last executing test programs: 9m27.681512396s ago: executing program 32 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 7m7.841652012s ago: executing program 33 (id=487): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) 5m48.739934951s ago: executing program 34 (id=741): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 5m23.146255977s ago: executing program 5 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4, 0x3}, 0x1c) 5m22.454045644s ago: executing program 5 (id=820): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='+W', 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x20000041) 5m21.601211836s ago: executing program 5 (id=822): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 5m20.754405302s ago: executing program 5 (id=826): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x4f57]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x83) 5m19.287103675s ago: executing program 5 (id=833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) 5m18.801662991s ago: executing program 5 (id=836): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 5m16.212020853s ago: executing program 35 (id=836): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3m49.118042967s ago: executing program 1 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3m47.46029821s ago: executing program 1 (id=1102): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000002bc0)="9f", 0x1}], 0x2) 3m46.4432101s ago: executing program 1 (id=1107): r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) close_range(r0, 0xffffffffffffffff, 0x0) 3m45.082161082s ago: executing program 1 (id=1111): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x10000, 0x7], 0xeeee8000, 0x2113c0}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m42.78476433s ago: executing program 1 (id=1114): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8021d08000b000000e8fe55a1180015000600142603640e1209000d000104", 0x1f}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000ef110800024000000000080004400000009b080003"], 0x98}}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 3m41.359576549s ago: executing program 1 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}}], 0x1, 0x220, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/122, 0x7a}], 0x1}, 0x40010101) 3m38.100778035s ago: executing program 36 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}}], 0x1, 0x220, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/122, 0x7a}], 0x1}, 0x40010101) 3m37.571548528s ago: executing program 6 (id=1124): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(0x3) 3m33.183813775s ago: executing program 6 (id=1135): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 3m32.647492025s ago: executing program 6 (id=1136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m31.471064536s ago: executing program 6 (id=1140): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40)) 3m29.415942488s ago: executing program 6 (id=1148): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m21.079259288s ago: executing program 6 (id=1159): syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=") r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r1, 0x708, 0x2bff, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) 3m18.078367902s ago: executing program 37 (id=1159): syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=") r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r1, 0x708, 0x2bff, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) 2m48.059120773s ago: executing program 7 (id=1242): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x5745, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 2m46.409208118s ago: executing program 7 (id=1246): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = getgid() syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000200)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='utf8,iocharset=koi8-r,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB=',time_offset=0x0000000000000006,allow_utime=00000000000000000007751,\x00'], 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") openat$pfkey(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m43.355081412s ago: executing program 7 (id=1251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002240)="96", 0x1}], 0x1}, 0x40088d0) sendmsg$rds(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000780)=[{0x0, 0xf00}, {&(0x7f00000020c0)=""/189, 0xbd}], 0x2, 0x0, 0x0, 0x4000000}, 0x4045) 2m42.335818716s ago: executing program 7 (id=1254): syz_mount_image$ntfs3(&(0x7f000001f340), &(0x7f000001f380)='.\x02\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="686964655f646f745f66696c65732c77696e646f77735f6e616d65732c696f636861727365743d63703836332c6e6f68696464656e2c0086b341b79079693e7d07fc3dcff87f142817c90581390ee9b7bc9b0e5ec81e48e017bcaf817a56911867d2c734420d3cf6"], 0x1, 0x1f3b2, &(0x7f000005db40)="$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") keyctl$read(0xb, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000200)={0x2080025, 0xa5a, 0xffffffff, 0x679, 0x3fffff7c}) 2m41.220933433s ago: executing program 8 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) 2m40.251101729s ago: executing program 8 (id=1258): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2010804, &(0x7f0000000400)={[{@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@dots}, {}, {@fat=@umask={'umask', 0x3d, 0x1}}]}, 0x1, 0x262, &(0x7f0000000040)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200000, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x64c81, 0x8) 2m39.346932782s ago: executing program 7 (id=1260): io_uring_setup(0x669, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) 2m39.072580895s ago: executing program 8 (id=1263): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x26) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) 2m37.235351297s ago: executing program 7 (id=1264): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) 2m33.573344512s ago: executing program 38 (id=1264): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) 2m33.438865113s ago: executing program 8 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m32.979197678s ago: executing program 8 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m31.587427279s ago: executing program 8 (id=1273): r0 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', r2, 0x0, 0xfc, 0x0, 0x0, 0x10, @remote, @mcast2={0xff, 0x3}, 0x20, 0x10, 0x2, 0x40d}}) 2m28.913302344s ago: executing program 39 (id=1273): r0 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', r2, 0x0, 0xfc, 0x0, 0x0, 0x10, @remote, @mcast2={0xff, 0x3}, 0x20, 0x10, 0x2, 0x40d}}) 8.976095937s ago: executing program 2 (id=1800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x100000000000000) 8.212082056s ago: executing program 2 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.606014326s ago: executing program 2 (id=1809): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 7.355523969s ago: executing program 3 (id=1810): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x90009427, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.106447354s ago: executing program 2 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000480)=ANY=[], 0xec, 0x5ae3, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x100, 0x6ff) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) 5.166495674s ago: executing program 2 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffea3, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) 3.572151737s ago: executing program 3 (id=1827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 3.570066195s ago: executing program 4 (id=1828): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x3000, 0xc000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.517605671s ago: executing program 9 (id=1829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000100)={r1, r2}) 3.244045639s ago: executing program 0 (id=1830): r0 = io_uring_setup(0x1788, &(0x7f0000000640)={0x0, 0xa385, 0x8, 0x1, 0x2de}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x42a) semop(r1, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x9b6a}], 0x2) semop(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.20239451s ago: executing program 9 (id=1831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3ff) 2.892801507s ago: executing program 4 (id=1832): pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) splice(r0, 0x0, r2, 0x0, 0x1e8640, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.836737334s ago: executing program 9 (id=1833): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}}, 0x8000) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.676474513s ago: executing program 0 (id=1834): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 2.401483794s ago: executing program 3 (id=1835): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000700)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "e3cf34", 0x30, 0x3a, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @dest_unreach={0x1, 0x6d0a540bb55e474, 0x0, 0x2, '\x00', {0x0, 0x6, "9bd2c0", 0xb, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0}}}}}}}, 0x0) 2.216110533s ago: executing program 4 (id=1836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)=""/232, 0xe8}], 0x1}, 0x7}], 0x2, 0x40011102, 0x0) 2.155293662s ago: executing program 0 (id=1837): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r0) 1.716528109s ago: executing program 3 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 1.69821611s ago: executing program 9 (id=1839): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.632490525s ago: executing program 4 (id=1840): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r1 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2cc8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e046e513b3177e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc"], 0x0}, 0x90) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x2020, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.60773975s ago: executing program 0 (id=1841): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 1.244593847s ago: executing program 9 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xfffffffffffffe8e, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1.136434263s ago: executing program 3 (id=1843): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x240881) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1.10196262s ago: executing program 0 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.074447424s ago: executing program 4 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 425.008678ms ago: executing program 3 (id=1846): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r1, 0xec1b3000) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 272.172938ms ago: executing program 0 (id=1847): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) 91.944703ms ago: executing program 9 (id=1848): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 28.288315ms ago: executing program 2 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 0s ago: executing program 4 (id=1850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast1}], 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x132, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f000014a000/0x9000)=nil, 0x9000, 0x1000004) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) getsockname(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ed [ 656.850645][ T9738] team0: Port device team_slave_1 added [ 656.878486][ T4016] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 657.147402][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.154881][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.183302][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.210654][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.220387][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.248445][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.300399][ T5809] Bluetooth: hci4: command tx timeout [ 657.491306][ T9784] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 657.575965][ T9785] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 657.625830][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.645543][ T9784] bond0: (slave team0): Enslaving as an active interface with an up link [ 657.713087][ T9785] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 657.853798][ T9738] hsr_slave_0: entered promiscuous mode [ 657.865353][ T9738] hsr_slave_1: entered promiscuous mode [ 657.877311][ T9738] debugfs: 'hsr0' already exists in 'hsr' [ 657.883798][ T9738] Cannot create hsr debugfs directory [ 657.950243][ T9788] loop6: detected capacity change from 0 to 256 [ 658.015075][ T9788] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 658.031183][ T9788] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 658.424218][ T9788] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 658.569035][ T9790] loop8: detected capacity change from 0 to 4096 [ 658.681244][ T9788] loop6: detected capacity change from 256 to 64 [ 658.939700][ T9790] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 659.379130][ T5809] Bluetooth: hci4: command tx timeout [ 659.433448][ T9738] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 659.472891][ T9738] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 659.499939][ T9738] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 659.543586][ T9738] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 660.564886][ T9803] loop7: detected capacity change from 0 to 32768 [ 660.758592][ T9803] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 660.758763][ T9803] allowing incompatible features above 0.0: (unknown version) [ 660.758861][ T9803] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 660.822513][ T9803] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 660.831300][ T9803] bcachefs (loop7): initializing new filesystem [ 660.858734][ T9803] bcachefs (loop7): going read-write [ 660.908070][ T9803] bcachefs (loop7): marking superblocks [ 660.968380][ T9803] bcachefs (loop7): initializing freespace [ 661.003930][ T9803] bcachefs (loop7): done initializing freespace [ 661.026015][ T9803] bcachefs (loop7): reading snapshots table [ 661.032651][ T9803] bcachefs (loop7): reading snapshots done [ 661.199448][ T9803] bcachefs (loop7): done starting filesystem [ 661.462754][ T5809] Bluetooth: hci4: command tx timeout [ 662.467306][ T9821] loop4: detected capacity change from 0 to 40427 [ 662.503258][ T8490] bcachefs (loop7): shutting down [ 662.508755][ T8490] bcachefs (loop7): going read-only [ 662.515602][ T8490] bcachefs (loop7): finished waiting for writes to stop [ 662.545281][ T8490] bcachefs (loop7): flushing journal and stopping allocators, journal seq 4 [ 662.565427][ T9821] F2FS-fs (loop4): invalid crc value [ 662.709539][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.933140][ T9821] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 662.957274][ T9821] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 662.996626][ T3735] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.111243][ T8490] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4 [ 663.199727][ T3735] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.224391][ T5818] syz-executor: attempt to access beyond end of device [ 663.224391][ T5818] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 663.243720][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 663.243901][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.243995][ T5818] Call Trace: [ 663.244055][ T5818] [ 663.244109][ T5818] __dump_stack+0x26/0x30 [ 663.244312][ T5818] dump_stack_lvl+0x1df/0x270 [ 663.244504][ T5818] dump_stack+0x1e/0x25 [ 663.244670][ T5818] f2fs_handle_critical_error+0xa6f/0xc20 [ 663.244920][ T5818] f2fs_stop_checkpoint+0x65/0x80 [ 663.245136][ T8490] bcachefs (loop7): clean shutdown complete, journal seq 5 [ 663.245138][ T5818] f2fs_write_end_io+0x101c/0x1bc0 [ 663.245399][ T5818] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 663.245638][ T5818] bio_endio+0xe24/0xf80 [ 663.245912][ T5818] submit_bio_noacct+0x214/0x2710 [ 663.246219][ T5818] submit_bio+0x57c/0x630 [ 663.246418][ T5818] f2fs_submit_write_bio+0x92/0x250 [ 663.246671][ T5818] __submit_merged_bio+0x16f/0x6a0 [ 663.246879][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 663.247069][ T5818] __submit_merged_write_cond+0x458/0x9a0 [ 663.247330][ T5818] f2fs_write_data_pages+0x4bb2/0x5480 [ 663.247742][ T5818] ? trace_pid_list_is_set+0x170/0x1f0 [ 663.247992][ T5818] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 663.248244][ T5818] ? __update_load_avg_se+0xa96/0x11c0 [ 663.248492][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 663.248710][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 663.248999][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 663.249254][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 663.249457][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 663.249656][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 663.249856][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 663.250125][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 663.250366][ T5818] do_writepages+0x3ef/0x860 [ 663.250563][ T5818] ? _raw_spin_unlock+0x30/0x50 [ 663.250751][ T5818] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 663.251053][ T5818] filemap_fdatawrite+0x207/0x260 [ 663.251363][ T5818] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 663.251598][ T5818] f2fs_write_checkpoint+0xfe2/0x2b00 [ 663.251931][ T5818] kill_f2fs_super+0x2ff/0x970 [ 663.252158][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 663.252340][ T5818] deactivate_locked_super+0xcb/0x3c0 [ 663.252557][ T5818] deactivate_super+0x12f/0x140 [ 663.252746][ T5818] cleanup_mnt+0x6fb/0x780 [ 663.252974][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 663.253189][ T5818] ? __pfx___cleanup_mnt+0x10/0x10 [ 663.253419][ T5818] __cleanup_mnt+0x22/0x30 [ 663.253638][ T5818] task_work_run+0x209/0x2b0 [ 663.253851][ T5818] exit_to_user_mode_loop+0x2a6/0x330 [ 663.254073][ T5818] do_syscall_64+0x1e3/0x210 [ 663.254289][ T5818] ? irqentry_exit+0x16/0x60 [ 663.254472][ T5818] ? clear_bhb_loop+0x40/0x90 [ 663.254659][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.254836][ T5818] RIP: 0033:0x7fefe638ff17 [ 663.254969][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 663.255126][ T5818] RSP: 002b:00007fffbc5dd2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 663.255298][ T5818] RAX: 0000000000000000 RBX: 00007fefe6411c05 RCX: 00007fefe638ff17 [ 663.255413][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbc5dd380 [ 663.255524][ T5818] RBP: 00007fffbc5dd380 R08: 0000000000000000 R09: 0000000000000000 [ 663.255631][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffbc5de410 [ 663.255739][ T5818] R13: 00007fefe6411c05 R14: 00000000000a1e18 R15: 00007fffbc5de450 [ 663.255891][ T5818] [ 663.257217][ T5818] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.317855][ T8490] bcachefs (loop7): marking filesystem clean [ 663.374717][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.702821][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.710517][ T4016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.728365][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.736294][ T4016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.823447][ T8490] bcachefs (loop7): shutdown complete [ 663.895761][ T3735] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.287185][ T3735] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.406450][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.413665][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.769025][ T9834] loop8: detected capacity change from 0 to 32768 [ 665.785842][ T3735] bridge_slave_1: left allmulticast mode [ 665.795274][ T3735] bridge_slave_1: left promiscuous mode [ 665.802302][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.839497][ T3735] bridge_slave_0: left allmulticast mode [ 665.845658][ T3735] bridge_slave_0: left promiscuous mode [ 665.852561][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.418209][ T9834] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 666.418396][ T9834] allowing incompatible features above 0.0: (unknown version) [ 666.418493][ T9834] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 666.465953][ T9834] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 666.474570][ T9834] bcachefs (loop8): initializing new filesystem [ 666.502475][ T9834] bcachefs (loop8): going read-write [ 666.690301][ T9834] bcachefs (loop8): marking superblocks [ 666.753812][ T9834] bcachefs (loop8): initializing freespace [ 666.784786][ T9834] bcachefs (loop8): done initializing freespace [ 666.806090][ T9834] bcachefs (loop8): reading snapshots table [ 666.821904][ T9834] bcachefs (loop8): reading snapshots done [ 667.015058][ T9834] bcachefs (loop8): done starting filesystem [ 667.046615][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.080890][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.110671][ T3735] bond0 (unregistering): Released all slaves [ 667.489286][ T8793] bcachefs (loop8): shutting down [ 667.495872][ T8793] bcachefs (loop8): going read-only [ 667.507923][ T8793] bcachefs (loop8): finished waiting for writes to stop [ 667.551767][ T8793] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 667.856535][ T8793] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3 [ 667.894413][ T8793] bcachefs (loop8): clean shutdown complete, journal seq 4 [ 667.911771][ T8793] bcachefs (loop8): marking filesystem clean [ 667.968601][ T8793] bcachefs (loop8): shutdown complete [ 668.122607][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 668.204648][ T3735] hsr_slave_0: left promiscuous mode [ 668.252271][ T3735] hsr_slave_1: left promiscuous mode [ 668.260694][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.269425][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.349992][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.359736][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.452546][ T3735] veth1_vlan: left promiscuous mode [ 668.459879][ T3735] veth0_vlan: left promiscuous mode [ 669.486299][ T3735] team0 (unregistering): Port device team_slave_1 removed [ 669.568699][ T3735] team0 (unregistering): Port device team_slave_0 removed [ 669.789974][ T9852] bridge_slave_1: left allmulticast mode [ 669.796255][ T9852] bridge_slave_1: left promiscuous mode [ 669.803439][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.873573][ T9852] bridge_slave_0: left allmulticast mode [ 669.880589][ T9852] bridge_slave_0: left promiscuous mode [ 669.895928][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.938197][ T9855] loop7: detected capacity change from 0 to 256 [ 670.323639][ T9855] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 670.483250][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.148968][ T30] audit: type=1326 audit(1755524815.174:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.1161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cf9b8ebe9 code=0x0 [ 671.841624][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 671.865329][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 671.884147][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 671.913792][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 671.932265][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.772762][ T9738] veth0_vlan: entered promiscuous mode [ 672.919694][ T9738] veth1_vlan: entered promiscuous mode [ 673.615456][ T9738] veth0_macvtap: entered promiscuous mode [ 673.760224][ T9738] veth1_macvtap: entered promiscuous mode [ 673.996252][ T9882] loop4: detected capacity change from 0 to 32768 [ 674.064920][ T5809] Bluetooth: hci1: command tx timeout [ 674.121266][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.226961][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.333089][ T9887] netlink: 'syz.7.1167': attribute type 21 has an invalid length. [ 674.341430][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1167'. [ 674.377758][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.437599][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.447659][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.470455][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.507022][ T9887] netlink: 'syz.7.1167': attribute type 21 has an invalid length. [ 674.517498][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1167'. [ 674.523688][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.583065][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.613358][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 674.646424][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.672717][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.141533][ T5812] Bluetooth: hci1: command tx timeout [ 676.359985][ T9912] syz.8.1173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.376429][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: syz.8.1173 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 676.376603][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.376701][ T9912] Call Trace: [ 676.376752][ T9912] [ 676.376804][ T9912] __dump_stack+0x26/0x30 [ 676.377007][ T9912] dump_stack_lvl+0x1df/0x270 [ 676.377190][ T9912] dump_stack+0x1e/0x25 [ 676.377357][ T9912] warn_alloc+0x470/0x690 [ 676.377554][ T9912] ? kmsan_get_metadata+0xfb/0x160 [ 676.377860][ T9912] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 676.378062][ T9912] __vmalloc_node_range_noprof+0x133/0x2360 [ 676.378309][ T9912] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 676.378522][ T9912] ? should_fail_ex+0x45/0x8a0 [ 676.378758][ T9912] ? kmsan_get_metadata+0xfb/0x160 [ 676.378949][ T9912] ? kmsan_get_metadata+0xfb/0x160 [ 676.379128][ T9912] ? kmsan_get_metadata+0xfb/0x160 [ 676.379305][ T9912] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 676.379507][ T9912] ? kmsan_get_metadata+0xfb/0x160 [ 676.379716][ T9912] vmalloc_user_noprof+0xce/0x140 [ 676.379872][ T9912] ? xskq_create+0x11d/0x290 [ 676.380098][ T9912] xskq_create+0x11d/0x290 [ 676.380326][ T9912] xsk_init_queue+0xfd/0x1d0 [ 676.380524][ T9912] xsk_setsockopt+0x968/0xfe0 [ 676.380753][ T9912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.380948][ T9912] __sys_setsockopt+0x43e/0x580 [ 676.381149][ T9912] __x64_sys_setsockopt+0xf4/0x1a0 [ 676.381336][ T9912] x64_sys_call+0x27c9/0x3e20 [ 676.381541][ T9912] do_syscall_64+0xd9/0x210 [ 676.381753][ T9912] ? irqentry_exit+0x16/0x60 [ 676.381918][ T9912] ? clear_bhb_loop+0x40/0x90 [ 676.382084][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.382247][ T9912] RIP: 0033:0x7f0a7558ebe9 [ 676.382367][ T9912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.382526][ T9912] RSP: 002b:00007f0a7646d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.382684][ T9912] RAX: ffffffffffffffda RBX: 00007f0a757b5fa0 RCX: 00007f0a7558ebe9 [ 676.382799][ T9912] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 676.382892][ T9912] RBP: 00007f0a75611e19 R08: 0000000000000004 R09: 0000000000000000 [ 676.382988][ T9912] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 676.383087][ T9912] R13: 00007f0a757b6038 R14: 00007f0a757b5fa0 R15: 00007ffd67a5f308 [ 676.383239][ T9912] [ 676.629705][ T9912] Mem-Info: [ 676.633522][ T9912] active_anon:5613 inactive_anon:0 isolated_anon:0 [ 676.633522][ T9912] active_file:18366 inactive_file:40453 isolated_file:0 [ 676.633522][ T9912] unevictable:768 dirty:370 writeback:0 [ 676.633522][ T9912] slab_reclaimable:5750 slab_unreclaimable:22152 [ 676.633522][ T9912] mapped:29795 shmem:2001 pagetables:1447 [ 676.633522][ T9912] sec_pagetables:0 bounce:0 [ 676.633522][ T9912] kernel_misc_reclaimable:0 [ 676.633522][ T9912] free:351624 free_pcp:14031 free_cma:0 [ 676.681901][ T9912] Node 0 active_anon:22588kB inactive_anon:0kB active_file:73464kB inactive_file:161608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119180kB dirty:1480kB writeback:0kB shmem:6468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5024kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.718072][ T9912] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.751344][ T9912] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.785831][ T9912] lowmem_reserve[]: 0 928 1241 1241 1241 [ 676.795362][ T9912] Node 0 DMA32 free:490496kB boost:0kB min:36820kB low:46024kB high:55228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5192kB inactive_anon:0kB active_file:68736kB inactive_file:73652kB unevictable:0kB writepending:668kB present:3129332kB managed:951112kB mlocked:0kB bounce:0kB free_pcp:40292kB local_pcp:22572kB free_cma:0kB [ 676.829019][ T9912] lowmem_reserve[]: 0 0 312 312 312 [ 676.840297][ T9912] Node 0 Normal free:16796kB boost:0kB min:13016kB low:16268kB high:19520kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17452kB inactive_anon:0kB active_file:4728kB inactive_file:87956kB unevictable:1536kB writepending:812kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:13964kB local_pcp:7312kB free_cma:0kB [ 676.875392][ T9912] lowmem_reserve[]: 0 0 0 0 0 [ 676.881429][ T9912] Node 1 Normal free:895108kB boost:0kB min:40100kB low:50124kB high:60148kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987120kB mlocked:0kB bounce:0kB free_pcp:1884kB local_pcp:0kB free_cma:0kB [ 676.914180][ T9912] lowmem_reserve[]: 0 0 0 0 0 [ 676.919696][ T9912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 676.933891][ T9912] Node 0 DMA32: 140*4kB (ME) 408*8kB (UM) 567*16kB (UME) 389*32kB (UME) 224*64kB (M) 175*128kB (M) 250*256kB (UME) 176*512kB (UME) 84*1024kB (UME) 12*2048kB (UME) 40*4096kB (UM) = 490624kB [ 676.957405][ T9912] Node 0 Normal: 241*4kB (UME) 195*8kB (ME) 115*16kB (UME) 87*32kB (UME) 40*64kB (UME) 23*128kB (ME) 10*256kB (ME) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 16748kB [ 676.977094][ T9912] Node 1 Normal: 1*4kB (E) 2*8kB (E) 3*16kB (U) 14*32kB (UE) 16*64kB (UE) 13*128kB (UE) 8*256kB (UME) 4*512kB (UM) 3*1024kB (U) 4*2048kB (UM) 214*4096kB (M) = 895108kB [ 676.996387][ T9912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.006815][ T9912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.017020][ T9912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.027262][ T9912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.037184][ T9912] 60786 total pagecache pages [ 677.042435][ T9912] 0 pages in swap cache [ 677.046924][ T9912] Free swap = 124996kB [ 677.051543][ T9912] Total swap = 124996kB [ 677.057837][ T9912] 2097051 pages RAM [ 677.062264][ T9912] 0 pages HighMem/MovableOnly [ 677.067233][ T9912] 1531350 pages reserved [ 677.071846][ T9912] 0 pages cma reserved [ 677.218378][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.226898][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.235383][ T9869] bridge_slave_0: entered allmulticast mode [ 677.246432][ T9869] bridge_slave_0: entered promiscuous mode [ 677.316510][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.325852][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.334761][ T9869] bridge_slave_1: entered allmulticast mode [ 677.346669][ T9869] bridge_slave_1: entered promiscuous mode [ 677.663852][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.678507][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 677.718744][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.904270][ T9929] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 678.078700][ T9869] team0: Port device team_slave_0 added [ 678.158978][ T9869] team0: Port device team_slave_1 added [ 678.221675][ T5812] Bluetooth: hci1: command tx timeout [ 678.546538][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.554123][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.580727][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.682724][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.690352][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.720193][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.241509][ T9869] hsr_slave_0: entered promiscuous mode [ 679.252668][ T9869] hsr_slave_1: entered promiscuous mode [ 679.262172][ T9869] debugfs: 'hsr0' already exists in 'hsr' [ 679.268150][ T9869] Cannot create hsr debugfs directory [ 679.662943][ T9946] block nbd4: shutting down sockets [ 680.302326][ T5812] Bluetooth: hci1: command tx timeout [ 680.611691][ T30] audit: type=1326 audit(1755525080.637:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.8.1187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f0a7552add9 code=0x0 [ 681.428819][ T9869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.552929][ T9869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.635111][ T9869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.506511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.517863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.530071][ T9980] loop8: detected capacity change from 0 to 32768 [ 682.545539][ T9869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.683566][ T9980] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 682.764787][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.774202][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.845186][ T9980] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 683.145500][ T9991] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 683.147251][ T8793] ocfs2: Unmounting device (7,8) on (node local) [ 683.593751][ T9996] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 683.593751][ T9996] The task syz.4.1195 (9996) triggered the difference, watch for misbehavior. [ 683.752064][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.952118][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.036550][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.044561][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.165428][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.173332][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.186870][T10003] loop7: detected capacity change from 0 to 1024 [ 684.432060][T10003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 684.446416][T10003] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.552559][T10003] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.1196: lblock 0 mapped to illegal pblock 0 (length 6) [ 684.568436][ T30] audit: type=1800 audit(1755525084.577:82): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1196" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 684.587465][T10003] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.1196: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 684.716211][T10011] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.1196: lblock 0 mapped to illegal pblock 0 (length 1) [ 684.813874][T10011] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.1196: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 685.208166][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 685.294433][ T8490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 685.412258][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 685.722376][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 685.801471][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 685.809926][ T24] usb 5-1: can't read configurations, error -71 [ 685.991752][ T3768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.330010][ T3768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.371829][T10018] loop9: detected capacity change from 0 to 32768 [ 686.708937][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 686.709138][T10018] allowing incompatible features above 0.0: (unknown version) [ 686.709236][T10018] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 686.709353][T10018] with devices loop9 [ 686.765069][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 686.766429][ T3768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.776361][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 686.807034][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 687.059433][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 687.134835][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 687.167795][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 687.192680][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 687.208377][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 687.306492][ T3768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.452615][T10018] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 687.778273][ T3768] bridge_slave_1: left allmulticast mode [ 687.784639][ T3768] bridge_slave_1: left promiscuous mode [ 687.791659][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.855447][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 687.858037][ T3768] bridge_slave_0: left allmulticast mode [ 687.865029][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 687.870713][ T3768] bridge_slave_0: left promiscuous mode [ 687.880297][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 687.887122][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.960512][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 688.296809][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 688.417107][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 688.534160][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 688.749981][ T9738] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 688.795539][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.875262][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.912742][T10054] vivid-004: disconnect [ 688.919258][ T3768] bond0 (unregistering): Released all slaves [ 689.113017][T10052] vivid-004: reconnect [ 689.233543][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.931744][ T3768] hsr_slave_0: left promiscuous mode [ 689.965112][ T3768] hsr_slave_1: left promiscuous mode [ 689.977848][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.985900][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.030099][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.038130][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.123718][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1209'. [ 690.190144][ T3768] veth1_macvtap: left promiscuous mode [ 690.198892][ T3768] veth0_macvtap: left promiscuous mode [ 690.205691][ T3768] veth1_vlan: left promiscuous mode [ 690.211715][ T3768] veth0_vlan: left promiscuous mode [ 691.254298][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 691.286832][T10074] loop7: detected capacity change from 0 to 128 [ 691.323706][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 691.337722][T10074] ufs: You didn't specify the type of your ufs filesystem [ 691.337722][T10074] [ 691.337722][T10074] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 691.337722][T10074] [ 691.337722][T10074] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 691.463786][T10074] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 692.083782][ T9869] veth0_vlan: entered promiscuous mode [ 692.231457][ T9869] veth1_vlan: entered promiscuous mode [ 692.563235][ T9869] veth0_macvtap: entered promiscuous mode [ 692.662648][ T9869] veth1_macvtap: entered promiscuous mode [ 692.876370][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.987151][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.051655][ T5866] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 693.117469][ T1892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.151341][ T1892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.203393][ T1892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.234913][ T1892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.255617][ T5866] usb 9-1: Using ep0 maxpacket: 16 [ 693.293028][ T5866] usb 9-1: config 0 has no interfaces? [ 693.299430][ T5866] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 693.309856][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.405105][ T5866] usb 9-1: config 0 descriptor?? [ 693.680144][ T5866] usb 9-1: USB disconnect, device number 3 [ 693.995242][T10096] loop4: detected capacity change from 0 to 1024 [ 694.498915][ T14] hfsplus: b-tree write err: -5, ino 4 [ 697.019309][T10141] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 698.399054][T10147] loop8: detected capacity change from 0 to 8192 [ 698.837831][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1236'. [ 700.334354][T10175] loop4: detected capacity change from 0 to 8192 [ 700.702975][T10182] loop8: detected capacity change from 0 to 40427 [ 700.742160][T10182] F2FS-fs (loop8): invalid crc value [ 701.094569][T10182] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 701.106109][T10182] F2FS-fs (loop8): Start checkpoint disabled! [ 701.203207][T10182] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 701.246803][T10182] syz.8.1239: attempt to access beyond end of device [ 701.246803][T10182] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 701.358278][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.366968][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.502021][ T3735] kworker/u8:16: attempt to access beyond end of device [ 701.502021][ T3735] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 701.518751][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: kworker/u8:16 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 701.518916][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.519057][ T3735] Workqueue: writeback wb_workfn (flush-7:8) [ 701.519302][ T3735] Call Trace: [ 701.519356][ T3735] [ 701.519409][ T3735] __dump_stack+0x26/0x30 [ 701.519701][ T3735] dump_stack_lvl+0x1df/0x270 [ 701.519890][ T3735] dump_stack+0x1e/0x25 [ 701.520056][ T3735] f2fs_handle_critical_error+0xa6f/0xc20 [ 701.520315][ T3735] f2fs_stop_checkpoint+0x65/0x80 [ 701.520526][ T3735] f2fs_write_end_io+0x101c/0x1bc0 [ 701.520781][ T3735] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 701.520989][ T3735] bio_endio+0xe24/0xf80 [ 701.521141][ T3735] submit_bio_noacct+0x214/0x2710 [ 701.521352][ T3735] submit_bio+0x57c/0x630 [ 701.521523][ T3735] f2fs_submit_write_bio+0x92/0x250 [ 701.521723][ T3735] __submit_merged_bio+0x16f/0x6a0 [ 701.521920][ T3735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 701.522118][ T3735] __submit_merged_write_cond+0x458/0x9a0 [ 701.522344][ T3735] f2fs_write_data_pages+0x4bb2/0x5480 [ 701.522709][ T3735] ? stack_depot_save_flags+0x35/0x7b0 [ 701.522920][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.523092][ T3735] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 701.523259][ T3735] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 701.523493][ T3735] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 701.523745][ T3735] ? kmsan_slab_free+0xd0/0x140 [ 701.523896][ T3735] ? kmem_cache_free+0x2a1/0xec0 [ 701.524087][ T3735] ? __kfree_skb+0x20b/0x260 [ 701.524241][ T3735] ? consume_skb+0x83/0x230 [ 701.524381][ T3735] ? netlink_broadcast_filtered+0x227b/0x2430 [ 701.524572][ T3735] ? nlmsg_notify+0x15b/0x2f0 [ 701.524727][ T3735] ? rtnl_notify+0xba/0x100 [ 701.524874][ T3735] ? inet6_ifmcaddr_notify+0x207/0x3a0 [ 701.525053][ T3735] ? __ipv6_dev_mc_inc+0xc1e/0x1250 [ 701.525217][ T3735] ? ipv6_dev_mc_inc+0x38/0x50 [ 701.525387][ T3735] ? addrconf_dad_work+0x401/0x1d10 [ 701.525585][ T3735] ? process_scheduled_works+0xb91/0x1d80 [ 701.525784][ T3735] ? worker_thread+0xedf/0x1590 [ 701.525972][ T3735] ? kthread+0xd59/0xf00 [ 701.526116][ T3735] ? ret_from_fork+0x1e3/0x310 [ 701.526258][ T3735] ? ret_from_fork_asm+0x1a/0x30 [ 701.526462][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.526628][ T3735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 701.526802][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.526968][ T3735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 701.527140][ T3735] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 701.527344][ T3735] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 701.527549][ T3735] do_writepages+0x3ef/0x860 [ 701.527704][ T3735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 701.527887][ T3735] ? queue_io+0x751/0x790 [ 701.528029][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.528219][ T3735] __writeback_single_inode+0x101/0x1190 [ 701.528385][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.528570][ T3735] writeback_sb_inodes+0xac1/0x1cb0 [ 701.528818][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.529035][ T3735] wb_writeback+0x4ce/0xc00 [ 701.529204][ T3735] ? queue_io+0x451/0x790 [ 701.529360][ T3735] wb_workfn+0x397/0x1910 [ 701.529562][ T3735] ? kmsan_get_metadata+0xfb/0x160 [ 701.529755][ T3735] ? __pfx_wb_workfn+0x10/0x10 [ 701.529949][ T3735] process_scheduled_works+0xb91/0x1d80 [ 701.530224][ T3735] worker_thread+0xedf/0x1590 [ 701.530480][ T3735] kthread+0xd59/0xf00 [ 701.530628][ T3735] ? __pfx_worker_thread+0x10/0x10 [ 701.530858][ T3735] ? __pfx_kthread+0x10/0x10 [ 701.531004][ T3735] ret_from_fork+0x1e3/0x310 [ 701.531153][ T3735] ? __pfx_kthread+0x10/0x10 [ 701.531310][ T3735] ret_from_fork_asm+0x1a/0x30 [ 701.531551][ T3735] [ 701.896747][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.907389][ T3735] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 701.913776][ T1892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.923005][ T1892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.985285][T10201] loop7: detected capacity change from 0 to 256 [ 703.065389][T10201] exfat: Deprecated parameter 'utf8' [ 703.848761][T10201] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 705.131190][T10213] loop0: detected capacity change from 0 to 32768 [ 705.368177][T10213] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 705.368357][T10213] allowing incompatible features above 0.0: (unknown version) [ 705.368474][T10213] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 705.414201][T10213] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 705.431373][T10213] bcachefs (loop0): initializing new filesystem [ 705.455322][T10213] bcachefs (loop0): going read-write [ 705.496813][T10213] bcachefs (loop0): marking superblocks [ 705.563247][T10213] bcachefs (loop0): initializing freespace [ 705.593395][T10213] bcachefs (loop0): done initializing freespace [ 705.615218][T10213] bcachefs (loop0): reading snapshots table [ 705.621796][T10213] bcachefs (loop0): reading snapshots done [ 705.755637][T10213] bcachefs (loop0): done starting filesystem [ 705.924492][ T30] audit: type=1800 audit(1755525105.947:83): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1248" name="bus" dev="loop0" ino=4098 res=0 errno=0 [ 705.983478][ T5866] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 706.155948][ T9869] bcachefs (loop0): shutting down [ 706.163429][ T9869] bcachefs (loop0): going read-only [ 706.190393][ T9869] bcachefs (loop0): finished waiting for writes to stop [ 706.262336][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.274280][ T5866] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 706.281214][ T9869] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 706.283794][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.385780][ T5866] usb 5-1: config 0 descriptor?? [ 706.595125][ T9869] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 706.704086][ T9869] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 706.739934][ T9869] bcachefs (loop0): marking filesystem clean [ 706.885990][ T5866] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 706.934293][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input15 [ 707.002294][ T9869] bcachefs (loop0): shutdown complete [ 707.202980][ T5866] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 707.612876][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1256'. [ 707.769482][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1256'. [ 707.783097][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.964524][T10247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.024530][T10240] loop7: detected capacity change from 0 to 4096 [ 708.107201][T10240] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 708.819744][T10240] overlayfs: upper fs does not support tmpfile. [ 708.893605][T10240] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 709.146658][T10257] loop8: detected capacity change from 0 to 1024 [ 709.594835][ T5903] usb 5-1: USB disconnect, device number 13 [ 709.790333][ T8490] ntfs3(loop7): ino=1c, mi_enum_attr [ 709.796526][ T8490] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 709.846798][ T8490] ntfs3(loop7): ino=1d, mi_enum_attr [ 709.875225][ T3735] hfsplus: b-tree write err: -5, ino 4 [ 710.272273][ T5903] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 710.463148][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 710.495361][ T5903] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 710.495527][ T5903] usb 5-1: config 0 has no interface number 0 [ 710.507223][ T5903] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 710.507431][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.507584][ T5903] usb 5-1: Product: syz [ 710.507694][ T5903] usb 5-1: Manufacturer: syz [ 710.507846][ T5903] usb 5-1: SerialNumber: syz [ 710.529264][ T5903] usb 5-1: config 0 descriptor?? [ 710.600618][ T5903] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 710.829492][ T5903] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 710.876924][ T5903] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 711.397988][ T4331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.736196][ T4331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.005433][ T4331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.348313][ T4331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.140172][ T4331] bridge_slave_1: left allmulticast mode [ 713.148786][ T4331] bridge_slave_1: left promiscuous mode [ 713.159590][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.382974][ T4331] bridge_slave_0: left allmulticast mode [ 713.389730][ T4331] bridge_slave_0: left promiscuous mode [ 713.406213][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.454494][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 713.459126][ T5866] usb 5-1: USB disconnect, device number 14 [ 713.544775][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 713.603281][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 713.625582][ T5866] quatech2 5-1:0.51: device disconnected [ 714.114341][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.180153][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.238106][ T4331] bond0 (unregistering): Released all slaves [ 714.894499][ T4331] hsr_slave_0: left promiscuous mode [ 714.917591][ T4331] hsr_slave_1: left promiscuous mode [ 714.926319][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.977119][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.734185][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 715.863311][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 715.898702][T10292] loop4: detected capacity change from 0 to 512 [ 716.014644][T10292] EXT4-fs: Ignoring removed mblk_io_submit option [ 716.141613][T10292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 716.505881][T10292] EXT4-fs (loop4): 1 truncate cleaned up [ 716.515280][T10292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.644490][ T30] audit: type=1804 audit(1755525116.647:84): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1268" name="/newroot/256/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 717.358184][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.378323][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.397022][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.413431][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.457227][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.481927][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.703514][ T4331] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.909231][ T4331] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.270110][ T4331] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.394701][ T4331] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.982353][ T4331] bridge_slave_1: left allmulticast mode [ 718.988292][ T4331] bridge_slave_1: left promiscuous mode [ 718.995332][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.083565][ T4331] bridge_slave_0: left allmulticast mode [ 719.089486][ T4331] bridge_slave_0: left promiscuous mode [ 719.097174][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.581258][ T5812] Bluetooth: hci0: command tx timeout [ 719.700200][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.753702][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.786391][ T4331] bond0 (unregistering): Released all slaves [ 719.894327][T10307] chnl_net:caif_netlink_parms(): no params data found [ 721.624145][T10344] loop0: detected capacity change from 0 to 512 [ 721.677103][ T5812] Bluetooth: hci0: command tx timeout [ 721.687333][ T4331] hsr_slave_0: left promiscuous mode [ 721.752171][ T4331] hsr_slave_1: left promiscuous mode [ 721.760826][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.769024][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.825862][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.834925][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.845470][T10333] overlayfs: failed to clone upperpath [ 721.885624][ T4331] veth1_macvtap: left promiscuous mode [ 721.892242][ T4331] veth0_macvtap: left promiscuous mode [ 721.898471][ T4331] veth1_vlan: left promiscuous mode [ 721.904855][ T4331] veth0_vlan: left promiscuous mode [ 721.982897][T10344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.996627][T10344] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.328423][T10344] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1281: corrupted inode contents [ 722.359306][T10344] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1281: mark_inode_dirty error [ 722.410666][T10344] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1281: corrupted inode contents [ 722.468328][T10344] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1281: mark_inode_dirty error [ 722.999656][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 723.021692][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 723.033332][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 723.044468][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 723.055942][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 723.070255][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 723.082732][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 723.281667][ T9869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.746500][ T5809] Bluetooth: hci0: command tx timeout [ 723.966405][T10363] dummy0: entered promiscuous mode [ 723.972796][T10363] macsec1: entered promiscuous mode [ 723.980771][T10363] macsec1: entered allmulticast mode [ 723.986782][T10363] dummy0: entered allmulticast mode [ 724.030724][T10363] dummy0: left allmulticast mode [ 724.038214][T10363] dummy0: left promiscuous mode [ 724.547611][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.555618][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.583462][T10307] bridge_slave_0: entered allmulticast mode [ 724.599185][T10307] bridge_slave_0: entered promiscuous mode [ 724.704695][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.715366][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.724490][T10307] bridge_slave_1: entered allmulticast mode [ 724.738006][T10307] bridge_slave_1: entered promiscuous mode [ 725.145107][T10307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.187505][ T5809] Bluetooth: hci2: command tx timeout [ 725.224685][T10307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.470141][T10307] team0: Port device team_slave_0 added [ 725.547250][T10356] chnl_net:caif_netlink_parms(): no params data found [ 725.585690][T10307] team0: Port device team_slave_1 added [ 725.832280][ T5809] Bluetooth: hci0: command tx timeout [ 725.948446][T10307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.956011][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.982778][T10307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.140640][T10307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.150423][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.177025][T10307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.840393][T10307] hsr_slave_0: entered promiscuous mode [ 726.851429][T10307] hsr_slave_1: entered promiscuous mode [ 726.860718][T10307] debugfs: 'hsr0' already exists in 'hsr' [ 726.867911][T10307] Cannot create hsr debugfs directory [ 726.872914][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.880556][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.266399][ T5809] Bluetooth: hci2: command tx timeout [ 727.766762][T10356] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.774537][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.786133][T10356] bridge_slave_0: entered allmulticast mode [ 727.796665][T10356] bridge_slave_0: entered promiscuous mode [ 727.863279][T10356] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.871305][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.879354][T10356] bridge_slave_1: entered allmulticast mode [ 727.891561][T10356] bridge_slave_1: entered promiscuous mode [ 728.232841][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.439376][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.723416][T10356] team0: Port device team_slave_0 added [ 728.782519][T10356] team0: Port device team_slave_1 added [ 729.211354][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.218560][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.245598][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.345293][ T5809] Bluetooth: hci2: command tx timeout [ 729.381114][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.388302][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.415170][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.640737][T10307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 729.668447][T10307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 729.756097][T10307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 729.970348][T10307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 730.068329][T10356] hsr_slave_0: entered promiscuous mode [ 730.079722][T10356] hsr_slave_1: entered promiscuous mode [ 730.089278][T10356] debugfs: 'hsr0' already exists in 'hsr' [ 730.095652][T10356] Cannot create hsr debugfs directory [ 730.891252][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 730.941864][T10445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 730.966643][T10443] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 731.421350][ T5809] Bluetooth: hci2: command tx timeout [ 731.626820][T10307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.212760][T10356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 732.339130][T10356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 732.433788][T10356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 732.524039][T10356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.575421][T10451] loop4: detected capacity change from 0 to 32768 [ 732.587677][ T5903] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 732.615339][T10451] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1315 (10451) [ 732.652051][T10451] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 732.662979][T10451] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 732.672984][T10451] BTRFS info (device loop4): using free-space-tree [ 732.712070][T10307] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.766293][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 732.799043][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.805595][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.807030][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.817778][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.835691][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 732.849179][ T5903] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 732.858763][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.982009][ T5903] usb 1-1: config 0 descriptor?? [ 733.085940][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.093873][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.523439][T10451] BTRFS info (device loop4): rebuilding free space tree [ 733.582450][T10451] BTRFS info (device loop4): checking UUID tree [ 733.906741][ T5818] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 733.930173][ T5903] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input16 [ 734.125279][ T5903] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input17 [ 734.352031][ T5903] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 734.417871][ T5903] usb 1-1: USB disconnect, device number 4 [ 734.606756][T10356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.845607][T10356] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.998793][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.006620][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.072510][T10483] netlink: 'syz.9.1321': attribute type 4 has an invalid length. [ 735.132484][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.140098][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.179938][T10483] netlink: 'syz.9.1321': attribute type 4 has an invalid length. [ 735.995730][T10307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.550292][T10307] veth0_vlan: entered promiscuous mode [ 736.619317][T10494] loop4: detected capacity change from 0 to 128 [ 736.685657][T10307] veth1_vlan: entered promiscuous mode [ 737.173001][T10307] veth0_macvtap: entered promiscuous mode [ 737.297480][T10307] veth1_macvtap: entered promiscuous mode [ 737.855053][T10307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.942006][T10356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.140645][T10307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.393007][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.438094][T10505] loop4: detected capacity change from 0 to 40427 [ 738.461659][T10505] F2FS-fs (loop4): build fault injection rate: 14 [ 738.472166][T10505] F2FS-fs (loop4): invalid crc value [ 738.529247][ T4016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.573368][ T4016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.642852][ T4016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.848061][T10505] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 738.867862][T10505] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 738.960182][T10505] syz.4.1327: attempt to access beyond end of device [ 738.960182][T10505] loop4: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 739.139383][ T5818] syz-executor: attempt to access beyond end of device [ 739.139383][ T5818] loop4: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 739.155623][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 739.155800][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.155885][ T5818] Call Trace: [ 739.155939][ T5818] [ 739.156000][ T5818] __dump_stack+0x26/0x30 [ 739.156210][ T5818] dump_stack_lvl+0x1df/0x270 [ 739.156459][ T5818] dump_stack+0x1e/0x25 [ 739.156630][ T5818] f2fs_handle_critical_error+0xa6f/0xc20 [ 739.156873][ T5818] f2fs_stop_checkpoint+0x65/0x80 [ 739.157101][ T5818] f2fs_write_end_io+0x101c/0x1bc0 [ 739.157386][ T5818] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 739.157580][ T5818] bio_endio+0xe24/0xf80 [ 739.157733][ T5818] submit_bio_noacct+0x214/0x2710 [ 739.157955][ T5818] submit_bio+0x57c/0x630 [ 739.158106][ T5818] f2fs_submit_write_bio+0x92/0x250 [ 739.158311][ T5818] __submit_merged_bio+0x16f/0x6a0 [ 739.158504][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.158707][ T5818] __submit_merged_write_cond+0x458/0x9a0 [ 739.158927][ T5818] f2fs_write_data_pages+0x4bb2/0x5480 [ 739.159308][ T5818] ? trace_pid_list_is_set+0x170/0x1f0 [ 739.159528][ T5818] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 739.159749][ T5818] ? __update_load_avg_se+0xd02/0x11c0 [ 739.159986][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 739.160167][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 739.160342][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.160515][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 739.160679][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.160851][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 739.161049][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 739.161267][ T5818] do_writepages+0x3ef/0x860 [ 739.161434][ T5818] ? _raw_spin_unlock+0x30/0x50 [ 739.161569][ T5818] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 739.161784][ T5818] filemap_fdatawrite+0x207/0x260 [ 739.162065][ T5818] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 739.162332][ T5818] f2fs_write_checkpoint+0xfe2/0x2b00 [ 739.162727][ T5818] kill_f2fs_super+0x2ff/0x970 [ 739.162900][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 739.163048][ T5818] deactivate_locked_super+0xcb/0x3c0 [ 739.163235][ T5818] deactivate_super+0x12f/0x140 [ 739.163394][ T5818] cleanup_mnt+0x6fb/0x780 [ 739.163594][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 739.163779][ T5818] ? __pfx___cleanup_mnt+0x10/0x10 [ 739.163985][ T5818] __cleanup_mnt+0x22/0x30 [ 739.164193][ T5818] task_work_run+0x209/0x2b0 [ 739.164387][ T5818] exit_to_user_mode_loop+0x2a6/0x330 [ 739.164583][ T5818] do_syscall_64+0x1e3/0x210 [ 739.164777][ T5818] ? irqentry_exit+0x16/0x60 [ 739.164943][ T5818] ? clear_bhb_loop+0x40/0x90 [ 739.165113][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.165270][ T5818] RIP: 0033:0x7fefe638ff17 [ 739.165384][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 739.165516][ T5818] RSP: 002b:00007fffbc5dd2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 739.165657][ T5818] RAX: 0000000000000000 RBX: 00007fefe6411c05 RCX: 00007fefe638ff17 [ 739.165756][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbc5dd380 [ 739.165850][ T5818] RBP: 00007fffbc5dd380 R08: 0000000000000000 R09: 0000000000000000 [ 739.165942][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffbc5de410 [ 739.166041][ T5818] R13: 00007fefe6411c05 R14: 00000000000b46a1 R15: 00007fffbc5de450 [ 739.166185][ T5818] [ 739.193862][T10356] veth0_vlan: entered promiscuous mode [ 739.200022][ T5818] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 739.406303][T10356] veth1_vlan: entered promiscuous mode [ 740.077354][T10356] veth0_macvtap: entered promiscuous mode [ 740.168700][T10356] veth1_macvtap: entered promiscuous mode [ 740.384701][T10356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.611238][T10356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.781617][ T3735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.802152][ T4409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.907479][ T4409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.001977][ T4409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.533085][T10527] loop0: detected capacity change from 0 to 40427 [ 741.549585][T10527] F2FS-fs (loop0): build fault injection rate: 14 [ 741.556763][T10527] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 741.577586][T10527] F2FS-fs (loop0): invalid crc value [ 741.607991][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 741.630544][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 741.967291][T10527] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 741.977352][T10527] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 742.033618][T10527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 742.175190][T10527] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 742.237951][T10527] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_rename2+0x1821/0x4da0 [ 742.251537][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.0.1334 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 742.251715][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.251811][T10527] Call Trace: [ 742.251866][T10527] [ 742.251924][T10527] __dump_stack+0x26/0x30 [ 742.252155][T10527] dump_stack_lvl+0x1df/0x270 [ 742.252385][T10527] dump_stack+0x1e/0x25 [ 742.252562][T10527] f2fs_handle_critical_error+0xa6f/0xc20 [ 742.252827][T10527] f2fs_stop_checkpoint+0x65/0x80 [ 742.253048][T10527] f2fs_balance_fs+0x6f9/0x940 [ 742.253237][T10527] ? f2fs_rename2+0x1821/0x4da0 [ 742.253410][T10527] f2fs_rename2+0x1821/0x4da0 [ 742.253555][T10527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 742.253748][T10527] ? kmsan_get_metadata+0xfb/0x160 [ 742.253936][T10527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 742.254149][T10527] ? kmsan_internal_task_create+0x30/0x50 [ 742.254428][T10527] ? __pfx_f2fs_rename2+0x10/0x10 [ 742.254569][T10527] vfs_rename+0x1f51/0x2530 [ 742.254822][T10527] do_renameat2+0x1484/0x1a50 [ 742.255079][T10527] __x64_sys_rename+0xd7/0x140 [ 742.255284][T10527] x64_sys_call+0x269/0x3e20 [ 742.255490][T10527] do_syscall_64+0xd9/0x210 [ 742.255683][T10527] ? irqentry_exit+0x16/0x60 [ 742.255856][T10527] ? clear_bhb_loop+0x40/0x90 [ 742.256038][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.256205][T10527] RIP: 0033:0x7efdc4b8ebe9 [ 742.256324][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.256459][T10527] RSP: 002b:00007efdc5a3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 742.256609][T10527] RAX: ffffffffffffffda RBX: 00007efdc4db5fa0 RCX: 00007efdc4b8ebe9 [ 742.256722][T10527] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 742.256847][T10527] RBP: 00007efdc4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 742.256945][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.257038][T10527] R13: 00007efdc4db6038 R14: 00007efdc4db5fa0 R15: 00007ffcd6979028 [ 742.257191][T10527] [ 742.257255][T10527] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 747.373504][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.382228][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.658165][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.666626][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.895026][T10610] netlink: 372 bytes leftover after parsing attributes in process `syz.9.1352'. [ 748.425492][T10614] loop2: detected capacity change from 0 to 1024 [ 748.591638][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.704752][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1355'. [ 749.558086][ T1892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.567918][ T1892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.778850][T10307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.931641][T10629] loop4: detected capacity change from 0 to 40427 [ 749.947861][T10629] F2FS-fs (loop4): build fault injection rate: 14 [ 749.954858][T10629] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 749.999562][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.008975][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.021059][T10629] F2FS-fs (loop4): invalid crc value [ 750.086334][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 750.116411][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 750.431459][T10629] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 750.440803][T10629] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 750.456858][T10629] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 750.506544][T10629] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 751.396264][T10648] loop2: detected capacity change from 0 to 1024 [ 751.691952][T10648] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.699678][T10648] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.776635][T10653] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.785429][T10653] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.872816][T10648] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.880385][T10648] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.941233][T10653] hfsplus: request for non-existent node 33423360 in B*Tree [ 751.948776][T10653] hfsplus: request for non-existent node 33423360 in B*Tree [ 754.395573][T10680] overlayfs: failed to clone upperpath [ 754.608721][T10678] loop3: detected capacity change from 0 to 512 [ 754.712099][T10678] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 755.123702][T10678] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1372'. [ 755.129223][T10689] loop2: detected capacity change from 0 to 16 [ 755.172316][T10689] erofs (device loop2): mounted with root inode @ nid 36. [ 755.272433][T10689] erofs (device loop2): bogus dirent @ nid 36 [ 755.931247][T10696] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.449601][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 757.586657][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 760.145582][T10749] overlayfs: failed to clone upperpath [ 761.497262][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 761.571209][T10764] loop3: detected capacity change from 0 to 1024 [ 761.624458][T10764] EXT4-fs: inline encryption not supported [ 761.631956][T10764] EXT4-fs: Ignoring removed nobh option [ 761.638048][T10764] EXT4-fs: Ignoring removed bh option [ 761.901851][T10764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.294776][T10356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.996538][T10480] libceph: connect (1)[c::]:6789 error -101 [ 763.003282][T10480] libceph: mon0 (1)[c::]:6789 connect error [ 763.194605][T10480] libceph: connect (1)[c::]:6789 error -101 [ 763.201298][T10480] libceph: mon0 (1)[c::]:6789 connect error [ 763.306113][T10480] libceph: connect (1)[c::]:6789 error -101 [ 763.313174][T10480] libceph: mon0 (1)[c::]:6789 connect error [ 763.493403][T10480] libceph: connect (1)[c::]:6789 error -101 [ 763.499833][T10480] libceph: mon0 (1)[c::]:6789 connect error [ 763.705535][T10794] ceph: No mds server is up or the cluster is laggy [ 763.731225][T10787] ceph: No mds server is up or the cluster is laggy [ 763.753329][T10806] loop0: detected capacity change from 0 to 256 [ 763.866942][T10480] libceph: connect (1)[c::]:6789 error -101 [ 763.873719][T10480] libceph: mon0 (1)[c::]:6789 connect error [ 763.947690][T10806] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 763.963469][T10806] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 765.586807][T10817] loop4: detected capacity change from 0 to 40427 [ 765.604679][T10817] F2FS-fs (loop4): Image doesn't support compression [ 765.612075][T10817] F2FS-fs (loop4): build fault injection rate: 690 [ 765.647325][T10817] F2FS-fs (loop4): invalid crc value [ 766.026114][T10817] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 766.037000][T10817] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 766.141461][ T30] audit: type=1800 audit(1755525166.157:85): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1424" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 766.229830][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 766.234276][ T5818] syz-executor: attempt to access beyond end of device [ 766.234276][ T5818] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 766.263699][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 766.263882][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.263977][ T5818] Call Trace: [ 766.264031][ T5818] [ 766.264085][ T5818] __dump_stack+0x26/0x30 [ 766.264299][ T5818] dump_stack_lvl+0x1df/0x270 [ 766.264506][ T5818] dump_stack+0x1e/0x25 [ 766.264681][ T5818] f2fs_handle_critical_error+0xa6f/0xc20 [ 766.264946][ T5818] f2fs_stop_checkpoint+0x65/0x80 [ 766.265166][ T5818] f2fs_write_end_io+0x101c/0x1bc0 [ 766.265430][ T5818] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 766.265650][ T5818] bio_endio+0xe24/0xf80 [ 766.265816][ T5818] submit_bio_noacct+0x214/0x2710 [ 766.266043][ T5818] submit_bio+0x57c/0x630 [ 766.266206][ T5818] f2fs_submit_write_bio+0x92/0x250 [ 766.266411][ T5818] __submit_merged_bio+0x16f/0x6a0 [ 766.266608][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 766.266816][ T5818] __submit_merged_write_cond+0x458/0x9a0 [ 766.267051][ T5818] f2fs_write_data_pages+0x4bb2/0x5480 [ 766.267432][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 766.267622][ T5818] ? folios_put_refs+0x31/0xb10 [ 766.267827][ T5818] ? filter_irq_stacks+0x49/0x190 [ 766.268047][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 766.268233][ T5818] ? stack_depot_save_flags+0x35/0x7b0 [ 766.268443][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 766.268643][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 766.268823][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 766.268998][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 766.269181][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 766.269393][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 766.269607][ T5818] do_writepages+0x3ef/0x860 [ 766.269767][ T5818] ? _raw_spin_unlock+0x30/0x50 [ 766.269932][ T5818] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 766.270174][ T5818] filemap_fdatawrite+0x207/0x260 [ 766.270451][ T5818] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 766.270649][ T5818] f2fs_write_checkpoint+0xfe2/0x2b00 [ 766.270956][ T5818] kill_f2fs_super+0x2ff/0x970 [ 766.271139][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 766.271295][ T5818] deactivate_locked_super+0xcb/0x3c0 [ 766.271473][ T5818] deactivate_super+0x12f/0x140 [ 766.271635][ T5818] cleanup_mnt+0x6fb/0x780 [ 766.271830][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 766.272024][ T5818] ? __pfx___cleanup_mnt+0x10/0x10 [ 766.272229][ T5818] __cleanup_mnt+0x22/0x30 [ 766.272336][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 766.272421][ T5818] task_work_run+0x209/0x2b0 [ 766.272605][ T5818] exit_to_user_mode_loop+0x2a6/0x330 [ 766.272832][ T5818] do_syscall_64+0x1e3/0x210 [ 766.273042][ T5818] ? irqentry_exit+0x16/0x60 [ 766.273220][ T5818] ? clear_bhb_loop+0x40/0x90 [ 766.273404][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.273583][ T5818] RIP: 0033:0x7fefe638ff17 [ 766.273715][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 766.273870][ T5818] RSP: 002b:00007fffbc5dd2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 766.274036][ T5818] RAX: 0000000000000000 RBX: 00007fefe6411c05 RCX: 00007fefe638ff17 [ 766.274149][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbc5dd380 [ 766.274259][ T5818] RBP: 00007fffbc5dd380 R08: 0000000000000000 R09: 0000000000000000 [ 766.274362][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffbc5de410 [ 766.274478][ T5818] R13: 00007fefe6411c05 R14: 00000000000bb08b R15: 00007fffbc5de450 [ 766.274630][ T5818] [ 766.277858][ T5818] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 768.341920][T10839] loop2: detected capacity change from 0 to 32768 [ 768.420586][T10839] (syz.2.1433,10839,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 768.441155][T10839] (syz.2.1433,10839,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 768.455448][T10843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.574746][T10839] JBD2: Ignoring recovery information on journal [ 768.728303][T10839] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 769.009125][T10307] ocfs2: Unmounting device (7,2) on (node local) [ 769.441458][T10853] geneve2: entered promiscuous mode [ 770.434632][T10851] loop3: detected capacity change from 0 to 40427 [ 770.517850][T10855] loop0: detected capacity change from 0 to 32768 [ 770.536634][T10851] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 770.546137][T10851] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 770.566871][T10855] (syz.0.1441,10855,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.582301][T10855] (syz.0.1441,10855,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.600634][T10851] F2FS-fs (loop3): invalid crc value [ 770.646877][T10855] JBD2: Ignoring recovery information on journal [ 770.878466][T10855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 771.057796][T10851] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 771.081175][T10851] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 771.088593][T10851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 771.462026][ T9869] ocfs2: Unmounting device (7,0) on (node local) [ 773.027061][T10872] o2cb: This node has not been configured. [ 773.034140][T10872] o2cb: Cluster check failed. Fix errors before retrying. [ 773.042567][T10872] (syz.4.1446,10872,1):user_dlm_register:674 ERROR: status = -22 [ 773.051139][T10872] (syz.4.1446,10872,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 773.566079][T10870] loop2: detected capacity change from 0 to 40427 [ 773.580778][T10870] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 773.589312][T10870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 773.605387][T10870] F2FS-fs (loop2): invalid crc value [ 773.989865][T10870] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 774.035355][T10870] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 774.045518][T10870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 774.118138][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.126406][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.141356][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.149395][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.159928][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.168130][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 774.176202][T10870] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 776.611595][T10894] loop0: detected capacity change from 0 to 32768 [ 776.621873][T10894] btrfs: Deprecated parameter 'usebackuproot' [ 776.628199][T10894] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 776.644159][T10894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1453 (10894) [ 776.679743][T10894] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 776.690698][T10894] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 776.703390][T10894] BTRFS info (device loop0): using free-space-tree [ 777.113493][T10894] BTRFS info (device loop0): rebuilding free space tree [ 777.650481][ T9869] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 778.723925][T10918] loop4: detected capacity change from 0 to 32768 [ 779.369586][T10927] fuse: Bad value for 'fd' [ 780.066535][T10919] Bluetooth: hci4: command 0x0406 tx timeout [ 783.312696][T10480] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 783.537355][T10480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.549248][T10480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.561120][T10480] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.575402][T10480] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.585164][T10480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.631489][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 783.652108][T10480] usb 3-1: config 0 descriptor?? [ 783.687142][T10480] hub 3-1:0.0: USB hub found [ 783.798514][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 783.828612][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.840180][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.850923][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 783.866657][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.892011][T10480] hub 3-1:0.0: 17 ports detected [ 783.921728][T10480] hub 3-1:0.0: insufficient power available to use all downstream ports [ 784.014106][ T5866] usb 5-1: config 0 descriptor?? [ 784.039159][ T5866] hub 5-1:0.0: USB hub found [ 784.097623][T10480] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 784.104838][T10480] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 784.176739][T10480] usb 3-1: USB disconnect, device number 4 [ 784.337069][ T5866] hub 5-1:0.0: 1 port detected [ 785.023786][ T5866] hub 5-1:0.0: activate --> -90 [ 785.286310][T10995] overlayfs: failed to clone upperpath [ 785.542563][ T5866] usb 5-1: USB disconnect, device number 15 [ 785.914182][ T5809] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 785.923399][ T5809] Bluetooth: hci1: Injecting HCI hardware error event [ 785.931315][T10919] Bluetooth: hci1: hardware error 0x00 [ 787.880688][T11030] sctp: [Deprecated]: syz.2.1498 (pid 11030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.880688][T11030] Use struct sctp_sack_info instead [ 788.131573][T10919] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 788.286752][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.293943][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.500364][T11025] loop0: detected capacity change from 0 to 40427 [ 788.527836][T11025] F2FS-fs (loop0): invalid crc value [ 788.901381][T11025] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 788.923982][T11025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 789.146736][ T9869] syz-executor: attempt to access beyond end of device [ 789.146736][ T9869] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 789.162555][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz-executor Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 789.162717][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 789.162820][ T9869] Call Trace: [ 789.162873][ T9869] [ 789.162930][ T9869] __dump_stack+0x26/0x30 [ 789.163123][ T9869] dump_stack_lvl+0x1df/0x270 [ 789.163314][ T9869] dump_stack+0x1e/0x25 [ 789.163472][ T9869] f2fs_handle_critical_error+0xa6f/0xc20 [ 789.163720][ T9869] f2fs_stop_checkpoint+0x65/0x80 [ 789.163932][ T9869] f2fs_write_end_io+0x101c/0x1bc0 [ 789.164181][ T9869] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 789.164385][ T9869] bio_endio+0xe24/0xf80 [ 789.164533][ T9869] submit_bio_noacct+0x214/0x2710 [ 789.164745][ T9869] submit_bio+0x57c/0x630 [ 789.164905][ T9869] f2fs_submit_write_bio+0x92/0x250 [ 789.165093][ T9869] __submit_merged_bio+0x16f/0x6a0 [ 789.165285][ T9869] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 789.165472][ T9869] __submit_merged_write_cond+0x458/0x9a0 [ 789.165684][ T9869] f2fs_write_data_pages+0x4bb2/0x5480 [ 789.166037][ T9869] ? trace_pid_list_is_set+0x170/0x1f0 [ 789.166256][ T9869] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 789.166461][ T9869] ? __update_load_avg_se+0xa96/0x11c0 [ 789.166670][ T9869] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 789.166857][ T9869] ? kmsan_get_metadata+0xfb/0x160 [ 789.167018][ T9869] ? kmsan_get_metadata+0xfb/0x160 [ 789.167205][ T9869] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 789.167373][ T9869] ? kmsan_get_metadata+0xfb/0x160 [ 789.167531][ T9869] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 789.167707][ T9869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 789.167918][ T9869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 789.168113][ T9869] do_writepages+0x3ef/0x860 [ 789.168274][ T9869] ? _raw_spin_unlock+0x30/0x50 [ 789.168427][ T9869] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 789.168658][ T9869] filemap_fdatawrite+0x207/0x260 [ 789.168917][ T9869] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 789.169099][ T9869] f2fs_write_checkpoint+0xfe2/0x2b00 [ 789.169390][ T9869] kill_f2fs_super+0x2ff/0x970 [ 789.169565][ T9869] ? __pfx_kill_f2fs_super+0x10/0x10 [ 789.169721][ T9869] deactivate_locked_super+0xcb/0x3c0 [ 789.169910][ T9869] deactivate_super+0x12f/0x140 [ 789.170077][ T9869] cleanup_mnt+0x6fb/0x780 [ 789.170260][ T9869] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 789.170434][ T9869] ? __pfx___cleanup_mnt+0x10/0x10 [ 789.170635][ T9869] __cleanup_mnt+0x22/0x30 [ 789.170823][ T9869] task_work_run+0x209/0x2b0 [ 789.171007][ T9869] exit_to_user_mode_loop+0x2a6/0x330 [ 789.171188][ T9869] do_syscall_64+0x1e3/0x210 [ 789.171360][ T9869] ? irqentry_exit+0x16/0x60 [ 789.171523][ T9869] ? clear_bhb_loop+0x40/0x90 [ 789.171689][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.171855][ T9869] RIP: 0033:0x7efdc4b8ff17 [ 789.171979][ T9869] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 789.172111][ T9869] RSP: 002b:00007ffcd69782b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 789.172263][ T9869] RAX: 0000000000000000 RBX: 00007efdc4c11c05 RCX: 00007efdc4b8ff17 [ 789.172363][ T9869] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd6978370 [ 789.172454][ T9869] RBP: 00007ffcd6978370 R08: 0000000000000000 R09: 0000000000000000 [ 789.172547][ T9869] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd6979400 [ 789.172649][ T9869] R13: 00007efdc4c11c05 R14: 00000000000c09f7 R15: 00007ffcd6979440 [ 789.172811][ T9869] [ 789.526752][ T9869] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 790.001837][ T5866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 790.665399][ T30] audit: type=1326 audit(1755525190.697:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df3b8ebe9 code=0x7ffc0000 [ 790.689061][ T30] audit: type=1326 audit(1755525190.697:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df3b8ebe9 code=0x7ffc0000 [ 790.712392][ T30] audit: type=1326 audit(1755525190.737:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5df3b8ebe9 code=0x7ffc0000 [ 790.736854][ T30] audit: type=1326 audit(1755525190.737:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df3b8ebe9 code=0x7ffc0000 [ 790.768086][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 790.838108][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 790.850502][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 790.951138][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 790.961489][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.970090][ T5866] usb 5-1: Product: syz [ 790.974895][ T5866] usb 5-1: Manufacturer: syz [ 790.979837][ T5866] usb 5-1: SerialNumber: syz [ 791.062786][ T5866] usb 5-1: config 0 descriptor?? [ 791.126261][ T5866] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 791.145561][ T5866] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 791.695351][ T5866] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 791.715450][ T5866] em28xx 5-1:0.0: Config register raw data: 0xfa [ 791.722505][ T5866] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 791.729105][ T5866] em28xx 5-1:0.0: No AC97 audio processor [ 792.032598][T11056] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 792.339217][T11056] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 792.381211][ T5866] usb 5-1: USB disconnect, device number 16 [ 793.095203][T11069] tipc: Started in network mode [ 793.100453][T11069] tipc: Node identity 7f000001, cluster identity 4711 [ 793.110356][T11069] tipc: Enabled bearer , priority 10 [ 794.878267][T11082] loop3: detected capacity change from 0 to 32768 [ 794.911667][ T9740] tipc: Node number set to 2130706433 [ 795.267952][T11082] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 795.268127][T11082] allowing incompatible features above 0.0: (unknown version) [ 795.268204][T11082] features: lz4 [ 795.305285][T11082] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 795.314185][T11082] bcachefs (loop3): initializing new filesystem [ 795.346778][T11082] bcachefs (loop3): going read-write [ 795.425322][T11082] bcachefs (loop3): marking superblocks [ 795.587397][T11082] bcachefs (loop3): initializing freespace [ 795.633384][T11082] bcachefs (loop3): done initializing freespace [ 795.677152][T11082] bcachefs (loop3): reading snapshots table [ 795.683802][T11082] bcachefs (loop3): reading snapshots done [ 795.803669][T11082] bcachefs (loop3): done starting filesystem [ 796.230766][T10356] bcachefs (loop3): shutting down [ 796.239221][T10356] bcachefs (loop3): going read-only [ 796.245585][T10356] bcachefs (loop3): finished waiting for writes to stop [ 796.356241][T10356] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 796.816932][T10356] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 796.921590][T10356] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 796.960621][T11112] loop2: detected capacity change from 0 to 1024 [ 796.992532][T10356] bcachefs (loop3): marking filesystem clean [ 797.104848][T11112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.118079][T11112] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.148661][T10356] bcachefs (loop3): shutdown complete [ 797.638305][T10307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.054829][T11133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.544549][T11137] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 798.916182][T10480] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 799.142756][T10480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 799.154481][T10480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.164750][T10480] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 799.174700][T10480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.316610][T10480] usb 5-1: config 0 descriptor?? [ 799.806948][T10480] corsair 0003:1B1C:1B34.000A: unknown main item tag 0x0 [ 799.870622][T10480] corsair 0003:1B1C:1B34.000A: failed to start in urb: -90 [ 799.911337][T10480] corsair 0003:1B1C:1B34.000A: hidraw0: USB HID v0.02 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input0 [ 800.011910][T10480] usb 5-1: USB disconnect, device number 17 [ 800.133605][ T5866] kernel write not supported for file bpf-prog (pid: 5866 comm: kworker/0:4) [ 802.485002][T11191] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 802.624141][T11193] bond1: (slave bridge0): making interface the new active one [ 802.634782][T11193] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 803.693542][T11207] bpq0: entered allmulticast mode [ 804.378369][T11217] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 805.482397][T11220] loop3: detected capacity change from 0 to 40427 [ 805.493874][T11220] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 805.507349][T11220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 805.545292][T11220] F2FS-fs (loop3): invalid crc value [ 805.747841][T11230] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1569'. [ 805.864555][T11220] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 805.943906][T11220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 805.951623][T11220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 809.234925][T11253] loop0: detected capacity change from 0 to 65536 [ 809.334545][T11253] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 809.646081][T11253] XFS (loop0): Ending clean mount [ 809.843765][ T9869] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 813.929059][T11308] loop3: detected capacity change from 0 to 2048 [ 814.045803][T11308] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 814.056169][T11308] NILFS (loop3): mounting unchecked fs [ 814.215551][T11308] NILFS (loop3): recovery complete [ 814.239283][T11319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.450140][ T30] audit: type=1800 audit(1755525214.477:90): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1595" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 814.591192][T11326] IPv4: Oversized IP packet from 172.20.20.24 [ 814.602934][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 814.611737][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 815.078035][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'. [ 816.546693][T11341] loop4: detected capacity change from 0 to 32768 [ 816.563182][T11341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1609 (11341) [ 816.633297][T11341] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 816.643988][T11341] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 816.650713][T11350] loop0: detected capacity change from 0 to 1024 [ 816.653082][T11341] BTRFS info (device loop4): using free-space-tree [ 817.001400][ T3646] hfsplus: b-tree write err: -5, ino 4 [ 817.427830][ T5818] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 818.551060][T11388] IPv4: Oversized IP packet from 172.20.20.24 [ 818.562441][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 818.571406][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 819.692620][T11394] loop2: detected capacity change from 0 to 32768 [ 819.703890][T11394] btrfs: Deprecated parameter 'usebackuproot' [ 819.714671][T11394] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 819.749231][T11394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1627 (11394) [ 819.784380][T11394] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 819.795028][T11394] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 819.805952][T11394] BTRFS error (device loop2): superblock checksum mismatch [ 819.813744][T11394] BTRFS error (device loop2): open_ctree failed: -22 [ 820.351185][T11405] loop4: detected capacity change from 0 to 512 [ 820.373904][T11403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.383621][T11405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 820.446233][T11405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 820.480661][T11405] System zones: 1-12 [ 820.508964][T11409] netlink: 'syz.9.1632': attribute type 39 has an invalid length. [ 820.539738][T11405] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1631: iget: bogus i_mode (700) [ 820.565247][T11403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.574834][T11405] EXT4-fs (loop4): Remounting filesystem read-only [ 820.582957][T11405] EXT4-fs (loop4): 1 orphan inode deleted [ 820.591466][T11405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.617354][T11403] bond0 (unregistering): Released all slaves [ 820.713483][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.832016][T11409] bridge_slave_0 (unregistering): left allmulticast mode [ 820.839333][T11409] bridge_slave_0 (unregistering): left promiscuous mode [ 820.846964][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.079913][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.513814][T11423] batman_adv: batadv0: Adding interface: dummy0 [ 821.520569][T11423] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.554173][T11423] batman_adv: batadv0: Interface activated: dummy0 [ 821.614774][T11425] batadv0: mtu less than device minimum [ 821.623322][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.636670][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.650139][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.663711][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.677142][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.690507][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.704200][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.718228][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 821.731912][T11425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 823.451264][T11449] loop4: detected capacity change from 0 to 512 [ 823.474616][T11449] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1643: casefold flag without casefold feature [ 823.499908][T11449] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1643: couldn't read orphan inode 15 (err -117) [ 823.516320][T11449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.710335][ T30] audit: type=1800 audit(1755525223.697:91): pid=11449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1643" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 824.161757][T11455] loop3: detected capacity change from 0 to 4096 [ 824.487771][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.693886][T10480] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 824.752493][ T30] audit: type=1800 audit(1755525224.777:92): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1648" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 824.946342][T10480] usb 1-1: config 0 has no interfaces? [ 824.952436][T10480] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.962187][T10480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.996851][T10480] usb 1-1: config 0 descriptor?? [ 825.076482][T11468] loop4: detected capacity change from 0 to 4096 [ 825.219929][T11472] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 825.222203][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.242338][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.319415][T10480] usb 1-1: USB disconnect, device number 5 [ 825.507464][T11468] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 825.554591][T11468] Remounting filesystem read-only [ 825.789746][ T5818] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 825.954608][T11482] tipc: Failed to remove unknown binding: 66,1,1/0:3285424611/3285424613 [ 825.968193][T11482] tipc: Failed to remove unknown binding: 66,1,1/0:3285424611/3285424613 [ 826.604360][T11496] gfs2: path_lookup on squashfs returned error -2 [ 827.444169][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1667'. [ 829.091086][T11523] loop2: detected capacity change from 0 to 32768 [ 829.245829][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 829.246020][T11523] allowing incompatible features above 0.0: (unknown version) [ 829.246124][T11523] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 829.246244][T11523] with devices loop2 [ 829.298530][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 829.309896][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 829.344203][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 829.420415][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 829.489652][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 829.522669][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 829.556171][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 829.566126][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 829.754253][T11523] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 830.040195][T11532] loop3: detected capacity change from 0 to 32768 [ 830.288423][T11532] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 830.288609][T11532] allowing incompatible features above 0.0: (unknown version) [ 830.288705][T11532] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 830.334675][T11532] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 830.343405][T11532] bcachefs (loop3): initializing new filesystem [ 830.372794][T11532] bcachefs (loop3): going read-write [ 830.443104][T11532] bcachefs (loop3): marking superblocks [ 830.503661][T11532] bcachefs (loop3): initializing freespace [ 830.536943][T11532] bcachefs (loop3): done initializing freespace [ 830.562285][T11532] bcachefs (loop3): reading snapshots table [ 830.568633][T11532] bcachefs (loop3): reading snapshots done [ 830.652056][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 830.666885][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 830.680611][T11560] netlink: 'syz.9.1680': attribute type 1 has an invalid length. [ 830.706858][T11532] bcachefs (loop3): done starting filesystem [ 830.741941][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 830.783210][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 831.002093][T10356] bcachefs (loop3): shutting down [ 831.007438][T10356] bcachefs (loop3): going read-only [ 831.013941][T10356] bcachefs (loop3): finished waiting for writes to stop [ 831.100252][T10356] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 831.124887][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 831.156604][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 831.214088][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 831.357629][T10307] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 831.391764][T10356] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 831.484752][T10356] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 831.511182][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 831.532284][T10356] bcachefs (loop3): marking filesystem clean [ 831.700058][T10356] bcachefs (loop3): shutdown complete [ 832.446718][T11576] can0: slcan on ptm0. [ 832.608752][T11575] can0 (unregistered): slcan off ptm0. [ 834.310475][T11584] loop0: detected capacity change from 0 to 40427 [ 834.325144][T11584] F2FS-fs (loop0): build fault injection rate: 14 [ 834.332005][T11584] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 834.353249][T11584] F2FS-fs (loop0): invalid crc value [ 834.378126][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 834.397103][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 834.735265][T11584] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 834.744868][T11584] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 834.792645][T11584] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 834.922835][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1696'. [ 834.937083][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 834.944137][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 834.951474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 834.959515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 834.968433][T11584] syz.0.1693: attempt to access beyond end of device [ 834.968433][T11584] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 834.984119][T11584] syz.0.1693: attempt to access beyond end of device [ 834.984119][T11584] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 835.000642][T11584] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xe78/0x2fc0 [ 835.128235][ T9869] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of do_checkpoint+0x3a30/0x4600 [ 836.830068][T11606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.102989][T11606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.291197][T11606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.472992][T11606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.628700][T11617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 837.781976][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.890621][ T4409] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.980264][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.078700][ T4409] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.495511][T11631] loop0: detected capacity change from 0 to 2048 [ 841.501652][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 841.976644][T11656] loop3: detected capacity change from 0 to 32768 [ 842.089770][T11656] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 842.475158][T10356] ocfs2: Unmounting device (7,3) on (node local) [ 842.923541][T11659] loop4: detected capacity change from 0 to 32768 [ 842.938882][T11659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1720 (11659) [ 842.964497][T11659] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.975544][T11659] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 842.984675][T11659] BTRFS info (device loop4): using free-space-tree [ 843.512980][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.702625][T11695] loop0: detected capacity change from 0 to 32768 [ 844.915948][T11695] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 844.916141][T11695] allowing incompatible features above 0.0: (unknown version) [ 844.916229][T11695] features: [ 844.952658][T11695] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 844.961580][T11695] bcachefs (loop0): initializing new filesystem [ 844.988819][T11695] bcachefs (loop0): going read-write [ 845.019420][T11695] bcachefs (loop0): marking superblocks [ 845.075340][T11695] bcachefs (loop0): initializing freespace [ 845.108821][T11695] bcachefs (loop0): done initializing freespace [ 845.131420][T11695] bcachefs (loop0): reading snapshots table [ 845.137853][T11695] bcachefs (loop0): reading snapshots done [ 845.243053][T11695] bcachefs (loop0): done starting filesystem [ 845.338138][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 845.381773][ T4409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.457431][ T4409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.479395][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 845.531960][ T4409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.541461][ T4409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.277757][ T9869] bcachefs (loop0): shutting down [ 846.283297][ T9869] bcachefs (loop0): going read-only [ 846.288832][ T9869] bcachefs (loop0): finished waiting for writes to stop [ 846.525011][ T9869] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 846.622269][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 846.791742][ T9869] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 846.876780][ T9869] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 846.952921][ T9869] bcachefs (loop0): marking filesystem clean [ 847.243615][ T9869] bcachefs (loop0): shutdown complete [ 847.623911][T11726] loop2: detected capacity change from 0 to 2048 [ 847.721092][T11726] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 847.782352][T11726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 848.254488][T11738] overlayfs: failed to clone upperpath [ 849.467517][T11752] netlink: 'syz.9.1748': attribute type 1 has an invalid length. [ 849.476475][T11752] netlink: 'syz.9.1748': attribute type 4 has an invalid length. [ 849.484655][T11752] netlink: 9491 bytes leftover after parsing attributes in process `syz.9.1748'. [ 849.720537][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.727502][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.136920][T11760] syz_tun: entered allmulticast mode [ 850.209425][T11758] syz_tun: left allmulticast mode [ 850.889391][T11767] raw_sendmsg: syz.9.1755 forgot to set AF_INET. Fix it! [ 851.631507][T10480] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 851.865310][T10480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 851.877955][T10480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.889428][T10480] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 851.899806][T10480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.916015][T11780] bond0: (slave syz_tun): Releasing backup interface [ 852.034434][T10480] usb 1-1: config 0 descriptor?? [ 852.094284][T11780] bond0: (slave team0): Releasing backup interface [ 852.149115][T11780] batman_adv: batadv0: Interface deactivated: dummy0 [ 852.156806][T11780] batman_adv: batadv0: Removing interface: dummy0 [ 852.457425][T11780] bond0: (slave bond_slave_0): Releasing backup interface [ 852.628246][T11773] loop0: detected capacity change from 0 to 1024 [ 852.813944][T10480] wacom 0003:056A:032B.000B: ignoring exceeding usage max [ 852.823214][T11780] bond0: (slave bond_slave_1): Releasing backup interface [ 852.932497][T11780] team0: Port device team_slave_0 removed [ 852.995477][T10480] usb 1-1: USB disconnect, device number 6 [ 853.047350][T11780] team0: Port device team_slave_1 removed [ 853.063463][T11780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.108796][T11780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.117244][T11780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.308059][T11780] bond1: (slave bridge0): Releasing active interface [ 853.737420][ T4016] hfsplus: b-tree write err: -5, ino 4 [ 854.665555][T11803] loop4: detected capacity change from 0 to 32768 [ 854.675427][T11803] btrfs: Deprecated parameter 'usebackuproot' [ 854.681865][T11803] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 854.701477][T11803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1769 (11803) [ 854.743363][T11803] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 854.754513][T11803] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 854.763581][T11803] BTRFS info (device loop4): using free-space-tree [ 855.071878][T11803] BTRFS info (device loop4): rebuilding free space tree [ 855.633621][ T5818] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 856.438899][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1781'. [ 857.648641][T11866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.659804][T11866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.910109][T11866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.922694][T11866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.068360][T11866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.079709][T11866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.189469][T11876] loop3: detected capacity change from 0 to 512 [ 858.325505][T11866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.336886][T11866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.405070][T11876] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1793: corrupted in-inode xattr: invalid ea_ino [ 858.433765][T11876] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1793: couldn't read orphan inode 15 (err -117) [ 858.484546][T11876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.695028][ T4016] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.705358][ T4016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.771434][ T4016] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.780183][ T4016] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.870615][ T4331] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.880128][ T4331] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.922762][ T4331] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.931782][ T4331] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.202916][T10356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.252485][T11887] loop2: detected capacity change from 0 to 512 [ 859.335267][T11887] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1795: iget: bad i_size value: 38620345925642 [ 859.426312][T11887] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1795: couldn't read orphan inode 15 (err -117) [ 859.470437][T11887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.510593][T11887] syz.2.1795 (pid 11887) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 859.522062][T11887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1795: bg 0: block 5: invalid block bitmap [ 859.989726][T10307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.378473][T11908] Invalid ELF header magic: != ELF [ 862.236156][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 862.553631][T11935] hsr_slave_1 (unregistering): left promiscuous mode [ 862.898125][T11936] loop2: detected capacity change from 0 to 32768 [ 862.910319][ T5866] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 863.058918][T11936] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 863.059097][T11936] allowing incompatible features above 0.0: (unknown version) [ 863.059183][T11936] features: [ 863.094391][T11936] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 863.103065][T11936] bcachefs (loop2): initializing new filesystem [ 863.130199][T11936] bcachefs (loop2): going read-write [ 863.161332][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 863.169752][T11936] bcachefs (loop2): marking superblocks [ 863.261720][T11936] bcachefs (loop2): initializing freespace [ 863.292257][T11936] bcachefs (loop2): done initializing freespace [ 863.314077][T11936] bcachefs (loop2): reading snapshots table [ 863.320643][T11936] bcachefs (loop2): reading snapshots done [ 863.411625][ T5866] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 863.420388][ T5866] usb 4-1: config 0 has no interface number 0 [ 863.433346][ T5866] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.447600][ T5866] usb 4-1: config 0 interface 85 has no altsetting 0 [ 863.489832][T11936] bcachefs (loop2): done starting filesystem [ 863.504494][ T5866] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 863.514769][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.523148][ T5866] usb 4-1: Product: syz [ 863.533665][ T5866] usb 4-1: Manufacturer: syz [ 863.538512][ T5866] usb 4-1: SerialNumber: syz [ 863.586272][ T5866] usb 4-1: config 0 descriptor?? [ 863.793380][T10307] bcachefs (loop2): shutting down [ 863.798941][T10307] bcachefs (loop2): going read-only [ 863.804850][T10307] bcachefs (loop2): finished waiting for writes to stop [ 863.871768][T10307] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 864.067794][T10307] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 864.125689][T10307] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 864.178360][T10307] bcachefs (loop2): marking filesystem clean [ 864.264565][ T5866] appletouch 4-1:0.85: Geyser mode initialized. [ 864.274755][ T5866] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input18 [ 864.408806][T10307] bcachefs (loop2): shutdown complete [ 864.474825][ T5903] usb 4-1: USB disconnect, device number 12 [ 864.569071][ T5903] appletouch 4-1:0.85: input: appletouch disconnected [ 866.727137][T11998] bridge0: port 3(syz_tun) entered blocking state [ 866.740563][T11998] bridge0: port 3(syz_tun) entered disabled state [ 866.748265][T11998] syz_tun: entered allmulticast mode [ 866.758500][T11998] syz_tun: entered promiscuous mode [ 866.771021][T11998] bridge0: port 3(syz_tun) entered blocking state [ 866.778129][T11998] bridge0: port 3(syz_tun) entered forwarding state [ 866.849388][ T5903] IPVS: starting estimator thread 0... [ 866.863311][T11998] net_ratelimit: 10 callbacks suppressed [ 866.863413][T11998] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 866.962179][T12000] IPVS: using max 192 ests per chain, 9600 per kthread [ 867.485168][T12010] netlink: 'syz.4.1840': attribute type 3 has an invalid length. [ 867.494594][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 868.462864][T12024] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1818'. [ 868.837584][T12029] loop0: detected capacity change from 0 to 1024 [ 869.126479][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 869.187523][T12029] hfsplus: b-tree write err: -5, ino 3 [ 869.228099][T12036] erspan0: entered promiscuous mode [ 869.234287][T12036] macvtap1: entered promiscuous mode [ 869.240646][T12036] macvtap1: entered allmulticast mode [ 869.246679][T12036] erspan0: entered allmulticast mode [ 869.267652][T12040] ===================================================== [ 869.278192][T12040] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 869.286649][T12040] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 869.292690][T12040] hfs_find_rec_by_key+0xab/0x240 [ 869.298118][T12040] __hfsplus_brec_find+0x274/0x840 [ 869.303670][T12040] hfsplus_brec_find+0x4df/0x9f0 [ 869.308884][T12040] hfsplus_rename_cat+0x423/0x17e0 [ 869.314565][T12040] hfsplus_unlink+0x361/0xd70 [ 869.319478][T12040] vfs_unlink+0x613/0xab0 [ 869.324180][T12040] do_unlinkat+0x694/0xd80 [ 869.328928][T12040] __x64_sys_unlink+0x71/0xb0 [ 869.334171][T12040] x64_sys_call+0x3a3c/0x3e20 [ 869.339305][T12040] do_syscall_64+0xd9/0x210 [ 869.344216][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.350507][T12040] [ 869.353670][T12040] Uninit was created at: [ 869.358232][T12040] __kmalloc_noprof+0x95f/0x1310 [ 869.371380][T12040] hfsplus_find_init+0x90/0x1d0 [ 869.376537][T12040] hfsplus_rename_cat+0x10d/0x17e0 [ 869.384494][T12040] hfsplus_unlink+0x361/0xd70 [ 869.389440][T12040] vfs_unlink+0x613/0xab0 [ 869.394376][T12040] do_unlinkat+0x694/0xd80 [ 869.399151][T12040] __x64_sys_unlink+0x71/0xb0 [ 869.404349][T12040] x64_sys_call+0x3a3c/0x3e20 [ 869.409594][T12040] do_syscall_64+0xd9/0x210 [ 869.414499][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.420645][T12040] [ 869.423295][T12040] CPU: 0 UID: 0 PID: 12040 Comm: syz.0.1847 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 869.434021][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.444611][T12040] ===================================================== [ 869.451817][T12040] Disabling lock debugging due to kernel taint [ 869.458155][T12040] Kernel panic - not syncing: kmsan.panic set ... [ 869.465041][T12040] CPU: 0 UID: 0 PID: 12040 Comm: syz.0.1847 Tainted: G B 6.17.0-rc2-syzkaller #0 PREEMPT(none) [ 869.477470][T12040] Tainted: [B]=BAD_PAGE [ 869.481774][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.492103][T12040] Call Trace: [ 869.495628][T12040] [ 869.498796][T12040] __dump_stack+0x26/0x30 [ 869.503504][T12040] dump_stack_lvl+0x53/0x270 [ 869.508375][T12040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 869.514471][T12040] dump_stack+0x1e/0x25 [ 869.518898][T12040] vpanic+0x361/0xc50 [ 869.523182][T12040] panic+0x15d/0x160 [ 869.527387][T12040] kmsan_report+0x31c/0x320 [ 869.532128][T12040] ? __msan_warning+0x1b/0x30 [ 869.537019][T12040] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 869.542910][T12040] ? hfs_find_rec_by_key+0xab/0x240 [ 869.548453][T12040] ? __hfsplus_brec_find+0x274/0x840 [ 869.554118][T12040] ? hfsplus_brec_find+0x4df/0x9f0 [ 869.559699][T12040] ? hfsplus_rename_cat+0x423/0x17e0 [ 869.565424][T12040] ? hfsplus_unlink+0x361/0xd70 [ 869.570536][T12040] ? vfs_unlink+0x613/0xab0 [ 869.575561][T12040] ? do_unlinkat+0x694/0xd80 [ 869.580407][T12040] ? __x64_sys_unlink+0x71/0xb0 [ 869.585588][T12040] ? x64_sys_call+0x3a3c/0x3e20 [ 869.590736][T12040] ? do_syscall_64+0xd9/0x210 [ 869.595655][T12040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.602055][T12040] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 869.608619][T12040] ? kmsan_get_metadata+0xfb/0x160 [ 869.613992][T12040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 869.620155][T12040] ? kmsan_get_metadata+0xfb/0x160 [ 869.625534][T12040] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 869.632056][T12040] ? kmsan_get_metadata+0xfb/0x160 [ 869.637413][T12040] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 869.644154][T12040] ? kmsan_get_metadata+0xfb/0x160 [ 869.649604][T12040] __msan_warning+0x1b/0x30 [ 869.654581][T12040] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 869.660358][T12040] hfs_find_rec_by_key+0xab/0x240 [ 869.665777][T12040] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 869.672214][T12040] __hfsplus_brec_find+0x274/0x840 [ 869.678296][T12040] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 869.684530][T12040] hfsplus_brec_find+0x4df/0x9f0 [ 869.690121][T12040] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 869.696230][T12040] hfsplus_rename_cat+0x423/0x17e0 [ 869.701653][T12040] ? kmsan_get_metadata+0xfb/0x160 [ 869.707037][T12040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 869.713277][T12040] ? vsnprintf+0x1b36/0x1bd0 [ 869.718134][T12040] ? sprintf+0x1d2/0x210 [ 869.723877][T12040] hfsplus_unlink+0x361/0xd70 [ 869.728951][T12040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 869.735207][T12040] ? __pfx_hfsplus_unlink+0x10/0x10 [ 869.740688][T12040] vfs_unlink+0x613/0xab0 [ 869.745307][T12040] do_unlinkat+0x694/0xd80 [ 869.750104][T12040] __x64_sys_unlink+0x71/0xb0 [ 869.755106][T12040] x64_sys_call+0x3a3c/0x3e20 [ 869.760280][T12040] do_syscall_64+0xd9/0x210 [ 869.765178][T12040] ? irqentry_exit+0x16/0x60 [ 869.770303][T12040] ? clear_bhb_loop+0x40/0x90 [ 869.775253][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.781400][T12040] RIP: 0033:0x7efdc4b8ebe9 [ 869.786022][T12040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.805966][T12040] RSP: 002b:00007efdc5a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 869.814729][T12040] RAX: ffffffffffffffda RBX: 00007efdc4db6090 RCX: 00007efdc4b8ebe9 [ 869.822931][T12040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 869.831180][T12040] RBP: 00007efdc4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 869.839326][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.847553][T12040] R13: 00007efdc4db6128 R14: 00007efdc4db6090 R15: 00007ffcd6979028 [ 869.855734][T12040] [ 869.859495][T12040] Kernel Offset: disabled [ 869.863999][T12040] Rebooting in 86400 seconds..