last executing test programs: 1m44.410254337s ago: executing program 4 (id=305): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800088, &(0x7f0000000cc0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nls=maccenteuro,session=0x0000000080000001,force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c00033535581a8c93022615d197068a585571f9e001682f64b69c250d32a806d038c69e92463d89236f11ed181e846b20639efe06565a7339be5124740524d0f6b1e7210a5251729cffe820717f00dbdf5993aa65c2586a838662613a63030aa4daf67afc0b9b3984982f81f11ea99bdda5c3bd61dff3b0ef4569954e9767b63da48d58086c70101b2a7663f55c9c962fe9c984d6ef0a74576865d5798b6aca5e93287321e3ef2d"], 0x1, 0x6f7, &(0x7f00000010c0)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listxattr(0x0, 0x0, 0x0) 1m43.229346586s ago: executing program 4 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) r1 = userfaultfd(0x801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x100, 0x6, 0x80000001, 0x0, 0xc63f, 0x7fff, 0x9, 0x4}}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)="b701", 0x2}], 0x1, 0x9) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0xa}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xf, 0x30, 0x9, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7890, 0x40, 0x100, 0xffff}}) bind$xdp(r4, &(0x7f0000000480)={0x2c, 0x1, r5, 0xd}, 0x10) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x9, {0x3, 0x1, 0x1, 0x3}, {0x80000001, 0x500, 0x53a3, 0x4}, {0x33c58ad9, 0xb}}) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000180)={0x3, &(0x7f00000002c0)=[{0xc16, 0x61, &(0x7f0000000000)="242455447012951f6c2c63a13c15723b91dae18057dbf0943e6d652b82269015876035fa564400c2e57bb961639f4a4a0d0e761af5193e7b5762da10e955a888f3423cd22abf14231a849cdb59940429aa6da65207a37bbd45a572881b7e465bc6", 0x1, 0x1}, {0x7, 0xf7, &(0x7f0000000080)="7beed3eb0c8200c2c8613fd107bdcb626c85112bc0620ab1b990a0e11ba2442906bcb5e3a957529a4023fd9fa951254a6e59d3bd6cfdca2b1c3e775fd46a780706c75ba97600d5472b8a95f689144e2dd8c5d2f3dec7b54d5b078482556b830ecf6f02d8b1b0ebda5349d4199613d8c1aa50e5e7647a9bc3c59ffdfc1b3c18989d63552454c8a988a2246dc825bdf9b4cd5db48b45e59f201d558037429789d4f993c2d714044e96e72b4d8f091ce28470e02c1c36949f8ae768d6bd81ae419e9ac94189fd0b3cce1c89eea966f0d7e01c7ebb94dd44311337f6b9d8da648a8a0b5dc9706e8b4587eecdd4d921d79d6b5dfefe8c9cfc46", 0x0, 0x1}, {0x2, 0xb8, &(0x7f0000000200)="5e1834b3c4f1fb53d0c0da1012a157a082a9b718dac262f92fcab82a56fdbffa606a52952183a0de80b4f59ccb9658a1732be7a70ffe07f26ec680ede96173ec820a3454f51c015ea158dbdecffe1548141b89bb6d377446cd91e110b312d4d2fc324ca4be8656242e957488881a3b2cf28ed9f1865b042e7563cdcb2c31ab25f0ddcf1c04ad89d565c6c622b59a38babc245ade6ee900e8e4ff45d7e3a6000f32f58a44638c48a1db9d4991f633438ccce6ca46ff745f44"}]}) 1m42.154505608s ago: executing program 4 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_emit_ethernet(0x2a, &(0x7f0000000900)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe000, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 1m41.430240395s ago: executing program 4 (id=314): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)={0x400080, 0xa0, 0x3}, 0x18) move_mount(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000800)='./bus\x00', 0x4) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) ftruncate(r2, 0x2007ffa) mount$overlay(0x0, &(0x7f0000000840)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)={@map=0x1, 0xffffffffffffffff, 0x1b, 0xa9bef40b0189a5b}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35]}}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') pread64(r4, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") 1m38.932100659s ago: executing program 4 (id=318): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/119, 0x77}) lstat(&(0x7f0000000240)='./file2\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000a40), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000240)={0x7, @output={0x0, 0x0, {0x8, 0x69c}, 0x0, 0x6}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@grpjquota}, {@nombcache}, {@resgid}]}, 0x1, 0x43c, &(0x7f00000029c0)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r3) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000019340)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000000540)={0x0, 0x3, 0x0, &(0x7f00000009c0)=[{}, {0x80000000}, {0x80000000}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000002c0)={{r10, 0x0, 0x0, [0xffffff80, 0x2c4]}, {r9, 0x0, 0x1, [0x4, 0x3ff]}, 0x0, [0x1000, 0x8]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000000)={{r5, r6, 0x0, [0x1414b6b9, 0x10000]}, {r9, r7, 0x4, [0xff, 0xfc000000]}, 0x0, [0x4, 0x8]}) r11 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = syz_io_uring_setup(0x10cf, &(0x7f0000000340)={0x0, 0x6bf6, 0x400, 0x6, 0x20c}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r15 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r15, 0xc0045009, &(0x7f0000000040)) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) listen(r11, 0x2930764) io_uring_enter(r12, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@overlay={0x1, 0xc, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0x2, 0x1, 0x96, 0x1, 0xc, "d1ffb7c2"}, 0x2, 0x3, {}, 0x7}) truncate(&(0x7f0000000a80)='./file2\x00', 0x7cf) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), &(0x7f0000000300)=ANY=[], 0x73, 0x1) 1m37.502673812s ago: executing program 4 (id=320): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x100001, {{0xa, 0x0, 0x0, @mcast2, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfaf9}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x5faa, &(0x7f0000009080)="$eJzs3cuOHFcZB/CvL9NzceJYEYqMxWLiQEgI8d2GcIvDggUsQEJZY2syiQwOINsgEll4Ii8QG+ARYJMNi7wCD5BnQDwAluxsyIJQqGbOsWvKPe6Z2NPVPef3k8ZVX52u6VP+T011T1X1CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgfviDn57uRcSl36YFRyKeikFEP2K5rlejnrmYHz+MiKOx2RzPRcRgMaJef/OfZyLORcTHhyPu3ru5Vi8+s8t+nD9149pnP/r+P//w59tHf/7Wzz5st//kC2c/+uOtiCM/fu2jz249mW0HAACAUlRVVfXS2/xj6f19v+tOAQBTkY//VZKXq9VqtfqJ1n/q7+XxTx3qur/qA1o3VePdahYRsdFcp37N4HQ8AMyZjfi06y7QIfkXbRgRh7ruBDDTel13gH1x997NtV7Kt9c8Hqxutee/U27Lf6N3//6OnaaTtK8xmdbP1+0YxLM79Gd5Sn2YJTn/fjv/S1vto/S4/c5/WnbKf7R161Nxcv6Ddv4t2/L/S0TMbf79sfmXKuc/3Ev+G4M53v/lDwAAAADAwZf//n+k4/O/i4+/KbvyqPO/q1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVW/V6/99fCDZTt9Flu9/M1exNOtxwOFWW18OCAAAAAAAAAAAAAAMB3DiJV0Xf9CRDy9slJVVf3V1K736nHXn3elbz+UrOtf8gAAsOXjw617+XsRSxHxZvqsv4WVlZWqWlpeqVaq5cX8ena0uFQtN97X5mm9bHG0ixfEw1FVf7OlxnpNk94vT2pvf7/6uUbVYBcdm44OAweAiNg6Gt11RDpgquqZ6PpVDvPB/n/w2P/Zja5/TgEAAID9V1VV1Usf530snfPvd90pAGAq8vG/fV5ArVari6k/2Vo4M/1Rq/exbqrGu9UsImKjuU79msFw/AAwZzbi0667QIfkX7RhRBztuhPATOt13QH2xd17N9d6Kd9e83iwutWerwXZlv9Gb3O9vP646STta0ym9fN1Owbx7A79eW5KfZglOf9+O/9LW+15iP/9zn9adsq/3s4jHfSnazn/QTv/loOTf39s/qXK+Q/3lP9A/gAAAAAAMMPy3/+POP+bNxkAAAAAAAAA5s7dezfX8n2v+fz/l8Y8rtecc//ngZHz7+06f/f/HiQ5/347/9YFOYPG/J03HuT/yb2bax/e+PcX83Tm818YjOrnXuj1B8N0zU+18HZciauxHqceevxwW/vph9oXtrWfmdB+9qH2Ud2+nNtPxFr8Kq7GW/fbFydcGLU0ob2a0J7zH9j/i5TzHza+6vxXUnuvNa3d+aD/0H7fnI57not//++LD+9d03c7Bve3ranevuMd9Gfz/+TQKH5zff3aid9dvnHj2ulIk21Lz0SaPGE5/4X0lfN/6YWt9vx7v7m/3vlgtOf8Z8XtGO6Y/wuN+Xp7X55y37qQ8x+lr5x/PgKN3//nOf+d9/9XOugPAAAAAAAAAAAAAAAAPEpVVZu3iF6MiAvp/p+u7s0EAKYrH/+rJC9Xq2ez/s+M9UetVqvnq26qxnu9WUTEP5rr1K8Zfj/umwEAs+x/EfGvrjtBZ+RfsPx5f/X0y113Bpiq6++9/4vLV6+uX7vedU8AAAAAAAAAgM8rj/+52hj/efM6oNa40dvGf30jVud2/M/+aLA51nnaoOfj0eN/H49Hj/89nPB8CxPaRxPaFye0L01oH3ujR0PO//mUcc7/WNqwksZ/famD/nQt5388jfWc8/9q63HN/Ku/zXP+/W35n7zx7q9PXn/v/VevvHv5nfV31n95+tSFc2fPnzt7/vzJt69cXT+19W+HPd5fOf889rXrQMuS88+Zy78sOf+vpFr+Zcn5v5hq+Zcl559f78m/LDn//N5H/mXJ+b+cavmXJef/tVTLvyw5/1dSLf+y5Py/nmr5lyXn/2qq5V+WnP+JVMu/LDn/k6mWf1ly/vkMl/zLkvPPVzbIvyw5/zOpln9Zcv5nUy3/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXn/41Uy78sOf9vplr+Zcn5v5Zq+Zcl5/+tVMu/LDn/b6da/mXJ+X8n1fIvS87/u6mWf1ly/t9LtfzLkvN/PdXyL8uDz/83s+eZldnohhkzT36m699MAAAAAAAAAAAAAEDbNC4n7nobAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdXYxc5X0G8LNf9tqQ4AZCCHGCbT7iwMLu+gscYjBJSCnpByUhbVpS49hr48Rf9a4TQKhsCm2JglSk9oJeNE2iNIrUVqAqUlOJRqiN1N41V424iVopF64ElYOSSqkCW5057/t6ZnZ2Zrz2es+c8/sh++/dOTPzzpkzs/MsemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotvkjM38ylGVZ/qfx14Ysuzz/97psb/7l/K7VXiEAAABwod5s/P23V6Rv7O3jTE3b/Ov7/v07CwsLC9ln3zjz1p8tLKQTNmXZyNosa5wW/dvPf7bQvE3wdDY+NNz09XCPqx/pcfpoj9PHepy+psfpa3ucPt7j9EU7YJF1xe9jGhd2Q+OfG4pdml2VjTVOu6HDuZ4eWjs8HH+X0zDUOM/C2KHsSHY0m8mmFp1nqPFflr28Ob+u+7J4XcNN17Uxy7KzP3nyQFzDUNjHN2QtV9bQfN+9fk+26Y2fPHngW3OvvbvT7LkbFq00y7Zuydf5TJad+3VVNpStTfskrnO4aZ0bO6xzpGWdQ43z5f9uX+fZPtcZb/d4WOcPuqxzY/jeY9dnWTafLblNu6ez4Wx927Wm/T1eHBH5ZeR35Tuy0fM6Tjb3cZzk5/nx9a3HSfsxGff/5rBPRpdYQ/Pd8fqX1iza78s9TvJbXYZjNb/sB/IrHR9v/tVqy7Gab/PkjUsfAx3vuw7HQDqWm46BLb2OgeE1I41jYPjcmre0HAPTi84znA01ruvMjd2Pgcm5YycnZx9/4tYjx/Yfnjk8c3x6ateO7Tt3bN+5c/LQkaMzU8Xf57dLB8j6bDgdg1vCc008Bt/ftm3zIbnw9Yv3OBgvyeMgv+2fvClf0OXD2RLHeL7NM1sv/HGQfu43PQ5Gmx4HHZ9TOzwORvt4HOTbnN3a38/M0aY/ndawUs+FG5qOgdX8eZhf58MfWPq5cGNY17M3n+/Pw5FFx0C8WUPhsZd/J73eG78j7JfFx8W1+QmXrclOz86cuu2x/XNzp6azMC6JK5vuq/bjZX3TbcoWHS/D53287P2bX9x0bYfvbwj7avyW7vdVvs2Oie73VePZvfP+bPnutiyMi+xS789OP83y/ZmyRJf9mW/zzK0X/low5ZKm57+xXs9/I2OjxfPfSNobYy3Pf4vvmpHGyrLs7K39Pf+NhT+X+vnvqpI8/+X76uHbuh8D+TbPTp7vMTDa9fnv+jCHwno+EBLDeFPuf6tx+nxxmDbdlz2Pm9HRsXDcjMZrbD1uti86T35p+XVvnVrecbP1+tb7quV1SwWPm3xf/flU9+Mm3+aV6Qt/7lgX/9n03LGm1zEwNrImX+9YOgiK57uFdfEYuC07kJ3IjmYH03nyezm/rolt/R0Da8KfS/3ccU1JjoF8X72wrfsxkG/z/e0X97XT1vCdtE3Ta6f23y8slfmvHT13ee277WJn/nydH93R/XdD+Tav7TjfnNF9P90SvnNZh/3U/vhZ6pg+mF2a/XRNWOfRnd1/N5Vvc9WuPo+nvVmWvTr9auP3XeH3u39/+j++0/J7306/U351+tX7Jx/84fmsHwCA5Xur8ff8muK1ZtP/se7n//8DAAAAAyHm/uEwE/kfAAAAKiPm/pEwE/kfAAAAKiPm/tEwk5rk/0fv2P3im09l6d0AF4J4etwND9xVbBc73vPh600L5+Tf//A3x1788lP9XfdwlmW/uP89Hbd/9K64rsLJuM4Ptn5/kWuu6+v6H3no3HbN759wdndx+fH29HsYxK7yy5PbGpe76fHpxnzl/qwxH5x/9uni8ouv4/Znthfb/2V405K9h4Zazr81rOeGMDeF95R5YO+5/ZDPeL4XN77vX6781Lnri+cb2vL2xs184Q+Ky43vEfX8lcX28XYvtf5/+sq3X8y3f+zGzut/arjz+s+Ey/1xmD/fU2zfvM+/3LT+Pwrrj9cXz3fbN77Xcf0vvavY/qVwXHwtzPb13/On732z0/0Vr2fvncX54vVP/e+Oxvni5cXLb1//+FPTLfuj/fJfeaO4nD1f+OlI8/bx+/F6okfubD2+h8L929Ijz7Ls23+ctezn7EPF+f6xbf3x8k7e2Xn9t7St8+TQdY3zn7s9G1pu11f/elvH2xvXs/fvNrTcnufvDfvvjcnv55d75sFwPIbT/+8HxeW1v5fpS/e2Pt/E7b+2oXjcxsubbFv/823rn78u33e913/fG8X6X7p7bcv6934sHE/3FbPX+g//1RUt5//6t4r749QXJ46fmD195GDTXm1+HK8dX7f+ssvf9vYrwnNp+9f7Tsw9OnNq09SmqSzbNIBvGbjS6/9GmP9TjPmLfw2FH/60OO6e+3jxc+v9Pyu+fj58/5Fwf8afj1/9i7GW47X9fp+/u5gXuv6bwzr69a6v/Nd1fW145jMvn/6HP3yt/XVBvD0n3zneuH0vbL66cdrQK8Xp7c9XvfznO1sf1z8anWrM74b9uhDemXnL1cX1tV9+fG+S5z5RPH7jK7l4/qzt/UQ2jLTejgtd/4/C65jvXdP6/BePj+8+1fZuzhuyoXwJ8+H5IZsvTo9bxf393NmrO15ffB+ebP7d57PMJc0+Pjt59Mjx049Nzs3Mzk3OPv7EvmMnTh+f29d479J9n+t1/nOP7/WNx/fBmV07ssaj/UQxVthqr//kQwcO3j5108GZQ/tPH5p76OTMqcMHZmcPzBycvWn/oUMzX+x1/iMH90xv27399m0Th48c3HPH7t3bd08cOX4iX0axqB52TX1+4vipfY2zzO7ZsXt6584dUxPHThyc2XP71NTE6V7nb/xsmsjP/YWJUzNH988dOTYzMXvkiZk907t37drW890fj508NLtp8tTp45OnZ2dOTRa3ZdNc49v5z75e56ceZk+E57s2Q+HV+adv2ZXeHzf3zS8teVHFJq0vT7PXw3tBxZ9vvb6OuX8szKQm+R8AAADqIOb+8Mb/506Q/wEAAKAyYu5fG2Yi/wMAAEBlxNw/HmZSk/yv/6//r/+v/6//r/+/kvT/9f+70f/X/x/k9ev/6//TW9n6/zH3r8uyWuZ/AAAAqIOY+9eHmcj/AAAAUBkx918WZiL/AwAAQGXE3H95mEk98v9Y+z/1//X/9f+b+/9xW/3/TP9f/3+Z9P/1/7vR/9f/H+T1l7D/v07/n7IpW/8/5v63hZnUI/8DAABALcTc//YwE/kfAAAAKiPm/ivCTOR/AAAAqIyY+zeEmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/x/k9Zew/+/z/ymdsvX/Y+7/pTCTmuR/AAAAqIOY+98RZiL/AwAAQGXE3H9lmIn8DwAAAJURc/9VYSY1yf/6//r/+v/6//r/+v8rSf9/APr/nbqW+v/N2p+mEv1//X/9f/1/uitb/z/m/neGmdQk/wMAAEAdxNx/dZiJ/A8AAACVEXP/u8JM5H8AAACojJj7rwkzqUn+1//X/9f/1//X/9f/X0n6/wPQ/+9E/78v+v/6//r/+v90V7b+f8z97w4zqUn+BwAAgDqIuf/aMBP5HwAAACoj5v73hJnI/wAAAFAZMfdvDDOpSf7X/9f/1/+vVv9/WP9f/79kBqv/P7zkKfr/hYHo/w/r//drtfvzg75+/X/9f3orW/8/5v73hpnUJP8DAABAHcTc/74wE/kfAAAAKiPm/uvCTOR/AAAAqIyY+zeFmdQk/+v/6//r/1er/+/z//X/y2aw+v9L0/8vDET/3+f/9221+/ODvn79f/1/eitb/z/m/s1hJjXJ/wAAAFAHMfdvCTOR/wEAAKAyYu6/PsxE/gcAAIDKiLn/hjCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//v8gr1//v7/+/5peF0Slla3/H3P/jWEmNcn/AAAAUAcx998UZiL/AwAAQGXE3P/+MBP5HwAAACoj5v6tYSY1yf/6//r/+v/6//r/+v8rSf+/7/7/uuWsS/+/oP+/PKvdnx/09ev/+/x/eitb/z/m/g+EmdQk/wMAAEAdxNx/c5iJ/A8AAACVEXP/LWEm8j8AAABURsz9E2EmNcn/+v/6//r/+v/6//r/K6mq/f/0POrz//X/9f/1//X/9f9ZUtn6/zH33xpmUpP8DwAAAHUQc/9tYSbyPwAAAFRGzP2TYSbyPwAAAFRGzP1TYSY1yf+p///f+v+Z/r/+v/6//r/+/0VX1f7/Cnz+/7LWr/9f0P9fntXuzw/6+vX/9f/prWz9/5j7p8NMapL/AQAAoA5i7t8WZiL/AwAAQGXE3L89zET+BwAAgMqIuX9HmElN8r/P/9f/1//X/9f/1/9fSfr/+v/d6P/r/w/y+vX/9f9pNdzhe2Xr/8fcvzPMpCb5HwAAAOog5v5dYSbyPwAAAFRGzP23h5nI/wAAAFAZMfffEWZSk/yv/6//r/+v/1/e/n/r9ev/6/93ov+v/5/p/y/bavfnB339+v/6//R2cfv/V1xw/z/m/t1hJjXJ/wAAAFAHMfd/MMxE/gcAAIDKiLn/zjAT+R8AAAAGSqfPIYxi7v9QmElN8r/+f9X7/wtr9f/1/we3/9+6P/X/9f870f/X/8/0/5dttfvzg75+/X/9f3q7uP3/RS9Pz7v/H3P/njCTmuR/AAAAqIOY++8KM5H/AQAAoDJi7r87zET+BwAAgEG1qEcTc//eMJOa5H/9/6r3/8v3+f9Dmf6//n9B/1///2LQ/9f/z/T/l225/fnwskX/v0T9//wY0v+njMrW/4+5/54wk5rkfwAAAKiDmPs/HGYi/wMAAEBlxNz/kTAT+R8AAAAqI+b+j4aZ1CT/17T//8/6/wWf/6//n+n/6/+vMP1//f9u9P8Hs/8f6f+Xp//v8/8pq7L1/2PuvzfMpCb5HwAAAOog5v6PhZnI/wAAAFAZMff/cpiJ/A8AAACVEXP/fWEmNcn/Ne3/+/z/cP36//r/mf6//v8K0//X/+9G/1//f5DXr/+v/09vZev/x9z/K2EmNcn/AAAAUAcx998fZiL/AwAAQGXE3P/xMBP5HwAAACoj5v5fDTOpSf7X/780/f/hdPn6//r/+v/6//r/F5P+v/5/pv+/bKvdnx/09ev/6//TW9n6/zH3/1qYSU3yPwAAANRBzP2/HmYi/wMAAEBlxNz/G2Em8j8AAABURsz9D4SZ1CT/6//7/H/9f/3/0vb/R1v3p/6//n8n+v/6/5n+/7Ktdn9+0Nev/6//T29l6//H3P+bYSY1yf8AAABQBzH3PxhmIv8DAABAZcTc/4kwE/kfAAAAKiPm/k+GmdQk/+v/6//r/+v/l7b/37Y/9f/1/zvR/9f/z/T/l221+/ODvn79f/1/eitb/z/m/ofCTGqS/wEAAKAOYu7/VJiJ/A8AAACVEXP/b4WZyP8AAABQGTH3/3aYSU3yv/6//r/+v/6//r/+/0rS/1/c/8+fw1az/7+mnw31//ui/6//r/+v/093Zev/x9z/6TCTmuR/AAAAqIOY+38nzET+BwAAgMqIuf93w0zkfwAAAKiMmPsfDjOpSf7X/9f/1//X/9f/1/9fSfr/Pv+/G/1//f9Ltv7hi79+/X/9f3orW/8/5v7PhJnUJP8DAABAHcTc/3thJvI/AAAAVEbM/fvCTOR/AAAAqIyY+x8JM6lJ/tf/1//X/y9n/39Y/1//X/+/L/r/+v+Z/v+y1ar/vwLr1//X/6e3svX/Y+7fH2ZSk/wPAAAAdRBz/2fDTOR/AAAAqIyY+w+Emcj/AAAAUBkx9x8MM6lJ/tf/1//X/y9n/z/T/9f/1//vi/6//n+m/79sq92fH/T16//r/9Nb2fr/MffPhJnUJP8DAABAHcTcfyjMRP4HAACAyoi5/3CYifwPAAAAlRFz/6NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/QV6//r/+P72Vrf8fc/+RMJOa5H8AAACog5j7PxdmIv8DAABAZcTc//kwE/kfAAAAKiPm/qNhJjXJ//r/+v/6/xXs/4/q/2f6/6Wh/6//343+v/7/IK9f/1//n97K0f+fT1/H3H8szKQm+R8AAADqIOb+42Em8j8AAABURsz9J8JM5H8AAACojJj7T4aZ1CT/6//r/+v/V7D/7/P/G/T/y0H/X/+/m6r1/+MdqP+v/6//r/9PoRz9/3Nfx9z/+2EmNcn/AAAAUAcx958KM5H/AQAAoDJi7p8NM5H/AQAAoDJi7p8LM6lJ/tf/1//X/9f/1//X/19Jq9v/bz+6lk//v6D/38rn/+v/6//r/9Nd2fr/MfefDjOpSf4HgP9n77527TqrPg6v/UVfHCuKuAXuAHHCKZfANXCSG0CiQ+gQeu+d0BN677333nsJJRA6JEhGeI0xTOK959zeXit7znc8z8lQipNXtjD6K/ppAgB0kLv//nGL/Q8AAADDyN3/gLjF/gcAAIBh5O5/YNzSZP/r//X/+v/F9P/bzk//r//X/18S3//X/2/0/yd22v382t/fof+f+h+E/p/jWFr/n7v/QXFLk/0PAAAAHeTuf3DcYv8DAADAMHL3PyRusf8BAABgGLn7Hxq3NNn/+n/9v/5/Mf2/7//nr+uI/f/BhX+t/n+39P/6/43+/8ROu59f+/s79P9T9P8cx9L6/9z9D4tbmux/AAAA6CB3/8PjFvsfAAAAhpG7/7q4xf4HAACAYeTuf0Tc0mT/6//1//vo/2+OXlP/r//X//v+v/5f/z9F/6//X/P79f/6f+Ytrf/P3f/IuKXJ/gcAAIAOcvc/Km6x/wEAAGAYufsfHbfY/wAAADCM3P2PiVua7H/9v/7f9//1/137/wyt9f/7pf/X/0/R/+v/1/z+o/v/Gzf6f/0/W0vr/3P3PzZuabL/AQAAoIPc/Y+LW+x/AAAAGEbu/sfHLfY/AAAADCN3/xPilib7X/+v/9f/6/+79v9J/79f+n/9/xT9v/5/ze8f9/v/N+n/2Zm99//3uf78PW7/n7v/+rilyf4HAACADnL3PzFusf8BAABgGLn7nxS32P8AAAAwjNz9T45bmuz/Q/r/Kzb6/6b9/7kD/b/+f5n9/23xu4z+X/9/Mf2//n+j/z+xo/v54/1M6P9H7f99/5/d2Xv/P9P73/mPc/c/JW5psv8BAACgg9z9T41b7H8AAAAYRu7+p8Ut9j8AAAAMI3f/0+OWJvvf9//1/7v8/n/+c/X/W/p/3//X/+v/9f/T9tj/X5s/mcfo/6/c6P99/3/H/f+9j/F+/T8dLK3/z93/jLilyf4HAACADnL3PzNusf8BAABgGLn7nxW32P8AAAAwjNz9z45bmux//b/+f5f9f5vv/5/d/nj9/x3fo//X/x9G/6//n+L7//r/Nb/f9//1/8xbWv+fu/85cUuT/Q8AAAAd5O5/btxi/wMAAMAwcvc/L26x/wEAAGAYufufH7c02f/6f/2//t/3/y+r/79C/6//n6b/1/9P0f/r/9f8fv3/ifr/q+b+uYxlaf1/7v4XxC1N9j8AAAB0kLv/hXGL/Q8AAADDyN3/orjF/gcAAIBh5O5/cdzSZP/r//X/+n/9v+//6//3Sf8/XP9/oP+/QP+v/9f/+/4/05bW/+fuf0nc0mT/AwAAQAe5+18at9j/AAAAMIzc/S+LW+x/AAAAGEbu/pfHLU32v/5f/6//1//r//X/+6T/H67/9/3//6H/1//r//X/TFta/5+7/xVxS5P9DwAAAB3k7n9l3GL/AwAAwDBy978qbrH/AQAAYBi5+2+44/pvs//1//p//b/+X/+v/98n/b/+f8rQ/f+df3PbHL//v+qIf5/+f1nv303/n7/6+n/GtLT+/4bzP+qqzavjlib7HwAAADrI3f+auMX+BwAAgGHk7n9t3GL/AwAAwDBy978ubmmy/4/q/2+9evvX9f/Ho/8//P36/7u0/78y/7r+f0v/vwz6f/3/lKH7f9//38kbl/x+3//X/zNvaf1/7v7Xxy1N9j8AAAB0kLv/DXGL/Q8AAADDyN3/xrjF/gcAAIBh5O6/MW5psv99/1//r/8fpv/3/X/9/yLp//X/U1bU/5857E/q//X/+n/9P9OW1v/n7r8pbmmy/wEAAKCD3P1vilvsfwAAABhG7v43xy32PwAAAAwjd/9b4pYm+1//r/8/9f7///T/Sf8fv676f/3/JdD/6/83vv9/Yqfdz6/9/fp//T/zltb/5+5/a9zSZP8DAABAB7n73xa32P8AAAAwjNz9b49b7H8AAAAYRu7+d8QtTfa//l//f+r9v+//F/1//Lq26//vdY3+/+T0//r/Tcf+/+ylvPJop93Pr/39+n/9P/OW1v/n7n9n3NJk/wMAAEAHufvfFbfY/wAAADCM3P3vjlvsfwAAABhG7v73xC1N9r/+X/+v/9f/6/9Pu//3/f/Lof/X/2869v++/7+I9+v/9f/MW1r/n7v/vXFLk/0PAAAAHeTuf1/cYv8DAADAMHL3vz9usf8BAABgGLn7PxC3NNn/+v+19//3vSVeoP/X/+v/9f+LpP/X/0/R/+v/d/T+cwf6f/0/i7S0/j93/wfjlib7HwAAADrI3f+huMX+BwAAgGHk7v9w3GL/AwAAwDBy938kbmmy/3v0//9/0d82Tv/v+//6f/2//n/Z9P/6/yn6f/3/mt+v/7/2fne/x4H+n0lL6/9z9380bmmy/wEAAKCD3P0fi1vsfwAAABhG7v6Pxy32PwAAAAwjd/8n4pYm+79H/38x/f/Wzvv/c3fT/+v/i/5f/7/R/+v/Z+j/9f9rfv/Q/f/Bxvf/2Yml9f+5+z8ZtzTZ/wAAANBB7v5PxS32PwAAAIzg/NjP3f/pC39qy/4HAACAYeTu/0zccM9rTu9Jdyn9v/7f9//1//r/fff/8ZvkdRd+VvX/u6P/1/9v9P8ndtr9/NrfP3T/f+zv/+v/mba0/j93/2fjFv/9HwAAAIaRu/9zcYv9DwAAAMPI3f/5uMX+BwAAgGHk7v9C3NJk/+v/9f/6f/2//t/3//dJ/6//n6L/1/+v+f36f/0/85bW/+fu/2Lc0mT/AwAAQAe5+78Ut9j/AAAAMIzc/V+OW+x/AAAAGEbu/q/ELU32v/5f/6//1//r//X/+6T/1/9P0f/r/9f8fv2//p95S+v/c/d/NW5psv8BAACgg9z9X4tb7H8AAAAYRu7+r8ct9j8AAAAMI3f/N+KWJvtf/6//1//r//X/+v990v/r/6fo//X/a36//l//z7yl9f+5+78ZtzTZ/wAAANBB7v5vxS32PwAAAAwjd/+34xb7HwAAAIaRu/87cUuT/T9y/z/1t+n/t/T/+v+N/l//v2f6f/3/FP2//n/N79f/6/+Zt7T+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAVbrykD+Xu//7cYv9DwAAAMPI3f+DuKXJ/r+U/v/2q9fV/0/R/2/p//X/G/2//n/P9P/6/yn6f/3/mt+v/9f/M29p/X/u/h/GLU32PwAAAHSQu/9HcYv9DwAAAMPI3f/juMX+BwAAgGHk7v9J3NJk/4/8/f8p+v8t/b/+f6P/32//n3+g/9f/6/8Ppf/X/6/5/fp//T/zltb/5+7/adzSZP8DAABAB7n7fxa3XMr+P7vrVwEAAAC7lLv/53GL//4PAAAAw8jd/4u4pcn+1//r//X/+n/9v+//75P+X/8/Rf+v/1/z+/X/+n/mLa3/z93/y7ilyf4HAACADnL3/ypusf8BAABgGLn7fx232P8AAAAwjNz9N8ctTfb/ZfX/Z/T/Sf9/+Pv1//p//b/+v23//9//W9X/z9L/6//X/H79v/6feUvr/3P3/yZuabL/AQAAoIPc/b+NW+x/AAAAGEbu/t/FLfY/AAAADCN3/+/jlib73/f/9f/6f/2//l//v09t+3/f/z8W/b/+f83v1//r/5m3tP4/d/8tcUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvf/MW6x/wEAAGAYuftvjVua7H/9v/5/yP7/jP5f/6//Xwr9v/5/iv5f/7/m9+v/9f/MW1r/n7v/T3FLk/0PAAAAHeTu/3PcYv8DAADAMHL3/yVusf8BAABgGLn7/xq3NNn/+n/9/5D9v+//6//1/4uh/9f/T9H/6//X/H79v/6feUvr/3P3/y1uabL/AQAAoIPc/X+PW+x/AAAAGEbu/n/ELfY/AAAADCN3/z/jlib7f/D+/8i/U/+/pf/X/2/0//r/PdP/6/+n6P/1/2t+/1z/f+7M9I/X/9PB0vr/3P3/ilua7H8AAADoIHf/bXGL/Q8AAADDyN1/e9xi/wMAAMAwcvf/O25psv8H7/+PpP/f0v/r/zf6f/3/nun/9f9T9P/6/zW/3/f/9f/MW1r/n7v/PwEAAP//VKkqHA==") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1m34.560400078s ago: executing program 32 (id=320): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x100001, {{0xa, 0x0, 0x0, @mcast2, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfaf9}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x5faa, &(0x7f0000009080)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 31.001634484s ago: executing program 1 (id=530): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 22.388818402s ago: executing program 1 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 21.645595s ago: executing program 1 (id=564): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 18.22885265s ago: executing program 1 (id=582): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000040)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utime(0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 16.727394533s ago: executing program 1 (id=591): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x205) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000000), &(0x7f0000000400)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.979114407s ago: executing program 1 (id=598): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file7\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 15.136746123s ago: executing program 33 (id=598): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file7\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 10.497958773s ago: executing program 2 (id=624): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 10.183497391s ago: executing program 3 (id=626): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0, 0x50, 0x1}) r1 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x2e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 9.893003122s ago: executing program 2 (id=628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x75fd, &(0x7f0000000040)={0x0, 0x8002ce0, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x6dd7, 0x7721, 0x16, 0x0, 0x0) 8.676930003s ago: executing program 2 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 6.819212279s ago: executing program 2 (id=634): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000003e200020a00000600000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000097ed1d7c0000000034fd793d2c86db04132bbc16e6c2d6ed90b5c4295f519e7242238283be21b5a87a32e6fb761264c75f0010b4c11aaf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 6.424902727s ago: executing program 5 (id=636): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000900)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 6.244292096s ago: executing program 3 (id=637): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 5.49495922s ago: executing program 5 (id=639): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4) 5.404904897s ago: executing program 3 (id=640): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffeff}}}, 0x32) 5.043602705s ago: executing program 0 (id=641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = memfd_secret(0x80000) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 5.008331878s ago: executing program 5 (id=642): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002c438700fddbdf2507000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 4.977941024s ago: executing program 3 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 4.363543547s ago: executing program 0 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 4.363324887s ago: executing program 5 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) 3.946996726s ago: executing program 3 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000010", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.820202438s ago: executing program 0 (id=647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00'}, 0x10) r0 = io_uring_setup(0x63eb, &(0x7f0000000000)={0x0, 0x5fc2, 0x8, 0x1, 0x1d7}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000080)="ea", 0x1) 3.479363222s ago: executing program 3 (id=648): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 3.478879452s ago: executing program 2 (id=649): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)=0x0) io_pgetevents(r5, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.434970936s ago: executing program 5 (id=650): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x4}, {@multicast2}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 3.305382883s ago: executing program 0 (id=651): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4) 2.523568717s ago: executing program 0 (id=652): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffeff}}}, 0x32) 235.420383ms ago: executing program 2 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 97.488807ms ago: executing program 5 (id=654): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 0s ago: executing program 0 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) kernel console output (not intermixed with test programs): data+0xfb/0x160 [ 306.517076][ T6840] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.517247][ T6840] tomoyo_encode+0x626/0xa10 [ 306.517438][ T6840] tomoyo_realpath_from_path+0x92e/0x9f0 [ 306.517639][ T6840] tomoyo_path_number_perm+0x1d0/0x7d0 [ 306.517837][ T6840] ? stack_depot_save_flags+0x35/0x7b0 [ 306.518019][ T6840] ? kmsan_get_metadata+0xfb/0x160 [ 306.518166][ T6840] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.518371][ T6840] tomoyo_file_ioctl+0x3d/0x50 [ 306.518550][ T6840] security_file_ioctl+0x141/0x590 [ 306.518749][ T6840] __se_sys_ioctl+0xbb/0x400 [ 306.518938][ T6840] __x64_sys_ioctl+0x97/0xe0 [ 306.519118][ T6840] x64_sys_call+0x1cbc/0x3e30 [ 306.519293][ T6840] do_syscall_64+0xd9/0xfa0 [ 306.519458][ T6840] ? irqentry_exit+0x16/0x60 [ 306.519613][ T6840] ? clear_bhb_loop+0x40/0x90 [ 306.519765][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.519931][ T6840] RIP: 0033:0x7f3bd738efc9 [ 306.520037][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.520159][ T6840] RSP: 002b:00007f3bd8258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.520297][ T6840] RAX: ffffffffffffffda RBX: 00007f3bd75e5fa0 RCX: 00007f3bd738efc9 [ 306.520399][ T6840] RDX: 00002000000033c0 RSI: 0000000000002285 RDI: 0000000000000004 [ 306.520489][ T6840] RBP: 00007f3bd8258090 R08: 0000000000000000 R09: 0000000000000000 [ 306.520586][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.520671][ T6840] R13: 00007f3bd75e6038 R14: 00007f3bd75e5fa0 R15: 00007ffdd3f830a8 [ 306.520805][ T6840] [ 306.520915][ T6840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.861783][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 307.035683][ T5852] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 307.043729][ T5852] usb 5-1: can't read configurations, error -61 [ 307.216727][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 307.293709][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.308922][ T6850] nbd: socks must be embedded in a SOCK_ITEM attr [ 307.417830][ T5852] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 307.426087][ T5852] usb 5-1: can't read configurations, error -61 [ 307.471902][ T5852] usb usb5-port1: attempt power cycle [ 307.969317][ T6854] loop1: detected capacity change from 0 to 256 [ 308.058767][ T6854] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 308.095433][ T6854] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 308.105725][ T6854] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 308.113888][ T6854] UDF-fs: Scanning with blocksize 512 failed [ 308.218345][ T6854] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 308.290293][ T6854] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 308.443337][ T6856] loop0: detected capacity change from 0 to 1024 [ 308.567020][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 308.574039][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 308.580323][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 308.589914][ T5096] Bluetooth: hci1: command 0x0406 tx timeout [ 308.706532][ T6854] loop1: detected capacity change from 0 to 2048 [ 308.787057][ T6854] udf: Unknown parameter 'n' [ 308.798415][ T6853] loop3: detected capacity change from 0 to 40427 [ 308.811968][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 308.880063][ T6853] F2FS-fs (loop3): build fault injection rate: 14 [ 308.886823][ T6853] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 308.904722][ T6853] F2FS-fs (loop3): invalid crc value [ 308.933186][ T5852] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 308.946753][ T5852] usb 5-1: can't read configurations, error -61 [ 308.965963][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 308.994332][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 309.177976][ T6854] loop1: detected capacity change from 0 to 512 [ 309.279383][ T6853] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.288834][ T6853] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 309.312322][ T6853] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.328971][ T6853] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 309.346974][ T6853] F2FS-fs (loop3): inject truncate fail in f2fs_truncate of f2fs_setattr+0x2112/0x2820 [ 309.365395][ T6854] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 309.366859][ T6853] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 309.396760][ T6854] EXT4-fs (loop1): orphan cleanup on readonly fs [ 309.513216][ T5816] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x12a2/0x2fc0 [ 309.525801][ T5816] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 309.531789][ T5852] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 309.539294][ T6854] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 309.587277][ T4269] hfsplus: b-tree write err: -5, ino 4 [ 309.611616][ T6854] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 309.655200][ T6854] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 309.726050][ T5852] usb 5-1: device descriptor read/8, error -71 [ 309.774903][ T6854] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.267: couldn't read orphan inode 13 (err -117) [ 309.787084][ C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of bio_endio+0xeb4/0x1010 [ 309.787397][ C0] CPU: 0 UID: 0 PID: 6854 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(none) [ 309.787534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.787617][ C0] Call Trace: [ 309.787665][ C0] [ 309.787715][ C0] __dump_stack+0x26/0x30 [ 309.787871][ C0] dump_stack_lvl+0x1df/0x270 [ 309.788049][ C0] dump_stack+0x1e/0x25 [ 309.788194][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 309.788369][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 309.788513][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 309.788699][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 309.788847][ C0] bio_endio+0xeb4/0x1010 [ 309.789006][ C0] blk_update_request+0xf4c/0x1a90 [ 309.789190][ C0] blk_mq_end_request+0x50/0xb0 [ 309.789330][ C0] lo_complete_rq+0x188/0x3a0 [ 309.789511][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 309.789688][ C0] blk_done_softirq+0x112/0x1f0 [ 309.789866][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 309.790054][ C0] handle_softirqs+0x169/0x6e0 [ 309.790268][ C0] __irq_exit_rcu+0x66/0x180 [ 309.790451][ C0] irq_exit_rcu+0x12/0x20 [ 309.790630][ C0] sysvec_call_function_single+0x81/0x90 [ 309.790797][ C0] [ 309.790846][ C0] [ 309.790900][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 309.791064][ C0] RIP: 0010:console_flush_all+0xe92/0x1240 [ 309.791228][ C0] Code: 89 f8 f7 d0 21 d8 74 0c 48 85 db 75 14 e8 e6 29 34 00 eb 13 44 89 f7 e8 3c 03 da 00 48 85 db 74 ec e8 d2 29 34 00 fb 4d 85 ed <0f> 85 b8 01 00 00 49 8b 1c 24 4c 89 e7 e8 fc f7 d9 00 8b 0a 89 4d [ 309.791344][ C0] RSP: 0018:ffff888058393170 EFLAGS: 00000246 [ 309.791461][ C0] RAX: ffffffff81c2f95e RBX: 0000000000000200 RCX: 0000000000080000 [ 309.791553][ C0] RDX: ffffc90009004000 RSI: 000000000001f937 RDI: 000000000001f938 [ 309.791644][ C0] RBP: ffff888058393278 R08: ffffea000000000f R09: 0000000000000000 [ 309.791738][ C0] R10: ffff888237b34028 R11: ffffffff8723b700 R12: ffffffff9237c248 [ 309.791834][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.791936][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 309.792101][ C0] ? console_flush_all+0xe8e/0x1240 [ 309.792322][ C0] console_unlock+0xeb/0x560 [ 309.792447][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 309.792620][ C0] vprintk_emit+0x883/0xb60 [ 309.792764][ C0] vprintk_default+0x3f/0x50 [ 309.792901][ C0] vprintk+0x36/0x50 [ 309.793058][ C0] _printk+0x17e/0x1b0 [ 309.793283][ C0] __ext4_error+0x59d/0x710 [ 309.793555][ C0] ext4_orphan_get+0x4aa/0xdf0 [ 309.793755][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.793923][ C0] ext4_orphan_cleanup+0xe97/0x1e30 [ 309.794090][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.794259][ C0] ext4_fill_super+0xa788/0xb010 [ 309.794539][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.794704][ C0] get_tree_bdev_flags+0x6e6/0x920 [ 309.794852][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.795058][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.795237][ C0] ? __pfx_ext4_get_tree+0x10/0x10 [ 309.795415][ C0] get_tree_bdev+0x38/0x50 [ 309.795541][ C0] ext4_get_tree+0x35/0x40 [ 309.795724][ C0] vfs_get_tree+0xb3/0x5c0 [ 309.795866][ C0] do_new_mount+0x839/0x15f0 [ 309.796056][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.796235][ C0] path_mount+0x747/0x1fb0 [ 309.796448][ C0] __se_sys_mount+0x6f7/0x7e0 [ 309.796682][ C0] __x64_sys_mount+0xe4/0x150 [ 309.796886][ C0] x64_sys_call+0x3604/0x3e30 [ 309.797063][ C0] do_syscall_64+0xd9/0xfa0 [ 309.797225][ C0] ? irqentry_exit+0x16/0x60 [ 309.797374][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.797526][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.797674][ C0] RIP: 0033:0x7f4fedb9076a [ 309.797776][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.797906][ C0] RSP: 002b:00007f4fee943e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.798040][ C0] RAX: ffffffffffffffda RBX: 00007f4fee943ef0 RCX: 00007f4fedb9076a [ 309.798145][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f4fee943eb0 [ 309.798246][ C0] RBP: 0000200000000040 R08: 00007f4fee943ef0 R09: 000000000000019f [ 309.798341][ C0] R10: 000000000000019f R11: 0000000000000246 R12: 0000200000000000 [ 309.798430][ C0] R13: 00007f4fee943eb0 R14: 000000000000054f R15: 0000200000000400 [ 309.798561][ C0] [ 309.798876][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.799051][ C0] CPU: 0 UID: 0 PID: 6854 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(none) [ 309.799191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.799276][ C0] Call Trace: [ 309.799328][ C0] [ 309.799376][ C0] __dump_stack+0x26/0x30 [ 309.799539][ C0] dump_stack_lvl+0x1df/0x270 [ 309.799710][ C0] dump_stack+0x1e/0x25 [ 309.799854][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 309.800035][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 309.800183][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 309.800377][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 309.800525][ C0] bio_endio+0xeb4/0x1010 [ 309.800680][ C0] blk_update_request+0xf4c/0x1a90 [ 309.800868][ C0] blk_mq_end_request+0x50/0xb0 [ 309.801017][ C0] lo_complete_rq+0x188/0x3a0 [ 309.801196][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 309.801373][ C0] blk_done_softirq+0x112/0x1f0 [ 309.801553][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 309.801727][ C0] handle_softirqs+0x169/0x6e0 [ 309.801964][ C0] __irq_exit_rcu+0x66/0x180 [ 309.802149][ C0] irq_exit_rcu+0x12/0x20 [ 309.802338][ C0] sysvec_call_function_single+0x81/0x90 [ 309.802506][ C0] [ 309.802552][ C0] [ 309.802607][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 309.802763][ C0] RIP: 0010:console_flush_all+0xe92/0x1240 [ 309.802961][ C0] Code: 89 f8 f7 d0 21 d8 74 0c 48 85 db 75 14 e8 e6 29 34 00 eb 13 44 89 f7 e8 3c 03 da 00 48 85 db 74 ec e8 d2 29 34 00 fb 4d 85 ed <0f> 85 b8 01 00 00 49 8b 1c 24 4c 89 e7 e8 fc f7 d9 00 8b 0a 89 4d [ 309.803101][ C0] RSP: 0018:ffff888058393170 EFLAGS: 00000246 [ 309.803233][ C0] RAX: ffffffff81c2f95e RBX: 0000000000000200 RCX: 0000000000080000 [ 309.803340][ C0] RDX: ffffc90009004000 RSI: 000000000001f937 RDI: 000000000001f938 [ 309.803434][ C0] RBP: ffff888058393278 R08: ffffea000000000f R09: 0000000000000000 [ 309.803531][ C0] R10: ffff888237b34028 R11: ffffffff8723b700 R12: ffffffff9237c248 [ 309.803653][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.803752][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 309.803932][ C0] ? console_flush_all+0xe8e/0x1240 [ 309.804149][ C0] console_unlock+0xeb/0x560 [ 309.804285][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 309.804475][ C0] vprintk_emit+0x883/0xb60 [ 309.804628][ C0] vprintk_default+0x3f/0x50 [ 309.804761][ C0] vprintk+0x36/0x50 [ 309.804922][ C0] _printk+0x17e/0x1b0 [ 309.805156][ C0] __ext4_error+0x59d/0x710 [ 309.805412][ C0] ext4_orphan_get+0x4aa/0xdf0 [ 309.805617][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.805781][ C0] ext4_orphan_cleanup+0xe97/0x1e30 [ 309.805951][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.806116][ C0] ext4_fill_super+0xa788/0xb010 [ 309.806394][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.806559][ C0] get_tree_bdev_flags+0x6e6/0x920 [ 309.806703][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.806885][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.807067][ C0] ? __pfx_ext4_get_tree+0x10/0x10 [ 309.807245][ C0] get_tree_bdev+0x38/0x50 [ 309.807367][ C0] ext4_get_tree+0x35/0x40 [ 309.807532][ C0] vfs_get_tree+0xb3/0x5c0 [ 309.807662][ C0] do_new_mount+0x839/0x15f0 [ 309.807849][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.808030][ C0] path_mount+0x747/0x1fb0 [ 309.808234][ C0] __se_sys_mount+0x6f7/0x7e0 [ 309.808452][ C0] __x64_sys_mount+0xe4/0x150 [ 309.808649][ C0] x64_sys_call+0x3604/0x3e30 [ 309.808818][ C0] do_syscall_64+0xd9/0xfa0 [ 309.808979][ C0] ? irqentry_exit+0x16/0x60 [ 309.809126][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.809267][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.809412][ C0] RIP: 0033:0x7f4fedb9076a [ 309.809508][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.809626][ C0] RSP: 002b:00007f4fee943e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.809753][ C0] RAX: ffffffffffffffda RBX: 00007f4fee943ef0 RCX: 00007f4fedb9076a [ 309.809850][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f4fee943eb0 [ 309.809948][ C0] RBP: 0000200000000040 R08: 00007f4fee943ef0 R09: 000000000000019f [ 309.810040][ C0] R10: 000000000000019f R11: 0000000000000246 R12: 0000200000000000 [ 309.810127][ C0] R13: 00007f4fee943eb0 R14: 000000000000054f R15: 0000200000000400 [ 309.810255][ C0] [ 309.810415][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.810582][ C0] CPU: 0 UID: 0 PID: 6854 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(none) [ 309.810718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.810798][ C0] Call Trace: [ 309.810844][ C0] [ 309.810894][ C0] __dump_stack+0x26/0x30 [ 309.811051][ C0] dump_stack_lvl+0x1df/0x270 [ 309.811221][ C0] dump_stack+0x1e/0x25 [ 309.811362][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 309.811542][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 309.811685][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 309.811871][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 309.812021][ C0] bio_endio+0xeb4/0x1010 [ 309.812178][ C0] blk_update_request+0xf4c/0x1a90 [ 309.812363][ C0] blk_mq_end_request+0x50/0xb0 [ 309.812507][ C0] lo_complete_rq+0x188/0x3a0 [ 309.812703][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 309.812900][ C0] blk_done_softirq+0x112/0x1f0 [ 309.813088][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 309.813271][ C0] handle_softirqs+0x169/0x6e0 [ 309.813489][ C0] __irq_exit_rcu+0x66/0x180 [ 309.813677][ C0] irq_exit_rcu+0x12/0x20 [ 309.813858][ C0] sysvec_call_function_single+0x81/0x90 [ 309.814026][ C0] [ 309.814073][ C0] [ 309.814124][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 309.814283][ C0] RIP: 0010:console_flush_all+0xe92/0x1240 [ 309.814448][ C0] Code: 89 f8 f7 d0 21 d8 74 0c 48 85 db 75 14 e8 e6 29 34 00 eb 13 44 89 f7 e8 3c 03 da 00 48 85 db 74 ec e8 d2 29 34 00 fb 4d 85 ed <0f> 85 b8 01 00 00 49 8b 1c 24 4c 89 e7 e8 fc f7 d9 00 8b 0a 89 4d [ 309.814571][ C0] RSP: 0018:ffff888058393170 EFLAGS: 00000246 [ 309.814686][ C0] RAX: ffffffff81c2f95e RBX: 0000000000000200 RCX: 0000000000080000 [ 309.814779][ C0] RDX: ffffc90009004000 RSI: 000000000001f937 RDI: 000000000001f938 [ 309.814872][ C0] RBP: ffff888058393278 R08: ffffea000000000f R09: 0000000000000000 [ 309.814975][ C0] R10: ffff888237b34028 R11: ffffffff8723b700 R12: ffffffff9237c248 [ 309.815075][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.815167][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 309.815333][ C0] ? console_flush_all+0xe8e/0x1240 [ 309.815562][ C0] console_unlock+0xeb/0x560 [ 309.815690][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 309.815860][ C0] vprintk_emit+0x883/0xb60 [ 309.816017][ C0] vprintk_default+0x3f/0x50 [ 309.816154][ C0] vprintk+0x36/0x50 [ 309.816306][ C0] _printk+0x17e/0x1b0 [ 309.816533][ C0] __ext4_error+0x59d/0x710 [ 309.816777][ C0] ext4_orphan_get+0x4aa/0xdf0 [ 309.816983][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.817145][ C0] ext4_orphan_cleanup+0xe97/0x1e30 [ 309.817309][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.817470][ C0] ext4_fill_super+0xa788/0xb010 [ 309.817746][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.817918][ C0] get_tree_bdev_flags+0x6e6/0x920 [ 309.818060][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.818243][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.818421][ C0] ? __pfx_ext4_get_tree+0x10/0x10 [ 309.818600][ C0] get_tree_bdev+0x38/0x50 [ 309.818725][ C0] ext4_get_tree+0x35/0x40 [ 309.818898][ C0] vfs_get_tree+0xb3/0x5c0 [ 309.819046][ C0] do_new_mount+0x839/0x15f0 [ 309.819235][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.819413][ C0] path_mount+0x747/0x1fb0 [ 309.819630][ C0] __se_sys_mount+0x6f7/0x7e0 [ 309.819854][ C0] __x64_sys_mount+0xe4/0x150 [ 309.820057][ C0] x64_sys_call+0x3604/0x3e30 [ 309.820234][ C0] do_syscall_64+0xd9/0xfa0 [ 309.820403][ C0] ? irqentry_exit+0x16/0x60 [ 309.820557][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.820707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.820850][ C0] RIP: 0033:0x7f4fedb9076a [ 309.820957][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.821078][ C0] RSP: 002b:00007f4fee943e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.821204][ C0] RAX: ffffffffffffffda RBX: 00007f4fee943ef0 RCX: 00007f4fedb9076a [ 309.821299][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f4fee943eb0 [ 309.821393][ C0] RBP: 0000200000000040 R08: 00007f4fee943ef0 R09: 000000000000019f [ 309.821489][ C0] R10: 000000000000019f R11: 0000000000000246 R12: 0000200000000000 [ 309.821575][ C0] R13: 00007f4fee943eb0 R14: 000000000000054f R15: 0000200000000400 [ 309.821706][ C0] [ 309.821844][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.822009][ C0] CPU: 0 UID: 0 PID: 6854 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(none) [ 309.822145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.822228][ C0] Call Trace: [ 309.822277][ C0] [ 309.822328][ C0] __dump_stack+0x26/0x30 [ 309.822485][ C0] dump_stack_lvl+0x1df/0x270 [ 309.822657][ C0] dump_stack+0x1e/0x25 [ 309.822804][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 309.823002][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 309.823149][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 309.823345][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 309.823493][ C0] bio_endio+0xeb4/0x1010 [ 309.823650][ C0] blk_update_request+0xf4c/0x1a90 [ 309.823837][ C0] blk_mq_end_request+0x50/0xb0 [ 309.823982][ C0] lo_complete_rq+0x188/0x3a0 [ 309.824165][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 309.824347][ C0] blk_done_softirq+0x112/0x1f0 [ 309.824545][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 309.824724][ C0] handle_softirqs+0x169/0x6e0 [ 309.824949][ C0] __irq_exit_rcu+0x66/0x180 [ 309.825133][ C0] irq_exit_rcu+0x12/0x20 [ 309.825313][ C0] sysvec_call_function_single+0x81/0x90 [ 309.825479][ C0] [ 309.825525][ C0] [ 309.825579][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 309.825733][ C0] RIP: 0010:console_flush_all+0xe92/0x1240 [ 309.825897][ C0] Code: 89 f8 f7 d0 21 d8 74 0c 48 85 db 75 14 e8 e6 29 34 00 eb 13 44 89 f7 e8 3c 03 da 00 48 85 db 74 ec e8 d2 29 34 00 fb 4d 85 ed <0f> 85 b8 01 00 00 49 8b 1c 24 4c 89 e7 e8 fc f7 d9 00 8b 0a 89 4d [ 309.826025][ C0] RSP: 0018:ffff888058393170 EFLAGS: 00000246 [ 309.826140][ C0] RAX: ffffffff81c2f95e RBX: 0000000000000200 RCX: 0000000000080000 [ 309.826249][ C0] RDX: ffffc90009004000 RSI: 000000000001f937 RDI: 000000000001f938 [ 309.826342][ C0] RBP: ffff888058393278 R08: ffffea000000000f R09: 0000000000000000 [ 309.826437][ C0] R10: ffff888237b34028 R11: ffffffff8723b700 R12: ffffffff9237c248 [ 309.826536][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.826624][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 309.826781][ C0] ? console_flush_all+0xe8e/0x1240 [ 309.827000][ C0] console_unlock+0xeb/0x560 [ 309.827129][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 309.827294][ C0] vprintk_emit+0x883/0xb60 [ 309.827442][ C0] vprintk_default+0x3f/0x50 [ 309.827576][ C0] vprintk+0x36/0x50 [ 309.827729][ C0] _printk+0x17e/0x1b0 [ 309.827957][ C0] __ext4_error+0x59d/0x710 [ 309.828211][ C0] ext4_orphan_get+0x4aa/0xdf0 [ 309.828414][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.828580][ C0] ext4_orphan_cleanup+0xe97/0x1e30 [ 309.828743][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.828913][ C0] ext4_fill_super+0xa788/0xb010 [ 309.829191][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.829354][ C0] get_tree_bdev_flags+0x6e6/0x920 [ 309.829495][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.829678][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.829863][ C0] ? __pfx_ext4_get_tree+0x10/0x10 [ 309.830047][ C0] get_tree_bdev+0x38/0x50 [ 309.830175][ C0] ext4_get_tree+0x35/0x40 [ 309.830351][ C0] vfs_get_tree+0xb3/0x5c0 [ 309.830493][ C0] do_new_mount+0x839/0x15f0 [ 309.830680][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.830861][ C0] path_mount+0x747/0x1fb0 [ 309.831084][ C0] __se_sys_mount+0x6f7/0x7e0 [ 309.831301][ C0] __x64_sys_mount+0xe4/0x150 [ 309.831501][ C0] x64_sys_call+0x3604/0x3e30 [ 309.831667][ C0] do_syscall_64+0xd9/0xfa0 [ 309.831829][ C0] ? irqentry_exit+0x16/0x60 [ 309.831984][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.832134][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.832279][ C0] RIP: 0033:0x7f4fedb9076a [ 309.832379][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.832497][ C0] RSP: 002b:00007f4fee943e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.832623][ C0] RAX: ffffffffffffffda RBX: 00007f4fee943ef0 RCX: 00007f4fedb9076a [ 309.832719][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f4fee943eb0 [ 309.832816][ C0] RBP: 0000200000000040 R08: 00007f4fee943ef0 R09: 000000000000019f [ 309.832915][ C0] R10: 000000000000019f R11: 0000000000000246 R12: 0000200000000000 [ 309.833004][ C0] R13: 00007f4fee943eb0 R14: 000000000000054f R15: 0000200000000400 [ 309.833134][ C0] [ 309.833307][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.833466][ C0] CPU: 0 UID: 0 PID: 6854 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(none) [ 309.833599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.833682][ C0] Call Trace: [ 309.833731][ C0] [ 309.833777][ C0] __dump_stack+0x26/0x30 [ 309.833942][ C0] dump_stack_lvl+0x1df/0x270 [ 309.834107][ C0] dump_stack+0x1e/0x25 [ 309.834255][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 309.834439][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 309.834584][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 309.834780][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 309.834932][ C0] bio_endio+0xeb4/0x1010 [ 309.835088][ C0] blk_update_request+0xf4c/0x1a90 [ 309.835276][ C0] blk_mq_end_request+0x50/0xb0 [ 309.835419][ C0] lo_complete_rq+0x188/0x3a0 [ 309.835599][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 309.835781][ C0] blk_done_softirq+0x112/0x1f0 [ 309.835969][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 309.836148][ C0] handle_softirqs+0x169/0x6e0 [ 309.836365][ C0] __irq_exit_rcu+0x66/0x180 [ 309.836547][ C0] irq_exit_rcu+0x12/0x20 [ 309.836728][ C0] sysvec_call_function_single+0x81/0x90 [ 309.836891][ C0] [ 309.836945][ C0] [ 309.836995][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 309.837152][ C0] RIP: 0010:console_flush_all+0xe92/0x1240 [ 309.837316][ C0] Code: 89 f8 f7 d0 21 d8 74 0c 48 85 db 75 14 e8 e6 29 34 00 eb 13 44 89 f7 e8 3c 03 da 00 48 85 db 74 ec e8 d2 29 34 00 fb 4d 85 ed <0f> 85 b8 01 00 00 49 8b 1c 24 4c 89 e7 e8 fc f7 d9 00 8b 0a 89 4d [ 309.837438][ C0] RSP: 0018:ffff888058393170 EFLAGS: 00000246 [ 309.837572][ C0] RAX: ffffffff81c2f95e RBX: 0000000000000200 RCX: 0000000000080000 [ 309.837666][ C0] RDX: ffffc90009004000 RSI: 000000000001f937 RDI: 000000000001f938 [ 309.837765][ C0] RBP: ffff888058393278 R08: ffffea000000000f R09: 0000000000000000 [ 309.837863][ C0] R10: ffff888237b34028 R11: ffffffff8723b700 R12: ffffffff9237c248 [ 309.837973][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.838066][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 309.838231][ C0] ? console_flush_all+0xe8e/0x1240 [ 309.838446][ C0] console_unlock+0xeb/0x560 [ 309.838575][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 309.838742][ C0] vprintk_emit+0x883/0xb60 [ 309.838890][ C0] vprintk_default+0x3f/0x50 [ 309.839034][ C0] vprintk+0x36/0x50 [ 309.839186][ C0] _printk+0x17e/0x1b0 [ 309.839415][ C0] __ext4_error+0x59d/0x710 [ 309.839671][ C0] ext4_orphan_get+0x4aa/0xdf0 [ 309.839873][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.840041][ C0] ext4_orphan_cleanup+0xe97/0x1e30 [ 309.840211][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.840372][ C0] ext4_fill_super+0xa788/0xb010 [ 309.840652][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.840818][ C0] get_tree_bdev_flags+0x6e6/0x920 [ 309.840963][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.841146][ C0] ? __pfx_ext4_fill_super+0x10/0x10 [ 309.841311][ C0] ? __pfx_ext4_get_tree+0x10/0x10 [ 309.841476][ C0] get_tree_bdev+0x38/0x50 [ 309.841597][ C0] ext4_get_tree+0x35/0x40 [ 309.841764][ C0] vfs_get_tree+0xb3/0x5c0 [ 309.841900][ C0] do_new_mount+0x839/0x15f0 [ 309.842085][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 309.842265][ C0] path_mount+0x747/0x1fb0 [ 309.842482][ C0] __se_sys_mount+0x6f7/0x7e0 [ 309.842706][ C0] __x64_sys_mount+0xe4/0x150 [ 309.842909][ C0] x64_sys_call+0x3604/0x3e30 [ 309.843075][ C0] do_syscall_64+0xd9/0xfa0 [ 309.843242][ C0] ? irqentry_exit+0x16/0x60 [ 309.843388][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.843529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.843671][ C0] RIP: 0033:0x7f4fedb9076a [ 309.843770][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.843887][ C0] RSP: 002b:00007f4fee943e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.844017][ C0] RAX: ffffffffffffffda RBX: 00007f4fee943ef0 RCX: 00007f4fedb9076a [ 309.844114][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f4fee943eb0 [ 309.844208][ C0] RBP: 0000200000000040 R08: 00007f4fee943ef0 R09: 000000000000019f [ 309.844298][ C0] R10: 000000000000019f R11: 0000000000000246 R12: 0000200000000000 [ 309.844385][ C0] R13: 00007f4fee943eb0 R14: 000000000000054f R15: 0000200000000400 [ 309.844528][ C0] [ 309.844690][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.919750][ T5816] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 309.922335][ T5852] usb usb5-port1: unable to enumerate USB device [ 309.984080][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.489501][ T6867] loop2: detected capacity change from 0 to 256 [ 312.764690][ T6867] vfat: Bad value for 'codepage' [ 312.794355][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.808837][ T6869] loop4: detected capacity change from 0 to 256 [ 312.822184][ T6869] exfat: Unknown parameter 'iochajset' [ 313.694387][ T6873] loop1: detected capacity change from 0 to 1024 [ 314.732654][ T6872] loop4: detected capacity change from 0 to 40427 [ 314.830392][ T6872] F2FS-fs (loop4): invalid crc value [ 315.262509][ T6872] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 315.272980][ T6872] F2FS-fs (loop4): Start checkpoint disabled! [ 315.644961][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.657764][ T6873] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.722678][ T6872] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 315.762009][ T6872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 316.075532][ T4217] kworker/u8:24: attempt to access beyond end of device [ 316.075532][ T4217] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.090177][ T4217] CPU: 1 UID: 0 PID: 4217 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(none) [ 316.090321][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.090428][ T4217] Workqueue: writeback wb_workfn (flush-7:4) [ 316.090612][ T4217] Call Trace: [ 316.090662][ T4217] [ 316.090715][ T4217] __dump_stack+0x26/0x30 [ 316.090873][ T4217] dump_stack_lvl+0x1df/0x270 [ 316.091051][ T4217] dump_stack+0x1e/0x25 [ 316.091200][ T4217] f2fs_handle_critical_error+0xa6f/0xc20 [ 316.091378][ T4217] f2fs_stop_checkpoint+0x65/0x80 [ 316.091525][ T4217] f2fs_write_end_io+0x101c/0x1bc0 [ 316.091720][ T4217] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 316.091863][ T4217] bio_endio+0xeb4/0x1010 [ 316.092056][ T4217] submit_bio_noacct+0x2009/0x2930 [ 316.092269][ T4217] submit_bio+0x57c/0x630 [ 316.092428][ T4217] f2fs_submit_write_bio+0x92/0x250 [ 316.092626][ T4217] __submit_merged_bio+0x16f/0x6a0 [ 316.092817][ T4217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.092985][ T4217] __submit_merged_write_cond+0x458/0x9a0 [ 316.093207][ T4217] f2fs_write_data_pages+0x4bb2/0x5480 [ 316.093494][ T4217] ? f2fs_balance_fs_bg+0x11e7/0x1240 [ 316.093681][ T4217] ? stack_depot_save_flags+0x35/0x7b0 [ 316.093832][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.093973][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.094126][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.094275][ T4217] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 316.094477][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.094623][ T4217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.094784][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.094933][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.095084][ T4217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.095236][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.095385][ T4217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.095539][ T4217] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.095683][ T4217] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.095828][ T4217] do_writepages+0x3f2/0x860 [ 316.096003][ T4217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.096164][ T4217] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 316.096332][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.096504][ T4217] __writeback_single_inode+0x101/0x1190 [ 316.096687][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.096852][ T4217] writeback_sb_inodes+0xac1/0x1cb0 [ 316.097120][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.097317][ T4217] wb_writeback+0x4ce/0xc00 [ 316.097503][ T4217] ? queue_io+0x491/0x790 [ 316.097679][ T4217] wb_workfn+0x397/0x1910 [ 316.097826][ T4217] ? kmsan_get_metadata+0xfb/0x160 [ 316.098006][ T4217] ? __pfx_wb_workfn+0x10/0x10 [ 316.098151][ T4217] process_scheduled_works+0xb91/0x1d80 [ 316.098388][ T4217] worker_thread+0xedf/0x1590 [ 316.098600][ T4217] kthread+0xd5c/0xf00 [ 316.098718][ T4217] ? __pfx_worker_thread+0x10/0x10 [ 316.098920][ T4217] ? __pfx_kthread+0x10/0x10 [ 316.099051][ T4217] ret_from_fork+0x1f5/0x4c0 [ 316.099222][ T4217] ? __pfx_kthread+0x10/0x10 [ 316.099352][ T4217] ret_from_fork_asm+0x1a/0x30 [ 316.099554][ T4217] [ 316.402558][ T4217] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 317.079708][ T5813] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 317.553759][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.172383][ T5940] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 318.407689][ T5940] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 318.417286][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.427995][ T5940] usb 5-1: config 0 has no interface number 0 [ 318.515374][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 318.525178][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.533620][ T5940] usb 5-1: Product: syz [ 318.537970][ T5940] usb 5-1: Manufacturer: syz [ 318.543020][ T5940] usb 5-1: SerialNumber: syz [ 318.680346][ T5940] usb 5-1: config 0 descriptor?? [ 318.726198][ T5940] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 318.937538][ T5863] usb 5-1: USB disconnect, device number 8 [ 320.281878][ T5863] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 320.472614][ T5863] usb 5-1: device descriptor read/64, error -71 [ 320.552840][ T6912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.558965][ T6912] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 320.584541][ T6912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.590805][ T6912] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 320.636405][ T6912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.642804][ T6912] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 320.751676][ T5863] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 320.791648][ T6912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.797758][ T6912] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 320.886869][ T6912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 320.893340][ T6912] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 320.961762][ T5863] usb 5-1: device descriptor read/64, error -71 [ 321.075705][ T5863] usb usb5-port1: attempt power cycle [ 321.491820][ T5863] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 321.589459][ T5863] usb 5-1: device descriptor read/8, error -71 [ 321.894472][ T5863] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 322.007836][ T5863] usb 5-1: device descriptor read/8, error -71 [ 322.089430][ T6924] loop3: detected capacity change from 0 to 32768 [ 322.162429][ T5863] usb usb5-port1: unable to enumerate USB device [ 322.287120][ T6924] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 322.387755][ T30] audit: type=1800 audit(1761358003.007:21): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.286" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 322.468072][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 322.740728][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'. [ 322.864001][ T5816] ocfs2: Unmounting device (7,3) on (node local) [ 323.271514][ T6940] loop3: detected capacity change from 0 to 512 [ 323.358550][ T6940] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.436739][ T6940] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.288: inode has both inline data and extents flags [ 323.500778][ T6940] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.288: couldn't read orphan inode 15 (err -117) [ 323.601719][ T6940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.053066][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 324.316785][ T5852] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 324.326342][ T5852] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 324.339763][ T5852] usb 4-1: config 0 has no interface number 1 [ 324.346304][ T5852] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.359881][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 324.661719][ T5852] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 324.671453][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.679671][ T5852] usb 4-1: Product: syz [ 324.684255][ T5852] usb 4-1: Manufacturer: syz [ 324.689036][ T5852] usb 4-1: SerialNumber: syz [ 324.822882][ T5852] usb 4-1: config 0 descriptor?? [ 324.891579][ T5852] usb-storage 4-1:0.127: USB Mass Storage device detected [ 324.982014][ T5852] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 325.049425][ T5852] usb-storage 4-1:0.0: USB Mass Storage device detected [ 325.098023][ T5852] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 325.196806][ T5852] usb 4-1: USB disconnect, device number 5 [ 325.870899][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.049826][ T6984] PKCS8: Unsupported PKCS#8 version [ 327.081079][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'. [ 327.581543][ T5940] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.771610][ T5940] usb 1-1: device descriptor read/64, error -71 [ 327.789555][ T6999] loop1: detected capacity change from 0 to 256 [ 328.018434][ T6999] FAT-fs (loop1): Directory bread(block 64) failed [ 328.025514][ T6999] FAT-fs (loop1): Directory bread(block 65) failed [ 328.030327][ T5940] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 328.032643][ T6999] FAT-fs (loop1): Directory bread(block 66) failed [ 328.047048][ T6999] FAT-fs (loop1): Directory bread(block 67) failed [ 328.054071][ T6999] FAT-fs (loop1): Directory bread(block 68) failed [ 328.060779][ T6999] FAT-fs (loop1): Directory bread(block 69) failed [ 328.067779][ T6999] FAT-fs (loop1): Directory bread(block 70) failed [ 328.074785][ T6999] FAT-fs (loop1): Directory bread(block 71) failed [ 328.081896][ T6999] FAT-fs (loop1): Directory bread(block 72) failed [ 328.088780][ T6999] FAT-fs (loop1): Directory bread(block 73) failed [ 328.250170][ T5940] usb 1-1: device descriptor read/64, error -71 [ 328.368162][ T5940] usb usb1-port1: attempt power cycle [ 328.753328][ T5940] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.819259][ T5940] usb 1-1: device descriptor read/8, error -71 [ 329.082782][ T5940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 329.149785][ T5940] usb 1-1: device descriptor read/8, error -71 [ 329.276213][ T5940] usb usb1-port1: unable to enumerate USB device [ 331.205997][ T7023] loop4: detected capacity change from 0 to 1024 [ 331.432830][ T7027] program syz.0.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.651477][ T7025] loop2: detected capacity change from 0 to 32768 [ 331.675407][ T7025] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.306 (7025) [ 331.688690][ T7025] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 331.688948][ T7025] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 331.742116][ T35] hfsplus: b-tree write err: -5, ino 4 [ 331.959282][ T7025] BTRFS info (device loop2): rebuilding free space tree [ 331.979938][ T7025] BTRFS info (device loop2): enabling ssd optimizations [ 331.980058][ T7025] BTRFS info (device loop2): turning on async discard [ 331.980155][ T7025] BTRFS info (device loop2): enabling free space tree [ 331.980257][ T7025] BTRFS info (device loop2): force clearing of disk cache [ 332.419172][ T7052] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.473171][ T5805] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 334.304110][ T7072] loop4: detected capacity change from 0 to 2048 [ 334.702459][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.928220][ T30] audit: type=1800 audit(1761358015.507:22): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.314" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 334.958638][ T7072] overlayfs: missing 'lowerdir' [ 335.060258][ T7077] loop1: detected capacity change from 0 to 32768 [ 335.060474][ T7074] loop0: detected capacity change from 0 to 2048 [ 335.117842][ T7072] devtmpfs: Too few inodes for current use [ 335.143583][ T7077] (syz.1.316,7077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.158110][ T7077] (syz.1.316,7077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.427305][ T7077] JBD2: Ignoring recovery information on journal [ 335.562352][ T7077] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 335.719922][ T7074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.022550][ T5800] ocfs2: Unmounting device (7,1) on (node local) [ 336.702357][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 336.921724][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 336.978877][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.029789][ T5852] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 337.040963][ T5852] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 337.051694][ T5852] usb 2-1: config 13 has no interface number 0 [ 337.058078][ T5852] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 337.068607][ T5852] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.082393][ T5852] usb 2-1: config 13 interface 50 has no altsetting 0 [ 337.104705][ T4328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.178143][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.232415][ T7093] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 337.273539][ T5852] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 337.283456][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.291868][ T5852] usb 2-1: Product: syz [ 337.296258][ T5852] usb 2-1: Manufacturer: syz [ 337.301034][ T5852] usb 2-1: SerialNumber: syz [ 337.370236][ T4328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.475769][ T7095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 337.632582][ T4328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.069694][ T4328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.482080][ T5852] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.489282][ T5852] usb 2-1: MIDIStreaming interface descriptor not found [ 338.544845][ T5852] usb 2-1: USB disconnect, device number 7 [ 338.554656][ T4328] bridge_slave_1: left allmulticast mode [ 338.560501][ T4328] bridge_slave_1: left promiscuous mode [ 338.567470][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.659306][ T4328] bridge_slave_0: left allmulticast mode [ 338.665487][ T4328] bridge_slave_0: left promiscuous mode [ 338.672373][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.014162][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.738906][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.768505][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.814486][ T4328] bond0 (unregistering): Released all slaves [ 339.993138][ T4328] tipc: Disabling bearer [ 339.999088][ T4328] tipc: Left network mode [ 340.331833][ T4328] hsr_slave_0: left promiscuous mode [ 340.345319][ T4328] hsr_slave_1: left promiscuous mode [ 340.353731][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.362218][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.387090][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.395042][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.465445][ T4328] veth1_macvtap: left promiscuous mode [ 340.471465][ T4328] veth0_macvtap: left promiscuous mode [ 340.477341][ T4328] veth1_vlan: left promiscuous mode [ 340.483967][ T4328] veth0_vlan: left promiscuous mode [ 341.160809][ T7125] loop0: detected capacity change from 0 to 1024 [ 341.575438][ T7123] FAULT_INJECTION: forcing a failure. [ 341.575438][ T7123] name fail_futex, interval 1, probability 0, space 0, times 1 [ 341.589078][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(none) [ 341.589221][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.589309][ T7123] Call Trace: [ 341.589357][ T7123] [ 341.589410][ T7123] __dump_stack+0x26/0x30 [ 341.589577][ T7123] dump_stack_lvl+0x1df/0x270 [ 341.589747][ T7123] dump_stack+0x1e/0x25 [ 341.589901][ T7123] should_fail_ex+0x7dc/0x8a0 [ 341.590070][ T7123] should_fail+0x2a/0x40 [ 341.590203][ T7123] get_futex_key+0x20c/0x1f00 [ 341.590364][ T7123] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 341.590571][ T7123] ? kmsan_get_metadata+0xfb/0x160 [ 341.590716][ T7123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.590885][ T7123] futex_wake+0xfb/0x930 [ 341.591073][ T7123] ? kmsan_get_metadata+0xfb/0x160 [ 341.591234][ T7123] do_futex+0x416/0x480 [ 341.591406][ T7123] mm_release+0x1a6/0x3e0 [ 341.591553][ T7123] exit_mm_release+0x2e/0x40 [ 341.591682][ T7123] exit_mm+0x5d/0x340 [ 341.591817][ T7123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.591980][ T7123] do_exit+0x92c/0x3d50 [ 341.592120][ T7123] ? filter_irq_stacks+0x49/0x190 [ 341.592341][ T7123] do_group_exit+0x259/0x390 [ 341.592491][ T7123] ? kmsan_get_metadata+0xfb/0x160 [ 341.592647][ T7123] get_signal+0x23be/0x2a20 [ 341.592835][ T7123] ? __sys_recvfrom+0x3f7/0x550 [ 341.593001][ T7123] ? kmsan_get_metadata+0xfb/0x160 [ 341.593179][ T7123] arch_do_signal_or_restart+0x53/0xb90 [ 341.593370][ T7123] ? __x64_sys_recvfrom+0x130/0x200 [ 341.593552][ T7123] exit_to_user_mode_loop+0xe7/0x370 [ 341.593710][ T7123] do_syscall_64+0x1e3/0xfa0 [ 341.593879][ T7123] ? irqentry_exit+0x16/0x60 [ 341.594024][ T7123] ? clear_bhb_loop+0x40/0x90 [ 341.594170][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.594316][ T7123] RIP: 0033:0x7f4fedb8efc9 [ 341.594419][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.594546][ T7123] RSP: 002b:00007f4febdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 341.594676][ T7123] RAX: fffffffffffffe00 RBX: 00007f4fedde6180 RCX: 00007f4fedb8efc9 [ 341.594772][ T7123] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 341.594870][ T7123] RBP: 00007f4febdd5090 R08: 0000000000000000 R09: fffffffffffffd25 [ 341.594963][ T7123] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 341.595049][ T7123] R13: 00007f4fedde6218 R14: 00007f4fedde6180 R15: 00007ffda9ff2178 [ 341.595186][ T7123] [ 341.902106][ T7130] loop2: detected capacity change from 0 to 2048 [ 342.055881][ T7125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.251894][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.265699][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.288755][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.336666][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.365260][ T7140] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.395673][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.473499][ T7130] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 342.539971][ T7130] Remounting filesystem read-only [ 342.545917][ T7130] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 342.694759][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.713675][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.723727][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.737541][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.749545][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.755100][ T7130] usb usb5: usbfs: process 7130 (syz.2.326) did not claim interface 0 before use [ 342.814913][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 342.846077][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 343.175196][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.560508][ T5805] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 344.841522][ T5813] Bluetooth: hci1: command tx timeout [ 345.372327][ T7133] chnl_net:caif_netlink_parms(): no params data found [ 345.468366][ T7168] loop2: detected capacity change from 0 to 4096 [ 345.508440][ T7168] ntfs3: Unknown parameter '' [ 346.015154][ T5940] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 346.202509][ T5940] usb 3-1: device descriptor read/64, error -71 [ 346.476432][ T5940] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 346.612291][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.619822][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.627898][ T7133] bridge_slave_0: entered allmulticast mode [ 346.637553][ T7133] bridge_slave_0: entered promiscuous mode [ 346.656033][ T5940] usb 3-1: device descriptor read/64, error -71 [ 346.680584][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.688692][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.696616][ T7133] bridge_slave_1: entered allmulticast mode [ 346.706399][ T7133] bridge_slave_1: entered promiscuous mode [ 346.781634][ T5940] usb usb3-port1: attempt power cycle [ 346.923916][ T5813] Bluetooth: hci1: command tx timeout [ 346.974122][ T7133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.043148][ T7133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.132866][ T5863] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 347.175372][ T5940] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 347.265857][ T5940] usb 3-1: device descriptor read/8, error -71 [ 347.310938][ T7133] team0: Port device team_slave_0 added [ 347.343461][ T5863] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 347.352216][ T5863] usb 2-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 347.362909][ T5863] usb 2-1: config 0 has no interface number 0 [ 347.384642][ T7133] team0: Port device team_slave_1 added [ 347.429429][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.436435][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.494889][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 347.505272][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.511739][ T5940] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 347.513598][ T5863] usb 2-1: Product: syz [ 347.525377][ T5863] usb 2-1: Manufacturer: syz [ 347.530173][ T5863] usb 2-1: SerialNumber: syz [ 347.574346][ T5940] usb 3-1: device descriptor read/8, error -71 [ 347.599017][ T5863] usb 2-1: config 0 descriptor?? [ 347.621498][ T5863] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 347.665894][ T7133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.673131][ T7133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.682538][ T5940] usb usb3-port1: unable to enumerate USB device [ 347.699679][ T7133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.819762][ T5863] usb 2-1: USB disconnect, device number 8 [ 347.832488][ T7133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.839833][ T7133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.866446][ T7133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.143027][ T7133] hsr_slave_0: entered promiscuous mode [ 348.153496][ T7133] hsr_slave_1: entered promiscuous mode [ 348.807673][ T7191] loop1: detected capacity change from 0 to 64 [ 348.820829][ T7191] MINIX-fs: mounting file system with errors, running fsck is recommended [ 349.017493][ T5813] Bluetooth: hci1: command tx timeout [ 349.757125][ T7193] loop0: detected capacity change from 0 to 32768 [ 349.841879][ T7193] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.342 (7193) [ 349.865614][ T7193] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 349.876354][ T7193] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 350.296070][ T7133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.378338][ T7133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.411081][ T7193] BTRFS info (device loop0): enabling ssd optimizations [ 350.418624][ T7193] BTRFS info (device loop0): turning on async discard [ 350.426053][ T7193] BTRFS info (device loop0): enabling free space tree [ 350.545407][ T7133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.546178][ T7193] BTRFS info (device loop0): balance: start -susage=34359738372,limit=3330..0 [ 350.562406][ T7193] BTRFS info (device loop0): balance: ended with status: 0 [ 350.650020][ T7133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.916349][ T5803] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 351.082978][ T5813] Bluetooth: hci1: command tx timeout [ 351.562979][ T42] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 351.751928][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 351.793745][ T42] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 351.802639][ T42] usb 4-1: config 0 has no interface number 0 [ 351.865481][ T42] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 351.875183][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.880315][ T7133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.883700][ T42] usb 4-1: Product: syz [ 351.883806][ T42] usb 4-1: Manufacturer: syz [ 351.883904][ T42] usb 4-1: SerialNumber: syz [ 351.944564][ T42] usb 4-1: config 0 descriptor?? [ 352.153917][ T7133] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.202494][ T42] cx82310_eth 4-1:0.36: probe with driver cx82310_eth failed with error -71 [ 352.246589][ T5859] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 352.266415][ T42] cxacru 4-1:0.36: usbatm_usb_probe: bind failed: -19! [ 352.268032][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.280930][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.381596][ T42] usb 4-1: USB disconnect, device number 6 [ 352.419476][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.427123][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.518941][ T7227] loop2: detected capacity change from 0 to 1024 [ 352.558062][ T5859] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 352.568668][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.678900][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.690537][ T5859] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.701387][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.709878][ T5859] usb 1-1: Product: syz [ 352.715315][ T5859] usb 1-1: Manufacturer: syz [ 352.720113][ T5859] usb 1-1: SerialNumber: syz [ 352.753508][ T7133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.893055][ T5859] usb 1-1: config 0 descriptor?? [ 352.896481][ T7227] comedi comedi0: comedi_config --init_data is deprecated [ 353.011728][ T5859] usb 1-1: selecting invalid altsetting 0 [ 353.243461][ T7223] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 353.315611][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.327162][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.424590][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.812849][ T5940] usb 1-1: USB disconnect, device number 12 [ 354.006421][ T7246] loop2: detected capacity change from 0 to 16 [ 354.072048][ T7246] erofs (device loop2): mounted with root inode @ nid 36. [ 354.153764][ T7246] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 354.162396][ T7246] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 354.170859][ T7246] syz.2.353: attempt to access beyond end of device [ 354.170859][ T7246] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 354.185519][ T7246] syz.2.353: attempt to access beyond end of device [ 354.185519][ T7246] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 354.199563][ T7246] syz.2.353: attempt to access beyond end of device [ 354.199563][ T7246] loop2: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 354.386028][ T7249] 8021q: VLANs not supported on ip6_vti0 [ 354.451689][ T7246] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36 [ 354.562680][ T7256] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 354.915769][ T7133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.164238][ T7261] loop3: detected capacity change from 0 to 512 [ 355.363346][ T7264] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 355.371668][ T7264] batadv0: entered allmulticast mode [ 355.398239][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.414481][ T7264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 355.549765][ T7261] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 355.952124][ T5940] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 356.161589][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 356.230961][ T5940] usb 1-1: config index 0 descriptor too short (expected 100, got 36) [ 356.240071][ T5940] usb 1-1: config 1 has an invalid interface number: 69 but max is 0 [ 356.248779][ T5940] usb 1-1: config 1 has no interface number 0 [ 356.255331][ T5940] usb 1-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 356.265639][ T5940] usb 1-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.275973][ T5940] usb 1-1: config 1 interface 69 has no altsetting 0 [ 356.406858][ T7275] FAULT_INJECTION: forcing a failure. [ 356.406858][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 356.420271][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.2.361 Not tainted syzkaller #0 PREEMPT(none) [ 356.420421][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.420506][ T7275] Call Trace: [ 356.420555][ T7275] [ 356.420604][ T7275] __dump_stack+0x26/0x30 [ 356.420773][ T7275] dump_stack_lvl+0x1df/0x270 [ 356.420945][ T7275] dump_stack+0x1e/0x25 [ 356.421097][ T7275] should_fail_ex+0x7dc/0x8a0 [ 356.421271][ T7275] should_failslab+0x15b/0x200 [ 356.421435][ T7275] __kmalloc_noprof+0x18d/0x1b40 [ 356.421591][ T7275] ? tomoyo_encode+0x626/0xa10 [ 356.421739][ T7275] ? prepend_path+0xff2/0x10c0 [ 356.421887][ T7275] ? kmsan_get_metadata+0xfb/0x160 [ 356.422039][ T7275] ? kmsan_get_metadata+0xfb/0x160 [ 356.422188][ T7275] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.422355][ T7275] tomoyo_encode+0x626/0xa10 [ 356.422547][ T7275] tomoyo_realpath_from_path+0x92e/0x9f0 [ 356.422751][ T7275] tomoyo_path_number_perm+0x1d0/0x7d0 [ 356.422955][ T7275] ? stack_depot_save_flags+0x35/0x7b0 [ 356.423131][ T7275] ? kmsan_get_metadata+0xfb/0x160 [ 356.423280][ T7275] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.423489][ T7275] tomoyo_file_ioctl+0x3d/0x50 [ 356.423659][ T7275] security_file_ioctl+0x141/0x590 [ 356.423851][ T7275] __se_sys_ioctl+0xbb/0x400 [ 356.424033][ T7275] __x64_sys_ioctl+0x97/0xe0 [ 356.424207][ T7275] x64_sys_call+0x1cbc/0x3e30 [ 356.424388][ T7275] do_syscall_64+0xd9/0xfa0 [ 356.424550][ T7275] ? irqentry_exit+0x16/0x60 [ 356.424699][ T7275] ? clear_bhb_loop+0x40/0x90 [ 356.424851][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.424999][ T7275] RIP: 0033:0x7f75e398efc9 [ 356.425100][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.425226][ T7275] RSP: 002b:00007f75e47d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.425358][ T7275] RAX: ffffffffffffffda RBX: 00007f75e3be5fa0 RCX: 00007f75e398efc9 [ 356.425465][ T7275] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 356.425549][ T7275] RBP: 00007f75e47d6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.425637][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.425720][ T7275] R13: 00007f75e3be6038 R14: 00007f75e3be5fa0 R15: 00007ffc8039b508 [ 356.425858][ T7275] [ 356.660694][ T7275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.964463][ T5940] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 356.974104][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.982576][ T5940] usb 1-1: Product: syz [ 356.986921][ T5940] usb 1-1: Manufacturer: syz [ 356.992143][ T5940] usb 1-1: SerialNumber: syz [ 357.079059][ T7270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.101362][ T7270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.116763][ T5940] ipaq 1-1:1.69: PocketPC PDA converter detected [ 357.684838][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.699341][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.279109][ T5940] ipaq 1-1:1.69: probe with driver ipaq failed with error -71 [ 358.332291][ T5940] usb 1-1: USB disconnect, device number 13 [ 359.044981][ T7292] netlink: 80 bytes leftover after parsing attributes in process `syz.0.366'. [ 359.066406][ T7292] netlink: 80 bytes leftover after parsing attributes in process `syz.0.366'. [ 359.396885][ T7287] loop2: detected capacity change from 0 to 40427 [ 359.426278][ T7287] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 359.433434][ T7287] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 359.459273][ T7133] veth0_vlan: entered promiscuous mode [ 359.496320][ T7133] veth1_vlan: entered promiscuous mode [ 359.816768][ T7287] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 359.866665][ T7287] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 359.874266][ T7287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 359.911060][ T7133] veth0_macvtap: entered promiscuous mode [ 359.945213][ T7133] veth1_macvtap: entered promiscuous mode [ 360.097221][ T7302] syz.2.364: attempt to access beyond end of device [ 360.097221][ T7302] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 360.176734][ T7133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.289393][ T7133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.416168][ T5086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.472083][ T5086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.574108][ T3566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.656248][ T3566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.340105][ T7307] FAULT_INJECTION: forcing a failure. [ 361.340105][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.354081][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(none) [ 361.354227][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.354315][ T7307] Call Trace: [ 361.354369][ T7307] [ 361.354418][ T7307] __dump_stack+0x26/0x30 [ 361.354579][ T7307] dump_stack_lvl+0x1df/0x270 [ 361.354756][ T7307] dump_stack+0x1e/0x25 [ 361.354902][ T7307] should_fail_ex+0x7dc/0x8a0 [ 361.355083][ T7307] should_fail+0x2a/0x40 [ 361.355223][ T7307] should_fail_usercopy+0x2e/0x40 [ 361.355388][ T7307] _copy_to_user+0x35/0x120 [ 361.355547][ T7307] simple_read_from_buffer+0x1b2/0x340 [ 361.355761][ T7307] proc_fail_nth_read+0x1e0/0x2d0 [ 361.355949][ T7307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.356126][ T7307] vfs_read+0x27c/0xf90 [ 361.356302][ T7307] ? stack_depot_save_flags+0x35/0x7b0 [ 361.356456][ T7307] ? kmsan_get_metadata+0xfb/0x160 [ 361.356608][ T7307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 361.356828][ T7307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.356993][ T7307] __x64_sys_read+0x1fb/0x4d0 [ 361.357141][ T7307] x64_sys_call+0x2f9c/0x3e30 [ 361.357315][ T7307] do_syscall_64+0xd9/0xfa0 [ 361.357478][ T7307] ? irqentry_exit+0x16/0x60 [ 361.357629][ T7307] ? clear_bhb_loop+0x40/0x90 [ 361.357786][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.357938][ T7307] RIP: 0033:0x7f4fedb8d9dc [ 361.358042][ T7307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 361.358166][ T7307] RSP: 002b:00007f4fee944030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.358298][ T7307] RAX: ffffffffffffffda RBX: 00007f4fedde5fa0 RCX: 00007f4fedb8d9dc [ 361.358399][ T7307] RDX: 000000000000000f RSI: 00007f4fee9440a0 RDI: 0000000000000006 [ 361.358487][ T7307] RBP: 00007f4fee944090 R08: 0000000000000000 R09: 0000000000000000 [ 361.358575][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.358658][ T7307] R13: 00007f4fedde6038 R14: 00007f4fedde5fa0 R15: 00007ffda9ff2178 [ 361.358800][ T7307] [ 361.589617][ T7301] loop0: detected capacity change from 0 to 65536 [ 361.744909][ T7301] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 362.012014][ T7301] XFS (loop0): Ending clean mount [ 362.023760][ T5805] syz-executor: attempt to access beyond end of device [ 362.023760][ T5805] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 362.038395][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 362.038530][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.038611][ T5805] Call Trace: [ 362.038659][ T5805] [ 362.038710][ T5805] __dump_stack+0x26/0x30 [ 362.038879][ T5805] dump_stack_lvl+0x1df/0x270 [ 362.039043][ T5805] dump_stack+0x1e/0x25 [ 362.039188][ T5805] f2fs_handle_critical_error+0xa6f/0xc20 [ 362.039363][ T5805] f2fs_stop_checkpoint+0x65/0x80 [ 362.039533][ T5805] f2fs_write_end_io+0x101c/0x1bc0 [ 362.039711][ T5805] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 362.039872][ T5805] bio_endio+0xeb4/0x1010 [ 362.040024][ T5805] submit_bio_noacct+0x2009/0x2930 [ 362.040232][ T5805] submit_bio+0x57c/0x630 [ 362.040397][ T5805] f2fs_submit_write_bio+0x92/0x250 [ 362.040595][ T5805] __submit_merged_bio+0x16f/0x6a0 [ 362.040781][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.040967][ T5805] __submit_merged_write_cond+0x458/0x9a0 [ 362.041215][ T5805] f2fs_write_data_pages+0x4bb2/0x5480 [ 362.041489][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.041638][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.041793][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.041939][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.042079][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.042219][ T5805] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 362.042413][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.042560][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.042735][ T5805] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 362.042942][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 362.043090][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.043259][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 362.043401][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 362.043546][ T5805] do_writepages+0x3f2/0x860 [ 362.043722][ T5805] ? _raw_spin_unlock+0x30/0x50 [ 362.043875][ T5805] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 362.044059][ T5805] filemap_fdatawrite+0x207/0x260 [ 362.044348][ T5805] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 362.044545][ T5805] f2fs_write_checkpoint+0x10a4/0x3730 [ 362.044846][ T5805] kill_f2fs_super+0x31b/0x990 [ 362.045053][ T5805] ? __pfx_kill_f2fs_super+0x10/0x10 [ 362.045210][ T5805] deactivate_locked_super+0xcb/0x3c0 [ 362.045413][ T5805] deactivate_super+0x12f/0x140 [ 362.045588][ T5805] cleanup_mnt+0x6fb/0x780 [ 362.045728][ T5805] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 362.045952][ T5805] ? __pfx___cleanup_mnt+0x10/0x10 [ 362.046101][ T5805] __cleanup_mnt+0x22/0x30 [ 362.046241][ T5805] task_work_run+0x209/0x2b0 [ 362.046399][ T5805] exit_to_user_mode_loop+0x2d1/0x370 [ 362.046561][ T5805] do_syscall_64+0x1e3/0xfa0 [ 362.046724][ T5805] ? irqentry_exit+0x16/0x60 [ 362.046886][ T5805] ? clear_bhb_loop+0x40/0x90 [ 362.047036][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.047183][ T5805] RIP: 0033:0x7f75e39902f7 [ 362.047285][ T5805] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 362.047409][ T5805] RSP: 002b:00007ffc8039a798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 362.047545][ T5805] RAX: 0000000000000000 RBX: 00007f75e3a11d7d RCX: 00007f75e39902f7 [ 362.047638][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8039a850 [ 362.047724][ T5805] RBP: 00007ffc8039a850 R08: 0000000000000000 R09: 0000000000000000 [ 362.047811][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8039b8e0 [ 362.047909][ T5805] R13: 00007f75e3a11d7d R14: 0000000000057f5c R15: 00007ffc8039b920 [ 362.048042][ T5805] [ 362.405984][ T5805] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 362.508787][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.886147][ T5803] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 363.025323][ T7322] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 363.797798][ T7332] loop1: detected capacity change from 0 to 512 [ 363.844466][ T7332] EXT4-fs: Conflicting test_dummy_encryption options [ 363.903135][ T7332] overlayfs: failed to resolve './bus': -2 [ 363.946451][ T7332] overlayfs: failed to resolve '/¬þr': -2 [ 364.045324][ T7334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.377'. [ 364.361754][ T5863] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 364.523833][ T5863] usb 4-1: device descriptor read/64, error -71 [ 364.781657][ T5863] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 365.236185][ T30] audit: type=1326 audit(1761358045.797:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.259292][ T30] audit: type=1326 audit(1761358045.797:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.282124][ T30] audit: type=1326 audit(1761358045.797:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.304720][ T30] audit: type=1326 audit(1761358045.817:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.328745][ T30] audit: type=1326 audit(1761358045.827:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.353526][ T30] audit: type=1326 audit(1761358045.827:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.376240][ T30] audit: type=1326 audit(1761358045.837:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.398909][ T30] audit: type=1326 audit(1761358045.837:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.422276][ T30] audit: type=1326 audit(1761358045.837:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.445674][ T30] audit: type=1326 audit(1761358045.837:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e398efc9 code=0x7ffc0000 [ 365.824648][ T7343] loop1: detected capacity change from 0 to 40427 [ 365.837001][ T5863] usb 4-1: device descriptor read/64, error -71 [ 365.890083][ T7343] F2FS-fs (loop1): invalid crc value [ 366.189670][ T5863] usb usb4-port1: attempt power cycle [ 366.200920][ T7343] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.219677][ T7343] F2FS-fs (loop1): Start checkpoint disabled! [ 366.245208][ T7343] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 366.272290][ T7343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 366.439043][ T4457] kworker/u8:27: attempt to access beyond end of device [ 366.439043][ T4457] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 366.455524][ T4457] CPU: 1 UID: 0 PID: 4457 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(none) [ 366.455668][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.455775][ T4457] Workqueue: writeback wb_workfn (flush-7:1) [ 366.455958][ T4457] Call Trace: [ 366.456006][ T4457] [ 366.456052][ T4457] __dump_stack+0x26/0x30 [ 366.456221][ T4457] dump_stack_lvl+0x1df/0x270 [ 366.456387][ T4457] dump_stack+0x1e/0x25 [ 366.456530][ T4457] f2fs_handle_critical_error+0xa6f/0xc20 [ 366.456711][ T4457] f2fs_stop_checkpoint+0x65/0x80 [ 366.456862][ T4457] f2fs_write_end_io+0x101c/0x1bc0 [ 366.457056][ T4457] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 366.457202][ T4457] bio_endio+0xeb4/0x1010 [ 366.457358][ T4457] submit_bio_noacct+0x2009/0x2930 [ 366.457565][ T4457] submit_bio+0x57c/0x630 [ 366.457727][ T4457] f2fs_submit_write_bio+0x92/0x250 [ 366.457919][ T4457] __submit_merged_bio+0x16f/0x6a0 [ 366.458109][ T4457] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.458283][ T4457] __submit_merged_write_cond+0x458/0x9a0 [ 366.458498][ T4457] f2fs_write_data_pages+0x4bb2/0x5480 [ 366.458796][ T4457] ? f2fs_balance_fs_bg+0x11e7/0x1240 [ 366.458981][ T4457] ? stack_depot_save_flags+0x35/0x7b0 [ 366.459160][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.459309][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.459457][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.459597][ T4457] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 366.459798][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.459943][ T4457] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.460112][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.460262][ T4457] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.460429][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.460577][ T4457] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.460731][ T4457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 366.460876][ T4457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 366.461018][ T4457] do_writepages+0x3f2/0x860 [ 366.461193][ T4457] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.461351][ T4457] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 366.461518][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.461692][ T4457] __writeback_single_inode+0x101/0x1190 [ 366.461876][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.462033][ T4457] writeback_sb_inodes+0xac1/0x1cb0 [ 366.462358][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.462547][ T4457] wb_writeback+0x4ce/0xc00 [ 366.462731][ T4457] ? queue_io+0x491/0x790 [ 366.462902][ T4457] wb_workfn+0x397/0x1910 [ 366.463051][ T4457] ? kmsan_get_metadata+0xfb/0x160 [ 366.463228][ T4457] ? __pfx_wb_workfn+0x10/0x10 [ 366.463370][ T4457] process_scheduled_works+0xb91/0x1d80 [ 366.463604][ T4457] worker_thread+0xedf/0x1590 [ 366.463812][ T4457] kthread+0xd5c/0xf00 [ 366.463932][ T4457] ? __pfx_worker_thread+0x10/0x10 [ 366.464129][ T4457] ? __pfx_kthread+0x10/0x10 [ 366.464257][ T4457] ret_from_fork+0x1f5/0x4c0 [ 366.464425][ T4457] ? __pfx_kthread+0x10/0x10 [ 366.464552][ T4457] ret_from_fork_asm+0x1a/0x30 [ 366.464759][ T4457] [ 366.770708][ T4457] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 366.790701][ T7353] fuse: Bad value for 'user_id' [ 366.795963][ T7353] fuse: Bad value for 'user_id' [ 367.111532][ T5863] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 367.201885][ T7357] loop0: detected capacity change from 0 to 256 [ 367.393793][ T7357] FAULT_INJECTION: forcing a failure. [ 367.393793][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.407856][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT(none) [ 367.408000][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.408081][ T7357] Call Trace: [ 367.408133][ T7357] [ 367.408182][ T7357] __dump_stack+0x26/0x30 [ 367.408352][ T7357] dump_stack_lvl+0x1df/0x270 [ 367.408523][ T7357] dump_stack+0x1e/0x25 [ 367.408669][ T7357] should_fail_ex+0x7dc/0x8a0 [ 367.408848][ T7357] should_fail+0x2a/0x40 [ 367.408988][ T7357] should_fail_usercopy+0x2e/0x40 [ 367.409160][ T7357] strncpy_from_user+0x38/0x470 [ 367.409299][ T7357] ? kmsan_get_metadata+0xfb/0x160 [ 367.409461][ T7357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 367.409628][ T7357] getname_flags+0x179/0xac0 [ 367.409796][ T7357] __x64_sys_renameat2+0xfb/0x210 [ 367.409961][ T7357] x64_sys_call+0x4ac/0x3e30 [ 367.410131][ T7357] do_syscall_64+0xd9/0xfa0 [ 367.410295][ T7357] ? irqentry_exit+0x16/0x60 [ 367.410449][ T7357] ? clear_bhb_loop+0x40/0x90 [ 367.410597][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.410744][ T7357] RIP: 0033:0x7f3bd738efc9 [ 367.410847][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.410972][ T7357] RSP: 002b:00007f3bd8258038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 367.411103][ T7357] RAX: ffffffffffffffda RBX: 00007f3bd75e5fa0 RCX: 00007f3bd738efc9 [ 367.411200][ T7357] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 367.411301][ T7357] RBP: 00007f3bd8258090 R08: 0000000000000000 R09: 0000000000000000 [ 367.411394][ T7357] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.411483][ T7357] R13: 00007f3bd75e6038 R14: 00007f3bd75e5fa0 R15: 00007ffdd3f830a8 [ 367.411620][ T7357] [ 367.598053][ T5863] usb 4-1: device descriptor read/8, error -71 [ 368.161505][ T7363] FAULT_INJECTION: forcing a failure. [ 368.161505][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.184217][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(none) [ 368.184370][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.184458][ T7363] Call Trace: [ 368.184508][ T7363] [ 368.184557][ T7363] __dump_stack+0x26/0x30 [ 368.184722][ T7363] dump_stack_lvl+0x1df/0x270 [ 368.184887][ T7363] dump_stack+0x1e/0x25 [ 368.185033][ T7363] should_fail_ex+0x7dc/0x8a0 [ 368.185212][ T7363] should_fail+0x2a/0x40 [ 368.185361][ T7363] should_fail_usercopy+0x2e/0x40 [ 368.185526][ T7363] _copy_from_user+0x33/0x100 [ 368.185689][ T7363] do_ipv6_setsockopt+0x291/0x4b90 [ 368.185860][ T7363] ? aa_label_sk_perm+0x770/0x830 [ 368.185994][ T7363] ? _parse_integer_limit+0x3dc/0x440 [ 368.186193][ T7363] ? kmsan_get_metadata+0xfb/0x160 [ 368.186350][ T7363] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 368.186557][ T7363] ipv6_setsockopt+0xe7/0x300 [ 368.186740][ T7363] udpv6_setsockopt+0x126/0x140 [ 368.186890][ T7363] ? __pfx_udpv6_setsockopt+0x10/0x10 [ 368.187031][ T7363] sock_common_setsockopt+0xf5/0x140 [ 368.187194][ T7363] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 368.187351][ T7363] __sys_setsockopt+0x43e/0x580 [ 368.187547][ T7363] __x64_sys_setsockopt+0xf4/0x1a0 [ 368.187739][ T7363] x64_sys_call+0x27c9/0x3e30 [ 368.187908][ T7363] do_syscall_64+0xd9/0xfa0 [ 368.188071][ T7363] ? irqentry_exit+0x16/0x60 [ 368.188213][ T7363] ? clear_bhb_loop+0x40/0x90 [ 368.188361][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.188502][ T7363] RIP: 0033:0x7f0bb538efc9 [ 368.188601][ T7363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.188719][ T7363] RSP: 002b:00007f0bb619a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 368.188842][ T7363] RAX: ffffffffffffffda RBX: 00007f0bb55e5fa0 RCX: 00007f0bb538efc9 [ 368.188942][ T7363] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 368.189025][ T7363] RBP: 00007f0bb619a090 R08: 0000000000000690 R09: 0000000000000000 [ 368.189108][ T7363] R10: 0000200000001280 R11: 0000000000000246 R12: 0000000000000001 [ 368.189193][ T7363] R13: 00007f0bb55e6038 R14: 00007f0bb55e5fa0 R15: 00007ffd091c31d8 [ 368.189328][ T7363] [ 368.517165][ T7365] loop2: detected capacity change from 0 to 1024 [ 368.563201][ T7365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.861583][ T7365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 368.870281][ T7365] System zones: 0-1, 3-36 [ 369.005641][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.422696][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.384348][ T7391] fuse: Bad value for 'user_id' [ 370.389406][ T7391] fuse: Bad value for 'user_id' [ 370.430981][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.439265][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.735046][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.744117][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.392036][ T7406] loop2: detected capacity change from 0 to 47 [ 371.734099][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 371.913855][ T5940] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 372.004389][ T7411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.024533][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 372.034290][ T7413] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 372.129863][ T5940] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 372.139565][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.148038][ T5940] usb 4-1: Product: syz [ 372.152690][ T5940] usb 4-1: Manufacturer: syz [ 372.157503][ T5940] usb 4-1: SerialNumber: syz [ 372.172997][ T5940] usb 4-1: config 0 descriptor?? [ 372.199497][ T5940] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 372.235351][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.259045][ T5940] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 372.268996][ T5940] usb 4-1: media controller created [ 372.385872][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.418485][ T7400] loop3: detected capacity change from 0 to 16 [ 372.466651][ T7400] erofs (device loop3): mounted with root inode @ nid 36. [ 372.489010][ T7400] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 372.661799][ T7416] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 372.906445][ T7420] fuse: Bad value for 'user_id' [ 372.912277][ T7420] fuse: Bad value for 'user_id' [ 373.209061][ T7415] loop0: detected capacity change from 0 to 32768 [ 373.219000][ T7415] BTRFS warning: excessive commit interval 2147483645, use with care [ 373.227784][ T7415] btrfs: Deprecated parameter 'usebackuproot' [ 373.234200][ T7415] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 373.267066][ T7415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.399 (7415) [ 373.315086][ T7415] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.326399][ T7415] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 373.335560][ T7415] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 373.442845][ T5940] DVB: Unable to find symbol mt352_attach() [ 373.443448][ T4083] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 373.462599][ T7415] BTRFS error (device loop0): failed to load root extent [ 373.469977][ T7415] BTRFS warning (device loop0): try to load backup roots slot 1 [ 373.511818][ T4083] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 373.526148][ T7415] BTRFS warning (device loop0): couldn't read tree root [ 373.533545][ T7415] BTRFS warning (device loop0): try to load backup roots slot 2 [ 373.579139][ T35] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 373.590260][ T7415] BTRFS warning (device loop0): couldn't read tree root [ 373.597698][ T7415] BTRFS warning (device loop0): try to load backup roots slot 3 [ 373.666960][ T5940] DVB: Unable to find symbol nxt6000_attach() [ 373.673357][ T5940] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 373.697838][ T7415] BTRFS info (device loop0): rebuilding free space tree [ 373.727095][ T7440] FAULT_INJECTION: forcing a failure. [ 373.727095][ T7440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.741448][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.2.403 Not tainted syzkaller #0 PREEMPT(none) [ 373.741593][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.741675][ T7440] Call Trace: [ 373.741723][ T7440] [ 373.741781][ T7440] __dump_stack+0x26/0x30 [ 373.741945][ T7440] dump_stack_lvl+0x1df/0x270 [ 373.742116][ T7440] dump_stack+0x1e/0x25 [ 373.742260][ T7440] should_fail_ex+0x7dc/0x8a0 [ 373.742439][ T7440] should_fail+0x2a/0x40 [ 373.742575][ T7440] should_fail_usercopy+0x2e/0x40 [ 373.742736][ T7440] _copy_from_iter+0x1d9/0x3350 [ 373.742887][ T7440] ? kmsan_get_metadata+0xfb/0x160 [ 373.743032][ T7440] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.743198][ T7440] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.743391][ T7440] netlink_sendmsg+0xc64/0x1250 [ 373.743605][ T7440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.743785][ T7440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.743967][ T7440] __sock_sendmsg+0x333/0x3d0 [ 373.744116][ T7440] ____sys_sendmsg+0x7e0/0xd80 [ 373.744332][ T7440] ___sys_sendmsg+0x271/0x3b0 [ 373.744536][ T7440] ? __rcu_read_unlock+0x6d/0xd0 [ 373.744672][ T7440] ? __fget_files+0x3b4/0x4a0 [ 373.744813][ T7440] ? __fget_files+0x3b9/0x4a0 [ 373.744958][ T7440] ? kmsan_get_metadata+0xfb/0x160 [ 373.745107][ T7440] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.745270][ T7440] __x64_sys_sendmsg+0x211/0x3e0 [ 373.745467][ T7440] ? kmsan_get_metadata+0xfb/0x160 [ 373.745636][ T7440] x64_sys_call+0x1dfd/0x3e30 [ 373.745812][ T7440] do_syscall_64+0xd9/0xfa0 [ 373.745977][ T7440] ? irqentry_exit+0x16/0x60 [ 373.746128][ T7440] ? clear_bhb_loop+0x40/0x90 [ 373.746275][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.746422][ T7440] RIP: 0033:0x7f75e398efc9 [ 373.746526][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.746647][ T7440] RSP: 002b:00007f75e47d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.746787][ T7440] RAX: ffffffffffffffda RBX: 00007f75e3be5fa0 RCX: 00007f75e398efc9 [ 373.746888][ T7440] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 373.746976][ T7440] RBP: 00007f75e47d6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.747064][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.747147][ T7440] R13: 00007f75e3be6038 R14: 00007f75e3be5fa0 R15: 00007ffc8039b508 [ 373.747285][ T7440] [ 373.759046][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 373.895340][ T7415] BTRFS info (device loop0): disabling free space tree [ 373.960578][ T5940] dvb-usb: schedule remote query interval to 1000 msecs. [ 373.968390][ T7415] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 373.968532][ T7415] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 374.054025][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 374.064532][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 374.073147][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 374.107936][ T7415] BTRFS info (device loop0): setting nodatasum [ 374.113324][ T5940] usb 4-1: USB disconnect, device number 11 [ 374.115128][ T7415] BTRFS info (device loop0): enabling ssd optimizations [ 374.127556][ T7415] BTRFS info (device loop0): turning off barriers [ 374.134469][ T7415] BTRFS info (device loop0): turning on flush-on-commit [ 374.141740][ T7415] BTRFS info (device loop0): turning on async discard [ 374.148691][ T7415] BTRFS info (device loop0): enabling disk space caching [ 374.156133][ T7415] BTRFS info (device loop0): force clearing of disk cache [ 374.163567][ T7415] BTRFS info (device loop0): enabling auto defrag [ 374.170368][ T7415] BTRFS info (device loop0): trying to use backup root at mount time [ 374.542625][ T5803] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.705451][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 375.035372][ T7454] loop2: detected capacity change from 0 to 128 [ 375.813893][ T7462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.839062][ T7471] loop3: detected capacity change from 0 to 2048 [ 377.068656][ T7471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.110167][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 377.271489][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 377.359527][ T5863] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.370986][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 377.378158][ T5863] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 377.387492][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.406753][ T5863] usb 3-1: config 0 descriptor?? [ 379.309247][ T7482] fuse: Bad value for 'fd' [ 380.700331][ T7486] loop1: detected capacity change from 0 to 128 [ 381.113347][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 381.119933][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.133875][ T5863] usb 3-1: USB disconnect, device number 12 [ 381.245310][ T7486] 9pnet_fd: Insufficient options for proto=fd [ 382.879411][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.419'. [ 382.888897][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.419'. [ 383.002262][ T7458] Set syz1 is full, maxelem 65536 reached [ 383.724164][ T7506] netlink: 'syz.0.423': attribute type 15 has an invalid length. [ 383.755416][ T7509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.053860][ T7514] netlink: 'syz.5.426': attribute type 30 has an invalid length. [ 384.357651][ T7517] loop0: detected capacity change from 0 to 764 [ 385.459153][ T7531] loop3: detected capacity change from 0 to 256 [ 385.473895][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 385.473969][ T30] audit: type=1326 audit(1761358066.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 385.503282][ T30] audit: type=1326 audit(1761358066.097:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 385.526791][ T30] audit: type=1326 audit(1761358066.097:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 385.549488][ T30] audit: type=1326 audit(1761358066.107:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 385.927017][ T30] audit: type=1326 audit(1761358066.447:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 385.950054][ T30] audit: type=1326 audit(1761358066.457:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 385.972939][ T30] audit: type=1326 audit(1761358066.457:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 385.995445][ T30] audit: type=1326 audit(1761358066.467:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 386.018470][ T30] audit: type=1326 audit(1761358066.467:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 386.041335][ T30] audit: type=1326 audit(1761358066.467:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4fedb8efc9 code=0x7ffc0000 [ 387.502653][ T7551] loop3: detected capacity change from 0 to 764 [ 388.745699][ T7554] netlink: 7 bytes leftover after parsing attributes in process `syz.2.443'. [ 388.794918][ T7554] netlink: 7 bytes leftover after parsing attributes in process `syz.2.443'. [ 388.888456][ T7556] loop3: detected capacity change from 0 to 512 [ 390.059519][ T7570] loop2: detected capacity change from 0 to 512 [ 390.273216][ T7570] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.449: Failed to acquire dquot type 1 [ 390.389179][ T7570] EXT4-fs (loop2): 1 truncate cleaned up [ 390.398682][ T7570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.412112][ T7570] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.813801][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.909400][ T7594] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.050135][ T7594] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.130576][ T7594] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.260125][ T7594] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.453598][ T4083] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.469041][ T4457] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.469349][ T4457] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.469634][ T4457] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.604034][ T7601] Bluetooth: MGMT ver 1.23 [ 394.478393][ T7615] loop3: detected capacity change from 0 to 512 [ 394.526262][ T7615] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.615206][ T7620] loop0: detected capacity change from 0 to 136 [ 394.756180][ T7620] rock: directory entry would overflow storage [ 394.767149][ T7620] rock: sig=0x4f50, size=4, remaining=3 [ 394.773082][ T7620] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 394.984900][ T5803] rock: directory entry would overflow storage [ 394.991506][ T5803] rock: sig=0x4f50, size=4, remaining=3 [ 394.997225][ T5803] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 395.058695][ T5803] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 396.026119][ T7637] loop3: detected capacity change from 0 to 1024 [ 396.111524][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 396.509738][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 396.607691][ T7655] syzkaller0: entered promiscuous mode [ 396.614890][ T7655] syzkaller0: entered allmulticast mode [ 397.319053][ T7667] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 397.899037][ T7677] loop3: detected capacity change from 0 to 256 [ 398.067078][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 398.221335][ T7680] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.595666][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 398.595741][ T30] audit: type=1326 audit(1761358079.227:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.710844][ T30] audit: type=1326 audit(1761358079.277:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.733739][ T30] audit: type=1326 audit(1761358079.277:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.757973][ T30] audit: type=1326 audit(1761358079.277:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.782907][ T30] audit: type=1326 audit(1761358079.287:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.807346][ T30] audit: type=1326 audit(1761358079.287:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.829989][ T30] audit: type=1326 audit(1761358079.287:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.854203][ T30] audit: type=1326 audit(1761358079.287:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.877428][ T30] audit: type=1326 audit(1761358079.297:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 398.900247][ T30] audit: type=1326 audit(1761358079.307:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 399.632534][ T7700] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 399.684328][ T7700] syz_tun: entered promiscuous mode [ 399.745329][ T7700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 400.265471][ T7710] loop0: detected capacity change from 0 to 256 [ 400.820632][ T7719] loop0: detected capacity change from 0 to 512 [ 400.833975][ T7719] EXT4-fs: Ignoring removed nobh option [ 400.863729][ T7719] EXT4-fs (loop0): #clusters per group too big: 360448 [ 401.396612][ T7731] loop1: detected capacity change from 0 to 128 [ 402.021399][ T5889] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 402.191696][ T5889] usb 1-1: Invalid ep0 maxpacket: 16 [ 402.352430][ T5889] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 402.544143][ T5889] usb 1-1: Invalid ep0 maxpacket: 16 [ 402.561635][ T5889] usb usb1-port1: attempt power cycle [ 403.191942][ T5889] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 403.248354][ T5889] usb 1-1: Invalid ep0 maxpacket: 16 [ 403.412454][ T5889] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 403.457534][ T5889] usb 1-1: Invalid ep0 maxpacket: 16 [ 403.466520][ T5889] usb usb1-port1: unable to enumerate USB device [ 403.535582][ T7758] tipc: Started in network mode [ 403.540858][ T7758] tipc: Node identity 2, cluster identity 2048 [ 403.548106][ T7758] tipc: Node number set to 2 [ 403.643266][ T7760] loop3: detected capacity change from 0 to 512 [ 403.700348][ T7760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.713782][ T7760] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.765336][ T7760] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.527: corrupted inode contents [ 403.801417][ T7760] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.527: mark_inode_dirty error [ 403.883411][ T7760] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.527: corrupted inode contents [ 403.912865][ T7760] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.527: mark_inode_dirty error [ 404.118776][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.973939][ T7777] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 405.900917][ T7784] netlink: 92 bytes leftover after parsing attributes in process `syz.3.535'. [ 406.535160][ T7789] loop3: detected capacity change from 0 to 1024 [ 406.669801][ T7789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 407.086209][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 408.414456][ T7803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 408.863731][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.870476][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.678504][ T7814] tipc: Started in network mode [ 409.683941][ T7814] tipc: Node identity c2793b458327, cluster identity 4711 [ 409.692340][ T7814] tipc: Enabled bearer , priority 0 [ 409.799337][ T7811] syzkaller0: MTU too low for tipc bearer [ 409.807579][ T7811] tipc: Disabling bearer [ 410.197827][ T7817] loop5: detected capacity change from 0 to 1024 [ 410.396015][ T7817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 410.940985][ T7133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 411.858003][ T7834] loop2: detected capacity change from 0 to 256 [ 411.899867][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 411.959984][ T7834] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.238263][ T7848] loop0: detected capacity change from 0 to 1024 [ 413.277727][ T7848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 413.371080][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 413.378075][ T30] audit: type=1326 audit(1761358093.987:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.402520][ T30] audit: type=1326 audit(1761358093.997:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.426660][ T30] audit: type=1326 audit(1761358093.997:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.449493][ T30] audit: type=1326 audit(1761358093.997:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.550087][ T7856] macvtap0: refused to change device tx_queue_len [ 413.653643][ T30] audit: type=1326 audit(1761358094.127:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.676761][ T30] audit: type=1326 audit(1761358094.127:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.701578][ T30] audit: type=1326 audit(1761358094.127:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.725175][ T30] audit: type=1326 audit(1761358094.127:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.747889][ T30] audit: type=1326 audit(1761358094.127:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.770690][ T30] audit: type=1326 audit(1761358094.147:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bb538efc9 code=0x7ffc0000 [ 413.937272][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 414.715432][ T7871] loop2: detected capacity change from 0 to 256 [ 414.798133][ T7871] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 414.806285][ T7871] FAT-fs (loop2): Filesystem has been set read-only [ 415.047146][ T7872] loop0: detected capacity change from 0 to 1024 [ 415.168141][ T7878] loop2: detected capacity change from 0 to 1024 [ 415.198787][ T7878] EXT4-fs: inline encryption not supported [ 415.302413][ T7872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.315241][ T7872] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.347182][ T7878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.009367][ T7891] loop3: detected capacity change from 0 to 1024 [ 416.019595][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.110160][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 416.503883][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 417.600516][ T7906] loop1: detected capacity change from 0 to 8192 [ 417.640750][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 417.653732][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.678960][ T7906] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.942865][ T7918] loop1: detected capacity change from 8192 to 0 [ 417.964648][ C1] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 417.974471][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 417.990048][ T7906] FAT-fs (loop1): FAT read failed (blocknr 1) [ 417.994020][ T7920] loop3: detected capacity change from 0 to 1024 [ 418.046659][ T7906] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 418.079970][ T7920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 418.241014][ T5800] FAT-fs (loop1): Directory bread(block 65) failed [ 418.248312][ T5800] FAT-fs (loop1): Directory bread(block 66) failed [ 418.255333][ T5800] FAT-fs (loop1): Directory bread(block 67) failed [ 418.262417][ T5800] FAT-fs (loop1): Directory bread(block 68) failed [ 418.269166][ T5800] FAT-fs (loop1): Directory bread(block 69) failed [ 418.276087][ T5800] FAT-fs (loop1): Directory bread(block 70) failed [ 418.282964][ T5800] FAT-fs (loop1): Directory bread(block 71) failed [ 418.424632][ T7928] loop2: detected capacity change from 0 to 256 [ 418.453511][ T7928] vfat: Bad value for 'shortname' [ 418.499116][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 418.756368][ T3896] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 418.795137][ T7651] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 418.804008][ T7651] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 418.812635][ T7651] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 419.253355][ T7942] loop3: detected capacity change from 0 to 256 [ 420.010330][ T7948] loop2: detected capacity change from 0 to 512 [ 420.080715][ T7948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.094038][ T7948] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.240347][ T7948] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.602: corrupted inode contents [ 420.338020][ T7948] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.602: mark_inode_dirty error [ 420.381063][ T7948] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.602: corrupted inode contents [ 420.427528][ T7948] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.602: mark_inode_dirty error [ 420.462954][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.480413][ T7958] loop0: detected capacity change from 0 to 1024 [ 420.489166][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.499161][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.520352][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.543519][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.556106][ T7958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 420.824357][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.072304][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 421.467336][ T7976] syzkaller0: entered promiscuous mode [ 421.473406][ T7976] syzkaller0: entered allmulticast mode [ 421.486145][ T7959] chnl_net:caif_netlink_parms(): no params data found [ 422.681440][ T5813] Bluetooth: hci0: command tx timeout [ 423.316840][ T7998] loop2: detected capacity change from 0 to 1024 [ 423.366146][ T7998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 423.561718][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 423.989923][ T8002] syzkaller0: entered promiscuous mode [ 423.996075][ T8002] syzkaller0: entered allmulticast mode [ 424.142510][ T8006] loop0: detected capacity change from 0 to 1024 [ 424.198106][ T8006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.275215][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 424.275289][ T30] audit: type=1800 audit(1761358104.907:151): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.621" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 424.380725][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ffc5c00: rx timeout, send abort [ 424.389877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ffc4a00: rx timeout, send abort [ 424.402098][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ffc5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 424.417351][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ffc4a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 424.761824][ T5813] Bluetooth: hci0: command tx timeout [ 424.770557][ T30] audit: type=1326 audit(1761358105.397:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 424.816526][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.824331][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.865250][ T7959] bridge_slave_0: entered allmulticast mode [ 424.875276][ T7959] bridge_slave_0: entered promiscuous mode [ 424.897654][ T30] audit: type=1326 audit(1761358105.437:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 424.920760][ T30] audit: type=1326 audit(1761358105.447:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 424.943625][ T30] audit: type=1326 audit(1761358105.457:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 424.966287][ T30] audit: type=1326 audit(1761358105.577:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 424.989114][ T30] audit: type=1326 audit(1761358105.577:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a8f8efc9 code=0x7ffc0000 [ 425.019526][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.027318][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.035538][ T7959] bridge_slave_1: entered allmulticast mode [ 425.045233][ T7959] bridge_slave_1: entered promiscuous mode [ 425.129858][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.230040][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.285272][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.112895][ T7959] team0: Port device team_slave_0 added [ 426.166789][ T7959] team0: Port device team_slave_1 added [ 426.186973][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 426.500116][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.508805][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.542244][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.656267][ T8035] syzkaller0: entered promiscuous mode [ 426.662168][ T8035] syzkaller0: entered allmulticast mode [ 426.833547][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.840980][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.867734][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.012015][ T5813] Bluetooth: hci0: command tx timeout [ 427.173614][ T7959] hsr_slave_0: entered promiscuous mode [ 427.183978][ T7959] hsr_slave_1: entered promiscuous mode [ 427.193358][ T7959] debugfs: 'hsr0' already exists in 'hsr' [ 427.199269][ T7959] Cannot create hsr debugfs directory [ 429.081827][ T5813] Bluetooth: hci0: command tx timeout [ 429.377004][ T7959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 429.399774][ T7959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 429.453072][ T7959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 429.513635][ T7959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 430.244167][ T30] audit: type=1326 audit(1761358110.857:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.267754][ T30] audit: type=1326 audit(1761358110.867:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.290530][ T30] audit: type=1326 audit(1761358110.877:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.314840][ T30] audit: type=1326 audit(1761358110.887:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.338199][ T30] audit: type=1326 audit(1761358110.887:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.361419][ T30] audit: type=1326 audit(1761358110.937:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd738efc9 code=0x7ffc0000 [ 430.548007][ T8076] syzkaller0: entered promiscuous mode [ 430.554001][ T8076] syzkaller0: entered allmulticast mode [ 430.763049][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.792184][ T8062] loop2: detected capacity change from 0 to 512 [ 430.804637][ T8062] EXT4-fs: Ignoring removed bh option [ 430.813945][ T8062] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 430.823938][ T8062] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 430.885354][ T7959] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.923849][ T8062] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 430.960265][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.961872][ T8062] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 430.967815][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.992772][ T8080] syzkaller0: entered promiscuous mode [ 430.998490][ T8080] syzkaller0: entered allmulticast mode [ 431.035723][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.038867][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.055530][ T3896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.118278][ T8049] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 431.523672][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.870967][ T8091] loop3: detected capacity change from 0 to 512 [ 431.926018][ T8091] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 432.413859][ T8091] EXT4-fs (loop3): orphan cleanup on readonly fs [ 432.531318][ T8101] hub 9-0:1.0: USB hub found [ 432.539470][ T8101] hub 9-0:1.0: 1 port detected [ 433.419449][ T8091] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 433.562283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 433.571624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 433.664881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 434.353529][ T8091] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 434.649776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 434.731029][ T8091] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.648: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 434.916824][ T8091] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.648: couldn't read orphan inode 13 (err -117) [ 434.996946][ T8091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.056940][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.123876][ T8106] ===================================================== [ 435.131271][ T8106] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 435.138480][ T8106] batadv_get_vid+0x2d0/0x3b0 [ 435.143457][ T8106] batadv_interface_tx+0x2e5/0x1e60 [ 435.148851][ T8106] dev_hard_start_xmit+0x22f/0xa30 [ 435.154256][ T8106] __dev_queue_xmit+0x3c51/0x5e60 [ 435.159464][ T8106] __bpf_redirect+0x162d/0x1760 [ 435.164639][ T8106] bpf_clone_redirect+0x366/0x530 [ 435.169864][ T8106] ___bpf_prog_run+0x1297/0xeba0 [ 435.175067][ T8106] __bpf_prog_run512+0xc5/0x100 [ 435.180104][ T8106] bpf_test_run+0x496/0xd80 [ 435.184908][ T8106] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 435.190563][ T8106] bpf_prog_test_run+0x5c2/0xa40 [ 435.195784][ T8106] __sys_bpf+0x873/0xeb0 [ 435.200204][ T8106] __x64_sys_bpf+0xa4/0xf0 [ 435.204933][ T8106] x64_sys_call+0x3550/0x3e30 [ 435.209800][ T8106] do_syscall_64+0xd9/0xfa0 [ 435.214621][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.220685][ T8106] [ 435.223216][ T8106] Uninit was created at: [ 435.227674][ T8106] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 435.233929][ T8106] kmalloc_reserve+0x13c/0x4b0 [ 435.238871][ T8106] pskb_expand_head+0x1fc/0x1610 [ 435.244124][ T8106] skb_ensure_writable+0x44e/0x510 [ 435.249412][ T8106] bpf_clone_redirect+0x1c1/0x530 [ 435.254741][ T8106] ___bpf_prog_run+0x1297/0xeba0 [ 435.259841][ T8106] __bpf_prog_run512+0xc5/0x100 [ 435.264962][ T8106] bpf_test_run+0x496/0xd80 [ 435.269650][ T8106] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 435.275423][ T8106] bpf_prog_test_run+0x5c2/0xa40 [ 435.280533][ T8106] __sys_bpf+0x873/0xeb0 [ 435.285036][ T8106] __x64_sys_bpf+0xa4/0xf0 [ 435.289657][ T8106] x64_sys_call+0x3550/0x3e30 [ 435.294656][ T8106] do_syscall_64+0xd9/0xfa0 [ 435.299351][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.305531][ T8106] [ 435.307951][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.2.653 Not tainted syzkaller #0 PREEMPT(none) [ 435.317451][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.327969][ T8106] ===================================================== [ 435.335129][ T8106] Disabling lock debugging due to kernel taint [ 435.341514][ T8106] Kernel panic - not syncing: kmsan.panic set ... [ 435.348096][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.2.653 Tainted: G B syzkaller #0 PREEMPT(none) [ 435.359072][ T8106] Tainted: [B]=BAD_PAGE [ 435.363333][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.373538][ T8106] Call Trace: [ 435.376916][ T8106] [ 435.379947][ T8106] __dump_stack+0x26/0x30 [ 435.384467][ T8106] dump_stack_lvl+0x53/0x270 [ 435.389270][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.395286][ T8106] dump_stack+0x1e/0x25 [ 435.399631][ T8106] vpanic+0x435/0xd30 [ 435.403859][ T8106] panic+0x15d/0x160 [ 435.407997][ T8106] kmsan_report+0x31c/0x320 [ 435.412686][ T8106] ? __msan_warning+0x1b/0x30 [ 435.417534][ T8106] ? batadv_get_vid+0x2d0/0x3b0 [ 435.422564][ T8106] ? batadv_interface_tx+0x2e5/0x1e60 [ 435.428314][ T8106] ? dev_hard_start_xmit+0x22f/0xa30 [ 435.433813][ T8106] ? __dev_queue_xmit+0x3c51/0x5e60 [ 435.439213][ T8106] ? __bpf_redirect+0x162d/0x1760 [ 435.444436][ T8106] ? bpf_clone_redirect+0x366/0x530 [ 435.449841][ T8106] ? ___bpf_prog_run+0x1297/0xeba0 [ 435.455124][ T8106] ? __bpf_prog_run512+0xc5/0x100 [ 435.460308][ T8106] ? bpf_test_run+0x496/0xd80 [ 435.465168][ T8106] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 435.470985][ T8106] ? bpf_prog_test_run+0x5c2/0xa40 [ 435.476269][ T8106] ? __sys_bpf+0x873/0xeb0 [ 435.480849][ T8106] ? __x64_sys_bpf+0xa4/0xf0 [ 435.485632][ T8106] ? x64_sys_call+0x3550/0x3e30 [ 435.490661][ T8106] ? do_syscall_64+0xd9/0xfa0 [ 435.495505][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.501736][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.507010][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.512978][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.518237][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.524205][ T8106] ? batadv_interface_tx+0xc1/0x1e60 [ 435.529658][ T8106] ? filter_irq_stacks+0x49/0x190 [ 435.534880][ T8106] ? stack_depot_save_flags+0x35/0x7b0 [ 435.540804][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.546083][ T8106] __msan_warning+0x1b/0x30 [ 435.550718][ T8106] batadv_get_vid+0x2d0/0x3b0 [ 435.555558][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.561536][ T8106] batadv_interface_tx+0x2e5/0x1e60 [ 435.566915][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.572228][ T8106] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 435.578779][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.584043][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.590005][ T8106] ? __pfx_batadv_interface_tx+0x10/0x10 [ 435.595820][ T8106] dev_hard_start_xmit+0x22f/0xa30 [ 435.601158][ T8106] __dev_queue_xmit+0x3c51/0x5e60 [ 435.606368][ T8106] ? skb_release_data+0xa12/0xac0 [ 435.611565][ T8106] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 435.618022][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.623280][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.629240][ T8106] ? __dev_queue_xmit+0x30c/0x5e60 [ 435.634568][ T8106] __bpf_redirect+0x162d/0x1760 [ 435.639608][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.644900][ T8106] bpf_clone_redirect+0x366/0x530 [ 435.650173][ T8106] ___bpf_prog_run+0x1297/0xeba0 [ 435.655327][ T8106] __bpf_prog_run512+0xc5/0x100 [ 435.660370][ T8106] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 435.666923][ T8106] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 435.673021][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.678287][ T8106] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 435.684829][ T8106] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 435.691114][ T8106] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 435.697085][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.702350][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.707608][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.712868][ T8106] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 435.719405][ T8106] ? kmsan_get_metadata+0x150/0x160 [ 435.724757][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.730728][ T8106] ? __pfx___bpf_prog_run512+0x10/0x10 [ 435.736351][ T8106] ? __pfx___bpf_prog_run512+0x10/0x10 [ 435.741958][ T8106] bpf_test_run+0x496/0xd80 [ 435.746632][ T8106] ? kmsan_get_metadata+0xfb/0x160 [ 435.751929][ T8106] ? bpf_test_run+0x2f7/0xd80 [ 435.756807][ T8106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.762778][ T8106] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 435.768467][ T8106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 435.774452][ T8106] bpf_prog_test_run+0x5c2/0xa40 [ 435.779569][ T8106] __sys_bpf+0x873/0xeb0 [ 435.783986][ T8106] __x64_sys_bpf+0xa4/0xf0 [ 435.788596][ T8106] x64_sys_call+0x3550/0x3e30 [ 435.793464][ T8106] do_syscall_64+0xd9/0xfa0 [ 435.798133][ T8106] ? irqentry_exit+0x16/0x60 [ 435.802873][ T8106] ? clear_bhb_loop+0x40/0x90 [ 435.807719][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.813767][ T8106] RIP: 0033:0x7f75e398efc9 [ 435.818297][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.838057][ T8106] RSP: 002b:00007f75e47d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.846631][ T8106] RAX: ffffffffffffffda RBX: 00007f75e3be5fa0 RCX: 00007f75e398efc9 [ 435.854735][ T8106] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 435.862823][ T8106] RBP: 00007f75e3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.870910][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.878992][ T8106] R13: 00007f75e3be6038 R14: 00007f75e3be5fa0 R15: 00007ffc8039b508 [ 435.887299][ T8106] [ 435.890821][ T8106] Kernel Offset: disabled [ 435.895199][ T8106] Rebooting in 86400 seconds..