, mi_enum_attr [ 1645.366192][T18499] EXT4-fs (loop1): 1 truncate cleaned up [ 1645.374510][T18499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1645.412750][T18489] ntfs3(loop6): ino=1d, mi_enum_attr [ 1645.418082][T18489] ntfs3(loop6): ino=1d, mi_enum_attr [ 1645.421279][T18506] FAT-fs (loop0): Directory bread(block 64) failed [ 1645.442162][T18506] FAT-fs (loop0): Directory bread(block 65) failed [ 1645.448772][T18506] FAT-fs (loop0): Directory bread(block 66) failed [ 1645.687427][T18506] FAT-fs (loop0): Directory bread(block 67) failed [ 1646.432701][T18506] FAT-fs (loop0): Directory bread(block 68) failed [ 1646.439262][T18506] FAT-fs (loop0): Directory bread(block 69) failed [ 1646.465948][T18506] FAT-fs (loop0): Directory bread(block 70) failed [ 1646.495651][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.512308][ T1151] IPVS: stop unused estimator thread 0... [ 1646.522844][T18506] FAT-fs (loop0): Directory bread(block 71) failed [ 1646.548629][T18506] FAT-fs (loop0): Directory bread(block 72) failed [ 1646.564409][T18514] loop2: detected capacity change from 0 to 1024 [ 1646.586394][T18514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1646.612985][T18506] FAT-fs (loop0): Directory bread(block 73) failed [ 1647.043704][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1650.254719][T18263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1650.318531][T18263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1650.373746][T18263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1650.401705][T18263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1650.786851][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.811772][T18263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.885163][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.892383][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.902909][T18556] Bluetooth: MGMT ver 1.23 [ 1650.912386][T18557] loop0: detected capacity change from 0 to 512 [ 1650.943520][T18557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1650.950938][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.958138][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.973026][T18557] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1651.064113][T18557] EXT4-fs (loop0): 1 truncate cleaned up [ 1651.094524][T18557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.282228][T18564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3784'. [ 1651.346622][T18567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1652.446543][T18563] loop2: detected capacity change from 0 to 32768 [ 1652.962703][T18562] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1653.204054][T17500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.334190][T18591] loop4: detected capacity change from 0 to 2048 [ 1655.372964][T18263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.416296][T18597] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1655.889564][T18599] overlay: ./file1 is not a directory [ 1656.024793][T18600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.539567][T18263] veth0_vlan: entered promiscuous mode [ 1656.684377][T18597] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 1656.701096][T18597] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 1656.744260][T18597] Remounting filesystem read-only [ 1656.766796][T18263] veth1_vlan: entered promiscuous mode [ 1656.786018][T18606] loop1: detected capacity change from 0 to 1024 [ 1656.798517][T18606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1656.812309][ T5848] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1656.991872][T18128] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1657.150678][T18610] loop0: detected capacity change from 0 to 512 [ 1657.159597][T18610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1657.198044][T18610] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1657.227807][T18263] veth0_macvtap: entered promiscuous mode [ 1657.253499][T18263] veth1_macvtap: entered promiscuous mode [ 1657.262415][T18128] usb 3-1: Using ep0 maxpacket: 16 [ 1657.272550][T18610] EXT4-fs (loop0): 1 truncate cleaned up [ 1657.296826][T18263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.308981][T18263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.323476][T18610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1657.323900][T18128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1657.360854][T18263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.402722][T18128] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1657.437130][T18128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.466601][T18263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.487491][T18128] usb 3-1: Product: syz [ 1657.491706][T18128] usb 3-1: Manufacturer: syz [ 1657.512387][T18263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.548734][T18128] usb 3-1: SerialNumber: syz [ 1657.577533][T18263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.643018][T18128] usb 3-1: config 0 descriptor?? [ 1658.093101][T18612] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1658.406232][T18128] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1658.453735][T18128] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1658.583520][T17500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.752104][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1658.831539][T18128] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1658.982276][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1658.999141][ T5906] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 1659.015522][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 1659.024708][ T5906] usb 2-1: config 0 has no interface number 0 [ 1659.035145][ T5906] usb 2-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db [ 1659.050089][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.058762][ T5906] usb 2-1: Product: syz [ 1659.308426][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.314071][ T5906] usb 2-1: Manufacturer: syz [ 1659.322419][ T5906] usb 2-1: SerialNumber: syz [ 1659.330495][ T5906] usb 2-1: config 0 descriptor?? [ 1659.343124][ T5906] sierra 2-1:0.140: Sierra USB modem converter detected [ 1659.345674][T18128] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1659.368284][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.155731][T18128] em28xx 3-1:0.0: board has no eeprom [ 1660.261817][T18128] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1660.269727][T18128] em28xx 3-1:0.0: dvb set to bulk mode. [ 1660.282470][ T5943] em28xx 3-1:0.0: Binding DVB extension [ 1660.297900][T18128] usb 3-1: USB disconnect, device number 15 [ 1660.312353][ T5906] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1660.331120][T18128] em28xx 3-1:0.0: Disconnecting em28xx [ 1660.366023][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.386606][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.390956][ T5906] usb 2-1: USB disconnect, device number 8 [ 1660.694460][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1660.746476][ T5943] em28xx 3-1:0.0: Registering input extension [ 1660.753012][ T5906] sierra 2-1:0.140: device disconnected [ 1660.811032][T18128] em28xx 3-1:0.0: Closing input extension [ 1661.664191][T18128] em28xx 3-1:0.0: Freeing device [ 1661.975929][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3809'. [ 1662.058482][T18666] loop1: detected capacity change from 0 to 164 [ 1662.066712][T18660] loop3: detected capacity change from 0 to 2048 [ 1662.149679][T18667] loop2: detected capacity change from 0 to 512 [ 1662.156162][T18666] Unable to read rock-ridge attributes [ 1662.202148][T18666] Unable to read rock-ridge attributes [ 1662.235989][T18666] Unable to read rock-ridge attributes [ 1662.245195][T18667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1662.278271][T18666] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1662.304149][T18667] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1662.355513][T18666] Unable to read rock-ridge attributes [ 1662.361047][T18666] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1662.372633][T18666] Unable to read rock-ridge attributes [ 1662.400321][T18667] EXT4-fs (loop2): 1 truncate cleaned up [ 1662.431629][T18667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.251835][T18670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1663.874637][T17961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.880720][T18710] overlayfs: missing 'lowerdir' [ 1666.938619][T16250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1667.038283][T16250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1667.047860][T16250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1667.057499][T16250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1667.065580][T16250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1667.657296][T18719] loop3: detected capacity change from 0 to 512 [ 1667.688443][T18719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1667.728379][T18719] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1667.802173][T18719] EXT4-fs (loop3): 1 truncate cleaned up [ 1667.830342][T18719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.283709][T18728] loop2: detected capacity change from 0 to 1024 [ 1668.951703][T18263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.049377][T18734] loop0: detected capacity change from 0 to 4096 [ 1669.122316][T13866] Bluetooth: hci2: command tx timeout [ 1669.195628][T18734] ntfs3(loop0): failed to convert "0000" to iso8859-9 [ 1669.244991][T18740] ntfs3(loop0): failed to convert "0000" to iso8859-9 [ 1669.310843][T18734] ntfs3(loop0): failed to convert name for inode 1e. [ 1669.336587][T18742] sctp: [Deprecated]: syz.3.3833 (pid 18742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1669.336587][T18742] Use struct sctp_sack_info instead [ 1669.416044][T18740] ntfs3(loop0): failed to convert name for inode 1e. [ 1669.629813][T18734] ntfs3(loop0): ino=1f, mi_enum_attr [ 1669.657887][T18742] loop3: detected capacity change from 0 to 4096 [ 1669.702084][T18742] ntfs3(loop3): ino=1, mi_enum_attr [ 1669.708344][T18742] ntfs3(loop3): Failed to load $MFTMirr (-22). [ 1669.847412][T18740] ntfs3(loop0): ino=1f, mi_enum_attr [ 1670.037124][T18734] ntfs3(loop0): ino=1f, mi_enum_attr [ 1670.222846][T18740] ntfs3(loop0): ino=1f, mi_enum_attr [ 1670.451087][T18711] chnl_net:caif_netlink_parms(): no params data found [ 1670.493180][ T59] bridge_slave_1: left allmulticast mode [ 1670.498881][ T59] bridge_slave_1: left promiscuous mode [ 1670.520096][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.540212][ T59] bridge_slave_0: left allmulticast mode [ 1670.548028][ T59] bridge_slave_0: left promiscuous mode [ 1670.558424][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.681856][ T5943] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1670.862614][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 1670.937363][ T5943] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1671.083783][ T5943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1671.202391][T13866] Bluetooth: hci2: command tx timeout [ 1671.239442][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1672.015343][ T5943] usb 1-1: SerialNumber: syz [ 1672.247746][T18756] loop3: detected capacity change from 0 to 164 [ 1672.265158][ T5943] usb 1-1: can't set config #1, error -71 [ 1672.291619][ T5943] usb 1-1: USB disconnect, device number 7 [ 1672.319041][T18756] Unable to read rock-ridge attributes [ 1672.395183][T18756] Unable to read rock-ridge attributes [ 1672.424895][T18756] Unable to read rock-ridge attributes [ 1672.442432][T18758] loop2: detected capacity change from 0 to 2048 [ 1672.533077][T18756] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1672.551382][T18758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1672.585805][T18756] Unable to read rock-ridge attributes [ 1672.591374][T18756] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1672.662742][T18759] Unable to read rock-ridge attributes [ 1673.184334][T18767] loop4: detected capacity change from 0 to 512 [ 1673.359216][T13866] Bluetooth: hci2: command tx timeout [ 1673.410077][T18767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1673.482012][T18767] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.442511][T13866] Bluetooth: hci2: command tx timeout [ 1676.331859][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.343214][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.363827][ T59] bond0 (unregistering): Released all slaves [ 1676.385838][ T59] bond1 (unregistering): Released all slaves [ 1676.439282][T13866] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1676.554551][ T59] bond2 (unregistering): Released all slaves [ 1676.674755][ T59] bond3 (unregistering): Released all slaves [ 1676.773572][ T59] bond4 (unregistering): Released all slaves [ 1676.909863][ T59] bond5 (unregistering): Released all slaves [ 1676.963364][T18789] syz_tun: entered allmulticast mode [ 1676.984873][T18787] syz_tun: left allmulticast mode [ 1677.098754][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.292091][ T5943] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1677.487547][ T5943] usb 1-1: config 0 has no interfaces? [ 1677.504104][ T5943] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1677.561924][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.576657][ T5943] usb 1-1: config 0 descriptor?? [ 1677.710533][T18711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.763468][T18711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.789215][T18800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.810097][T18711] bridge_slave_0: entered allmulticast mode [ 1677.880874][T18800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.883425][T18711] bridge_slave_0: entered promiscuous mode [ 1677.934556][T18252] usb 1-1: USB disconnect, device number 8 [ 1677.965590][T18711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.982345][T18711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.989887][T18711] bridge_slave_1: entered allmulticast mode [ 1678.009941][T18711] bridge_slave_1: entered promiscuous mode [ 1678.182225][T18815] overlayfs: missing 'lowerdir' [ 1678.371937][T18252] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1678.452328][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.643954][T13866] Bluetooth: hci5: command 0x0406 tx timeout [ 1678.661488][T18812] loop3: detected capacity change from 0 to 2048 [ 1678.664034][T18711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.702185][T18252] usb 1-1: Using ep0 maxpacket: 16 [ 1678.722292][T18252] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1678.740121][T18711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.749898][T18252] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1678.785168][T18252] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1678.803020][T18252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.839053][T18252] usb 1-1: Product: syz [ 1678.847213][T18252] usb 1-1: Manufacturer: syz [ 1678.882314][T18252] usb 1-1: SerialNumber: syz [ 1679.842105][T18252] usb 1-1: 0:2 : does not exist [ 1679.862750][T18252] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1679.927004][T18252] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1679.941818][ T59] hsr_slave_0: left promiscuous mode [ 1679.958660][ T59] hsr_slave_1: left promiscuous mode [ 1679.991546][T18252] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1680.009883][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.052699][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.140614][T18252] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1680.165700][T18252] usb 1-1: USB disconnect, device number 9 [ 1680.983885][T18252] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1681.182097][T18252] usb 1-1: Using ep0 maxpacket: 8 [ 1681.309322][T18252] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.331226][T18252] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1681.356194][T18252] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1681.383658][T18252] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1681.404116][T18252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.606214][T18252] usbtmc 1-1:16.0: bulk endpoints not found [ 1681.761596][T18842] loop2: detected capacity change from 0 to 512 [ 1681.813360][T18842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.834339][T18842] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1681.843609][T18252] usb 1-1: USB disconnect, device number 10 [ 1682.700849][T18851] loop0: detected capacity change from 0 to 2048 [ 1682.738283][T18851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1683.008463][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1684.111972][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1685.068508][T18711] team0: Port device team_slave_0 added [ 1685.115598][T18711] team0: Port device team_slave_1 added [ 1685.257813][T17961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.560275][T18711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.579716][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.651407][T18877] loop2: detected capacity change from 0 to 512 [ 1685.683181][T18877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1685.709069][T18711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.732624][T18877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1685.774468][T18711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.781475][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.123105][T18877] EXT4-fs (loop2): 1 truncate cleaned up [ 1686.130423][T18877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1686.187005][T18711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.111260][T17961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.228622][T18711] hsr_slave_0: entered promiscuous mode [ 1687.243790][T18711] hsr_slave_1: entered promiscuous mode [ 1687.270400][T18711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1687.316769][T18711] Cannot create hsr debugfs directory [ 1687.423219][T18889] overlayfs: missing 'lowerdir' [ 1687.830094][ T59] IPVS: stop unused estimator thread 0... [ 1688.357227][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.494542][T18901] loop0: detected capacity change from 0 to 2048 [ 1688.612813][T18901] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1688.657004][T18901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1688.714348][T18907] loop0: detected capacity change from 0 to 64 [ 1688.981442][T18910] netlink: 'syz.6.3878': attribute type 10 has an invalid length. [ 1689.780802][T18910] team0: Device ipvlan1 failed to register rx_handler [ 1689.980034][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.197223][T18916] loop0: detected capacity change from 0 to 512 [ 1690.294564][T18916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1690.346881][T18916] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.614599][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.542731][T18931] overlayfs: failed to clone upperpath [ 1691.798444][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.838467][T17500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.673675][T13866] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1692.682806][T13866] Bluetooth: hci1: Injecting HCI hardware error event [ 1692.693298][T13866] Bluetooth: hci1: hardware error 0x00 [ 1693.010576][T18939] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21 [ 1693.717515][T18947] loop3: detected capacity change from 0 to 256 [ 1694.098752][ T59] bridge_slave_1: left allmulticast mode [ 1694.111659][ T59] bridge_slave_1: left promiscuous mode [ 1694.126949][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.157176][T18952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.202636][T18954] loop0: detected capacity change from 0 to 164 [ 1694.275123][T18954] Unable to read rock-ridge attributes [ 1694.334794][ T59] bridge_slave_0: left allmulticast mode [ 1694.370408][T18954] Unable to read rock-ridge attributes [ 1694.379639][ T59] bridge_slave_0: left promiscuous mode [ 1694.407914][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.424015][T18954] Unable to read rock-ridge attributes [ 1694.457515][T18947] syz.3.3886: attempt to access beyond end of device [ 1694.457515][T18947] loop3: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 1694.471368][T18954] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1694.622955][T18947] syz.3.3886: attempt to access beyond end of device [ 1694.622955][T18947] loop3: rw=2049, sector=608, nr_sectors = 192 limit=256 [ 1694.638052][T18947] syz.3.3886: attempt to access beyond end of device [ 1694.638052][T18947] loop3: rw=2049, sector=832, nr_sectors = 192 limit=256 [ 1695.522488][T13866] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1695.894444][T18947] syz.3.3886: attempt to access beyond end of device [ 1695.894444][T18947] loop3: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 1695.922464][T18954] Unable to read rock-ridge attributes [ 1695.928014][T18954] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1696.062968][T18954] Unable to read rock-ridge attributes [ 1696.405736][T18978] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1697.596667][T18987] loop3: detected capacity change from 0 to 512 [ 1697.753092][T18987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1697.793903][T18987] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1699.061190][ T59] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1700.099756][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.119670][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.133950][ T59] bond0 (unregistering): Released all slaves [ 1700.287321][ T59] bond1 (unregistering): Released all slaves [ 1700.427408][ T59] bond2 (unregistering): Released all slaves [ 1700.548961][ T59] bond3 (unregistering): Released all slaves [ 1700.672999][ T59] bond4 (unregistering): Released all slaves [ 1700.964936][T13866] Bluetooth: hci3: command 0x0406 tx timeout [ 1701.039252][T18711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1701.083587][T18998] overlayfs: missing 'lowerdir' [ 1701.132145][T18711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1701.271105][T18711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1701.335569][T18263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.537217][T18711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1702.513447][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3903'. [ 1703.898708][T19031] Cannot find del_set index 0 as target [ 1704.117955][ T59] hsr_slave_0: left promiscuous mode [ 1704.151408][ T59] hsr_slave_1: left promiscuous mode [ 1704.170903][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.190619][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.274465][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1704.307167][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.480045][ T59] veth1_macvtap: left promiscuous mode [ 1704.501272][ T59] veth0_macvtap: left promiscuous mode [ 1704.526294][ T59] veth1_vlan: left promiscuous mode [ 1704.546153][ T59] veth0_vlan: left promiscuous mode [ 1706.765491][T19048] loop0: detected capacity change from 0 to 262144 [ 1706.803517][T19048] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3911 (19048) [ 1706.840159][T19048] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 1706.852966][T19048] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1706.864311][T19048] BTRFS info (device loop0): using free-space-tree [ 1707.592934][T19048] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1708.557782][T19048] BTRFS error (device loop0): open_ctree failed: -12 [ 1708.732234][T19077] overlayfs: missing 'lowerdir' [ 1708.910787][T19082] loop3: detected capacity change from 0 to 256 [ 1712.458943][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1712.592757][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1713.592599][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1713.751934][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1713.833135][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1713.840605][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1713.921901][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1713.943377][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1713.962251][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1713.985691][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1714.010258][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1714.060275][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1714.082346][T18711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.089515][T19125] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1714.109320][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1714.164035][T18711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.191684][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1714.206960][T13230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.214145][T13230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.273864][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1714.282697][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1714.299158][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1714.313262][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1714.325889][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1714.340960][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1714.368931][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1714.397229][T13230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.404528][T13230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.432376][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.514558][ T24] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1714.885676][ T24] usb 1-1: USB disconnect, device number 11 [ 1715.979294][ T59] IPVS: stop unused estimator thread 0... [ 1716.048817][T18711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.194115][T18711] veth0_vlan: entered promiscuous mode [ 1716.246853][T18711] veth1_vlan: entered promiscuous mode [ 1716.475143][T18711] veth0_macvtap: entered promiscuous mode [ 1716.515454][T18711] veth1_macvtap: entered promiscuous mode [ 1716.629704][T19151] loop3: detected capacity change from 0 to 2048 [ 1716.885034][T19155] loop0: detected capacity change from 0 to 2048 [ 1717.217357][T19155] Alternate GPT is invalid, using primary GPT. [ 1717.224540][T19155] loop0: p1 p2 p3 [ 1717.458375][T19151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1717.510509][T18711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1717.531157][T19156] IPVS: Scheduler module ip_vs_sip not found [ 1717.767416][T18711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1717.846167][T18711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.897370][T18711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.927212][T18711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.937916][T18711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.301658][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.311750][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.403404][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.429731][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.550418][T19171] loop3: detected capacity change from 0 to 2048 [ 1718.616861][T19171] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1718.656332][T19171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1718.780531][T19175] loop3: detected capacity change from 0 to 64 [ 1720.331847][T16250] Bluetooth: hci0: command 0x0406 tx timeout [ 1720.494262][T19164] loop0: detected capacity change from 0 to 32768 [ 1720.515461][T19186] loop2: detected capacity change from 0 to 1024 [ 1720.560602][T19164] ocfs2: Unknown parameter 'uid>00000000000000000000' [ 1721.041429][T19193] loop3: detected capacity change from 0 to 2048 [ 1721.452729][T19200] trusted_key: encrypted_key: insufficient parameters specified [ 1722.248113][T13866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1722.259391][T13866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1722.268256][T13866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1722.276540][T13866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1722.284552][T13866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1722.417253][T19208] binfmt_misc: register: failed to install interpreter file ./file2 [ 1722.462638][T19207] loop0: detected capacity change from 0 to 2048 [ 1722.491327][T13866] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1722.512270][T13866] Bluetooth: hci4: Injecting HCI hardware error event [ 1722.526395][T16250] Bluetooth: hci4: hardware error 0x00 [ 1722.561140][T19210] xt_socket: unknown flags 0x8 [ 1722.829744][T19207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1723.392316][T19220] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 1723.676466][T19221] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1724.244147][T19203] chnl_net:caif_netlink_parms(): no params data found [ 1724.321880][T13866] Bluetooth: hci0: command tx timeout [ 1724.844180][T19203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.867832][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.887896][T19203] bridge_slave_0: entered allmulticast mode [ 1724.899393][T19203] bridge_slave_0: entered promiscuous mode [ 1724.913770][T19203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.926754][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.936032][T19203] bridge_slave_1: entered allmulticast mode [ 1724.966531][T19203] bridge_slave_1: entered promiscuous mode [ 1725.124622][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.195719][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.441860][T16250] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1725.534390][T19242] syz.2.3965: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1725.549186][T19242] CPU: 0 UID: 0 PID: 19242 Comm: syz.2.3965 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1725.549223][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1725.549240][T19242] Call Trace: [ 1725.549249][T19242] [ 1725.549260][T19242] dump_stack_lvl+0x16c/0x1f0 [ 1725.549307][T19242] warn_alloc+0x248/0x3a0 [ 1725.549342][T19242] ? __pfx_warn_alloc+0x10/0x10 [ 1725.549371][T19242] ? __pfx_stack_trace_save+0x10/0x10 [ 1725.549412][T19242] ? stack_depot_save_flags+0x28/0xa40 [ 1725.549463][T19242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.549505][T19242] ? kasan_save_stack+0x42/0x60 [ 1725.549535][T19242] ? kasan_save_stack+0x33/0x60 [ 1725.549564][T19242] ? kasan_save_track+0x14/0x30 [ 1725.549594][T19242] ? xskq_create+0x52/0x1d0 [ 1725.549630][T19242] ? xsk_setsockopt+0x640/0x840 [ 1725.549663][T19242] ? do_sock_setsockopt+0x224/0x470 [ 1725.549694][T19242] ? xskq_create+0xfb/0x1d0 [ 1725.549732][T19242] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1725.549791][T19242] ? xskq_create+0xfb/0x1d0 [ 1725.549837][T19242] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1725.549895][T19242] ? xskq_create+0xfb/0x1d0 [ 1725.549933][T19242] vmalloc_user_noprof+0x9e/0xe0 [ 1725.549977][T19242] ? xskq_create+0xfb/0x1d0 [ 1725.550016][T19242] xskq_create+0xfb/0x1d0 [ 1725.550056][T19242] xsk_setsockopt+0x640/0x840 [ 1725.550093][T19242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1725.550129][T19242] ? __pfx_aa_sk_perm+0x10/0x10 [ 1725.550163][T19242] ? errseq_sample+0x53/0x70 [ 1725.550205][T19242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.550246][T19242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1725.550281][T19242] do_sock_setsockopt+0x224/0x470 [ 1725.550310][T19242] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1725.550347][T19242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.550393][T19242] __sys_setsockopt+0x1a0/0x230 [ 1725.550439][T19242] __x64_sys_setsockopt+0xbd/0x160 [ 1725.550477][T19242] ? do_syscall_64+0x91/0x4c0 [ 1725.550527][T19242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.550559][T19242] ? lockdep_hardirqs_on+0x7c/0x110 [ 1725.550601][T19242] do_syscall_64+0xcd/0x4c0 [ 1725.550647][T19242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.550675][T19242] RIP: 0033:0x7f6e4438e929 [ 1725.550697][T19242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.550725][T19242] RSP: 002b:00007f6e451e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1725.550751][T19242] RAX: ffffffffffffffda RBX: 00007f6e445b5fa0 RCX: 00007f6e4438e929 [ 1725.550770][T19242] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1725.550787][T19242] RBP: 00007f6e44410b39 R08: 0000000000000004 R09: 0000000000000000 [ 1725.550805][T19242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.550823][T19242] R13: 0000000000000000 R14: 00007f6e445b5fa0 R15: 00007fff08d61e88 [ 1725.550859][T19242] [ 1725.550870][T19242] Mem-Info: [ 1725.845019][T19242] active_anon:7749 inactive_anon:0 isolated_anon:0 [ 1725.845019][T19242] active_file:4095 inactive_file:40614 isolated_file:0 [ 1725.845019][T19242] unevictable:768 dirty:154 writeback:0 [ 1725.845019][T19242] slab_reclaimable:6475 slab_unreclaimable:110671 [ 1725.845019][T19242] mapped:37708 shmem:5139 pagetables:991 [ 1725.845019][T19242] sec_pagetables:0 bounce:0 [ 1725.845019][T19242] kernel_misc_reclaimable:0 [ 1725.845019][T19242] free:1293206 free_pcp:20092 free_cma:0 [ 1725.891558][T19242] Node 0 active_anon:30996kB inactive_anon:0kB active_file:16368kB inactive_file:162252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150820kB dirty:612kB writeback:0kB shmem:19020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12772kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1725.925079][T19242] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1725.956706][T19242] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.987206][T19242] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1725.993057][T19242] Node 0 DMA32 free:1258956kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30948kB inactive_anon:0kB active_file:16368kB inactive_file:160936kB unevictable:1536kB writepending:608kB present:3129332kB managed:2540248kB mlocked:0kB bounce:0kB free_pcp:58372kB local_pcp:32800kB free_cma:0kB [ 1726.025457][T19242] lowmem_reserve[]: 0 0 1 1 1 [ 1726.030222][T19242] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1726.059233][T19242] lowmem_reserve[]: 0 0 0 0 0 [ 1726.064030][T19242] Node 1 Normal free:3898500kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21932kB local_pcp:20960kB free_cma:0kB [ 1726.096840][T19242] lowmem_reserve[]: 0 0 0 0 0 [ 1726.101650][T19242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1726.114528][T19242] Node 0 DMA32: 707*4kB (UME) 308*8kB (UME) 597*16kB (UME) 439*32kB (UME) 196*64kB (ME) 175*128kB (UME) 102*256kB (UME) 63*512kB (UME) 48*1024kB (UME) 13*2048kB (UME) 259*4096kB (UM) = 1258844kB [ 1726.133927][T19242] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1726.145912][T19242] Node 1 Normal: 191*4kB (UME) 57*8kB (UE) 46*16kB (UME) 247*32kB (UE) 100*64kB (UME) 20*128kB (UE) 11*256kB (UME) 0*512kB 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3898500kB [ 1726.163875][T19242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1726.173476][T19242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1726.182794][T19242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1726.193754][T19242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1726.203086][T19242] 49751 total pagecache pages [ 1726.207773][T19242] 0 pages in swap cache [ 1726.211980][T19242] Free swap = 124996kB [ 1726.216135][T19242] Total swap = 124996kB [ 1726.220305][T19242] 2097051 pages RAM [ 1726.224177][T19242] 0 pages HighMem/MovableOnly [ 1726.228849][T19242] 430011 pages reserved [ 1726.233050][T19242] 0 pages cma reserved [ 1726.273764][T19203] team0: Port device team_slave_0 added [ 1726.401955][T16250] Bluetooth: hci0: command tx timeout [ 1726.437486][T19203] team0: Port device team_slave_1 added [ 1726.766360][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.779950][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1726.852955][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.896577][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.925450][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.204997][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.342275][T19203] hsr_slave_0: entered promiscuous mode [ 1727.348126][T19254] trusted_key: encrypted_key: insufficient parameters specified [ 1727.357319][T19203] hsr_slave_1: entered promiscuous mode [ 1727.365091][T19203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1727.372827][T19203] Cannot create hsr debugfs directory [ 1728.340071][T19263] netlink: 'syz.6.3974': attribute type 1 has an invalid length. [ 1728.603077][T16250] Bluetooth: hci0: command tx timeout [ 1728.608094][T19264] binfmt_misc: register: failed to install interpreter file ./file2 [ 1728.884782][T19266] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1728.914322][T19269] gtp0: entered promiscuous mode [ 1730.005882][T19280] loop2: detected capacity change from 0 to 4096 [ 1730.054762][T19280] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1730.085658][T19280] NILFS (loop2): trying rollback from an earlier position [ 1730.212177][T19280] NILFS (loop2): recovery complete [ 1730.285452][T19292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1730.360928][T19291] loop3: detected capacity change from 0 to 1024 [ 1730.369807][T19203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.652447][T16250] Bluetooth: hci0: command tx timeout [ 1731.716151][T19291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1731.728416][T19291] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.773508][ T30] audit: type=1800 audit(1752626279.681:216): pid=19291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3983" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1731.856704][T18263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1732.189844][T19306] trusted_key: encrypted_key: insufficient parameters specified [ 1733.114204][T19203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.445187][T19321] netlink: 'syz.6.3990': attribute type 1 has an invalid length. [ 1733.550031][T19203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.813670][T19324] loop2: detected capacity change from 0 to 40427 [ 1733.843001][T19324] F2FS-fs (loop2): invalid crc value [ 1733.879491][T19324] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1733.948033][T19324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1734.012992][T19319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.185265][ T30] audit: type=1800 audit(1752626282.091:217): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3989" name="file1" dev="loop2" ino=14 res=0 errno=0 [ 1735.868778][T19316] loop3: detected capacity change from 0 to 2048 [ 1736.063317][T17961] syz-executor: attempt to access beyond end of device [ 1736.063317][T17961] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1736.109442][T17961] CPU: 0 UID: 0 PID: 17961 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1736.109497][T17961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1736.109519][T17961] Call Trace: [ 1736.109531][T17961] [ 1736.109545][T17961] dump_stack_lvl+0x16c/0x1f0 [ 1736.109609][T17961] f2fs_handle_critical_error+0x621/0x9f0 [ 1736.109659][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.109703][T17961] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1736.109760][T17961] f2fs_write_end_io+0x785/0xc20 [ 1736.109812][T17961] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1736.109868][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.109922][T17961] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1736.109969][T17961] bio_endio+0x70d/0x850 [ 1736.110009][T17961] submit_bio_noacct+0x56d/0x1eb0 [ 1736.110069][T17961] __submit_merged_bio+0x33c/0x770 [ 1736.110125][T17961] __submit_merged_write_cond+0x319/0x3f0 [ 1736.110189][T17961] f2fs_write_cache_pages+0x2067/0x2570 [ 1736.110279][T17961] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1736.110346][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.110391][T17961] ? __lock_acquire+0x622/0x1c90 [ 1736.110463][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.110609][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.110661][T17961] f2fs_write_data_pages+0x4ad/0xd90 [ 1736.110726][T17961] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1736.110790][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.110843][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.110893][T17961] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1736.110954][T17961] do_writepages+0x27a/0x600 [ 1736.111021][T17961] ? __pfx_do_writepages+0x10/0x10 [ 1736.111078][T17961] ? do_raw_spin_unlock+0x172/0x230 [ 1736.111123][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.111170][T17961] ? _raw_spin_unlock+0x28/0x50 [ 1736.111228][T17961] filemap_fdatawrite_wbc+0x104/0x160 [ 1736.111294][T17961] __filemap_fdatawrite_range+0xb2/0xf0 [ 1736.111340][T17961] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1736.111450][T17961] ? find_held_lock+0x2b/0x80 [ 1736.111498][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.111544][T17961] ? do_raw_spin_unlock+0x172/0x230 [ 1736.111587][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.111638][T17961] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1736.111724][T17961] block_operations+0x2a3/0xfd0 [ 1736.111792][T17961] ? __pfx___schedule+0x10/0x10 [ 1736.111848][T17961] ? __pfx_block_operations+0x10/0x10 [ 1736.111968][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112011][T17961] ? down_write+0x14d/0x200 [ 1736.112046][T17961] ? __pfx_down_write+0x10/0x10 [ 1736.112084][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112127][T17961] ? rcu_is_watching+0x12/0xc0 [ 1736.112181][T17961] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1736.112249][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112292][T17961] ? kfree+0x2b4/0x4d0 [ 1736.112321][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112369][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112412][T17961] ? rcu_is_watching+0x12/0xc0 [ 1736.112459][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112502][T17961] ? kthread_stop+0x273/0x650 [ 1736.112542][T17961] kill_f2fs_super+0x3c2/0x470 [ 1736.112577][T17961] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1736.112610][T17961] ? lockdep_hardirqs_on+0x7c/0x110 [ 1736.112686][T17961] deactivate_locked_super+0xc1/0x1a0 [ 1736.112727][T17961] deactivate_super+0xde/0x100 [ 1736.112772][T17961] cleanup_mnt+0x225/0x450 [ 1736.112817][T17961] task_work_run+0x150/0x240 [ 1736.112859][T17961] ? __pfx_task_work_run+0x10/0x10 [ 1736.112896][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.112943][T17961] ? __pfx___x64_sys_umount+0x10/0x10 [ 1736.113000][T17961] exit_to_user_mode_loop+0xeb/0x110 [ 1736.113046][T17961] do_syscall_64+0x3f6/0x4c0 [ 1736.113108][T17961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.113144][T17961] RIP: 0033:0x7f6e4438fc57 [ 1736.113173][T17961] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1736.113208][T17961] RSP: 002b:00007fff08d61118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1736.113242][T17961] RAX: 0000000000000000 RBX: 00007f6e44410925 RCX: 00007f6e4438fc57 [ 1736.113266][T17961] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff08d611d0 [ 1736.113289][T17961] RBP: 00007fff08d611d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.113311][T17961] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff08d62260 [ 1736.113335][T17961] R13: 00007f6e44410925 R14: 00000000001a7c8e R15: 00007fff08d622a0 [ 1736.113387][T17961] [ 1736.607750][T19203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.649779][T17961] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1736.661005][T17961] CPU: 0 UID: 0 PID: 17961 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1736.661056][T17961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1736.661079][T17961] Call Trace: [ 1736.661092][T17961] [ 1736.661106][T17961] dump_stack_lvl+0x16c/0x1f0 [ 1736.661169][T17961] f2fs_handle_critical_error+0x621/0x9f0 [ 1736.661218][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.661263][T17961] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1736.661314][T17961] f2fs_write_end_io+0x785/0xc20 [ 1736.661387][T17961] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1736.661446][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.661521][T17961] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1736.661571][T17961] bio_endio+0x70d/0x850 [ 1736.661613][T17961] submit_bio_noacct+0x56d/0x1eb0 [ 1736.661674][T17961] __submit_merged_bio+0x33c/0x770 [ 1736.661737][T17961] __submit_merged_write_cond+0x319/0x3f0 [ 1736.661802][T17961] f2fs_write_cache_pages+0x2067/0x2570 [ 1736.661892][T17961] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1736.661959][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662002][T17961] ? __lock_acquire+0x622/0x1c90 [ 1736.662075][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662227][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662281][T17961] f2fs_write_data_pages+0x4ad/0xd90 [ 1736.662359][T17961] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1736.662413][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662480][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662529][T17961] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1736.662590][T17961] do_writepages+0x27a/0x600 [ 1736.662657][T17961] ? __pfx_do_writepages+0x10/0x10 [ 1736.662713][T17961] ? do_raw_spin_unlock+0x172/0x230 [ 1736.662757][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.662801][T17961] ? _raw_spin_unlock+0x28/0x50 [ 1736.662857][T17961] filemap_fdatawrite_wbc+0x104/0x160 [ 1736.662923][T17961] __filemap_fdatawrite_range+0xb2/0xf0 [ 1736.662971][T17961] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1736.663081][T17961] ? find_held_lock+0x2b/0x80 [ 1736.663131][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.663176][T17961] ? do_raw_spin_unlock+0x172/0x230 [ 1736.663219][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.663272][T17961] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1736.663368][T17961] block_operations+0x2a3/0xfd0 [ 1736.663431][T17961] ? __pfx___schedule+0x10/0x10 [ 1736.663493][T17961] ? __pfx_block_operations+0x10/0x10 [ 1736.663616][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.663658][T17961] ? down_write+0x14d/0x200 [ 1736.663691][T17961] ? __pfx_down_write+0x10/0x10 [ 1736.663728][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.663769][T17961] ? rcu_is_watching+0x12/0xc0 [ 1736.663824][T17961] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1736.663891][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.663933][T17961] ? kfree+0x2b4/0x4d0 [ 1736.663964][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.664007][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.664044][T17961] ? rcu_is_watching+0x12/0xc0 [ 1736.664092][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.664135][T17961] ? kthread_stop+0x273/0x650 [ 1736.664176][T17961] kill_f2fs_super+0x3c2/0x470 [ 1736.664208][T17961] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1736.664238][T17961] ? lockdep_hardirqs_on+0x7c/0x110 [ 1736.664310][T17961] deactivate_locked_super+0xc1/0x1a0 [ 1736.664359][T17961] deactivate_super+0xde/0x100 [ 1736.664396][T17961] cleanup_mnt+0x225/0x450 [ 1736.664439][T17961] task_work_run+0x150/0x240 [ 1736.664484][T17961] ? __pfx_task_work_run+0x10/0x10 [ 1736.664518][T17961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.664562][T17961] ? __pfx___x64_sys_umount+0x10/0x10 [ 1736.664615][T17961] exit_to_user_mode_loop+0xeb/0x110 [ 1736.664657][T17961] do_syscall_64+0x3f6/0x4c0 [ 1736.664715][T17961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.664749][T17961] RIP: 0033:0x7f6e4438fc57 [ 1736.664777][T17961] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1736.664810][T17961] RSP: 002b:00007fff08d61118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1736.664842][T17961] RAX: 0000000000000000 RBX: 00007f6e44410925 RCX: 00007f6e4438fc57 [ 1736.664865][T17961] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff08d611d0 [ 1736.664886][T17961] RBP: 00007fff08d611d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.664907][T17961] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff08d62260 [ 1736.664928][T17961] R13: 00007f6e44410925 R14: 00000000001a7c8e R15: 00007fff08d622a0 [ 1736.664976][T17961] [ 1737.143342][T17961] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1737.524601][T19203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1737.566909][T19203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1737.616218][T19203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1737.669863][T19203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1738.091191][T19354] loop3: detected capacity change from 0 to 2048 [ 1738.484365][T19354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1738.572584][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.616377][T19203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.666408][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.673621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.696363][T19354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1738.764153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.771354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.052420][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1739.228517][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1739.249969][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1739.283598][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1739.320860][ T5929] usb 4-1: can't read configurations, error -71 [ 1739.852256][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.013523][ T12] ------------[ cut here ]------------ [ 1740.019385][ T12] kernel BUG at fs/ext4/inode.c:2747! [ 1740.041813][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1740.048265][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1740.060280][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1740.070352][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 1740.076372][ T12] RIP: 0010:ext4_do_writepages+0x2638/0x3490 [ 1740.082389][ T12] Code: a5 18 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 33 ed ff ff 48 8b bd 20 ff ff ff e8 a3 28 a9 ff e9 22 ed ff ff e8 39 44 43 ff 90 <0f> 0b e8 31 44 43 ff 90 0f 0b 90 e9 04 eb ff ff e8 23 44 43 ff 90 [ 1740.102019][ T12] RSP: 0018:ffffc900001172c0 EFLAGS: 00010293 [ 1740.108107][ T12] RAX: 0000000000000000 RBX: ffff8880539d1d00 RCX: ffffffff827897fd [ 1740.116111][ T12] RDX: ffff88801e285a00 RSI: ffffffff8278ad97 RDI: 0000000000000007 [ 1740.124097][ T12] RBP: ffffc90000117490 R08: 0000000000000007 R09: 0000000000000000 [ 1740.132086][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1740.140067][ T12] R13: ffff8880539d2168 R14: 0000000000000080 R15: ffffc900001174e8 [ 1740.148059][ T12] FS: 0000000000000000(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1740.157027][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.163626][ T12] CR2: 00007f68abf54e9c CR3: 000000000e382000 CR4: 0000000000350ef0 [ 1740.171614][ T12] Call Trace: [ 1740.174902][ T12] [ 1740.177838][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.183500][ T12] ? look_up_lock_class+0x6b/0x150 [ 1740.188653][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.194314][ T12] ? register_lock_class+0x41/0x4c0 [ 1740.199528][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 1740.204509][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 1740.209486][ T12] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1740.215065][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.220729][ T12] ? ext4_writepages+0x37a/0x7d0 [ 1740.225702][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.231364][ T12] ext4_writepages+0x37a/0x7d0 [ 1740.236163][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 1740.241494][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.247153][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 1740.252468][ T12] do_writepages+0x27a/0x600 [ 1740.257126][ T12] ? __pfx_do_writepages+0x10/0x10 [ 1740.262271][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.267926][ T12] ? reacquire_held_locks+0xcd/0x1f0 [ 1740.273254][ T12] ? writeback_sb_inodes+0x3a4/0xf90 [ 1740.278581][ T12] __writeback_single_inode+0x160/0xfb0 [ 1740.284166][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 1740.290273][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.295935][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 1740.301170][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.306846][ T12] writeback_sb_inodes+0x601/0xf90 [ 1740.312003][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1740.317673][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.323334][ T12] ? do_raw_spin_lock+0x12c/0x2b0 [ 1740.328401][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.334056][ T12] ? rcu_is_watching+0x12/0xc0 [ 1740.338848][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.344504][ T12] ? queue_io+0x3f6/0x520 [ 1740.348860][ T12] wb_writeback+0x419/0xb70 [ 1740.353402][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 1740.358456][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.364113][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.369765][ T12] ? mark_held_locks+0x49/0x80 [ 1740.374566][ T12] wb_workfn+0x14d/0xbe0 [ 1740.378822][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.384473][ T12] ? try_to_wake_up+0x157/0x1680 [ 1740.389433][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 1740.394208][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.399891][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.405568][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.411240][ T12] ? rcu_is_watching+0x12/0xc0 [ 1740.416048][ T12] process_one_work+0x9cf/0x1b70 [ 1740.421024][ T12] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1740.426441][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1740.431844][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.437513][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.443175][ T12] ? assign_work+0x1a0/0x250 [ 1740.447786][ T12] worker_thread+0x6c8/0xf10 [ 1740.452407][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1740.457543][ T12] kthread+0x3c5/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1740.461635][ T12] ? __pfx_kthread+0x10/0x10 [ 1740.466245][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.471907][ T12] ? rcu_is_watching+0x12/0xc0 [ 1740.476702][ T12] ? __pfx_kthread+0x10/0x10 [ 1740.481309][ T12] ret_from_fork+0x5d7/0x6f0 [ 1740.485936][ T12] ? __pfx_kthread+0x10/0x10 [ 1740.490550][ T12] ret_from_fork_asm+0x1a/0x30 [ 1740.495354][ T12] [ 1740.498385][ T12] Modules linked in: [ 1740.504099][ T12] ---[ end trace 0000000000000000 ]--- [ 1741.276433][ T12] RIP: 0010:ext4_do_writepages+0x2638/0x3490 [ 1741.286170][ T12] Code: a5 18 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 33 ed ff ff 48 8b bd 20 ff ff ff e8 a3 28 a9 ff e9 22 ed ff ff e8 39 44 43 ff 90 <0f> 0b e8 31 44 43 ff 90 0f 0b 90 e9 04 eb ff ff e8 23 44 43 ff 90 [ 1741.393175][ T12] RSP: 0018:ffffc900001172c0 EFLAGS: 00010293 [ 1741.399309][ T12] RAX: 0000000000000000 RBX: ffff8880539d1d00 RCX: ffffffff827897fd [ 1741.483248][ T12] RDX: ffff88801e285a00 RSI: ffffffff8278ad97 RDI: 0000000000000007 [ 1741.491267][ T12] RBP: ffffc90000117490 R08: 0000000000000007 R09: 0000000000000000 [ 1741.551915][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1741.581829][ T12] R13: ffff8880539d2168 R14: 0000000000000080 R15: ffffc900001174e8 [ 1741.602135][ T12] FS: 0000000000000000(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1741.611107][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.651950][ T12] CR2: 0000000000000000 CR3: 0000000047d05000 CR4: 0000000000350ef0 [ 1741.659997][ T12] Kernel panic - not syncing: Fatal exception [ 1741.666268][ T12] Kernel Offset: disabled [ 1741.670597][ T12] Rebooting in 86400 seconds..