last executing test programs: 9m54.445431227s ago: executing program 32 (id=47): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8m27.079221709s ago: executing program 33 (id=693): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 7m54.564578173s ago: executing program 34 (id=932): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc959, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0xed9, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x8000004, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x1, 0xe], [0x5, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x2, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x49, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x5, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0x3, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002006}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m32.624449157s ago: executing program 35 (id=1622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 6m18.768821832s ago: executing program 36 (id=1620): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) 5m51.740934921s ago: executing program 8 (id=1850): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42040, 0x6) 5m50.837563905s ago: executing program 8 (id=1858): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ebba2cffa7650851"], 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 5m50.319903454s ago: executing program 8 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5m49.66496299s ago: executing program 8 (id=1868): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000740)={0x0, 0x96}) 5m48.359209744s ago: executing program 8 (id=1876): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x48}) 5m45.566682465s ago: executing program 8 (id=1893): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x8, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5m44.815471101s ago: executing program 37 (id=1893): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x8, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m47.190190449s ago: executing program 9 (id=2356): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000000) 4m46.208379619s ago: executing program 9 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 4m45.844470873s ago: executing program 9 (id=2362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 4m44.895482025s ago: executing program 9 (id=2368): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 4m44.330635462s ago: executing program 9 (id=2372): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3e, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e04, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4m36.360291137s ago: executing program 9 (id=2417): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000002, 0x0) r0 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 4m35.681412751s ago: executing program 38 (id=2417): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000002, 0x0) r0 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 3m10.186892419s ago: executing program 1 (id=3148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="c16b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131f1c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc668f8e164b1d89f4fead99f500a0eedd85d90fb3afcbcc4468ce6684df82010000000000000075d0f7bedf3124a2dd27723ee5ba23aa1627b6e1dbfdeb89d42bcaddb41d301768f9f3a3dd3e8f9e199dfbaf050d98cec2903f478cb38eb1a7fbdc2d28d3ebb00609f68e2fe5ba9f341ea7e8f5d921c1a4c381c27c6011c70809268ceebd1a4a7fb4180f9384d6ef7d1c34d887a89696085a56021203ba220eb2551d116a1fb5303f0d7d8511a80bd640d246cf94863ccd9371c0bf0a8d1a80f376300eb6b76dc0ac20adedb06f5b6022f19fa486c3cf6abfd3adf2317feb34385c3903f742c374e0d59e98a3ea7da582cbce8192a22098a87f1c9638fbff07cd0d4ec8044f00000000000000", 0x175}, {&(0x7f0000000300)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384", 0xa5}, {&(0x7f00000012c0)="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", 0x117}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 3m10.015024579s ago: executing program 1 (id=3149): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x24, r2, 0xe398b979f3cd6d79, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3m9.899441636s ago: executing program 1 (id=3151): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x814800, &(0x7f0000001e40)=ANY=[], 0xff, 0x5ee1, &(0x7f0000011ac0)="$eJzs3cuOHFcZB/CvL9NzSeJYEYqMxWLiQEgI8d2GcIvDggUsQEJZY2syiQwOINsgEll4Ii8QG+ARYJMNi7wCD5BnQDwAluyssiAUqulz7JqaHvcM9nT1zPn9pHbVV6cvp/yfmuqequoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ac/PdOLiMu/TQuORjwdg4h+xHJdr0Y9cynffxgRx2KzOZ6PiMFiRP34zX+ejTgfEZ8cibh3/9ZavfjsLvtx4fTN65//6Pv//MOf7xz7+ds/+6jd/pMvnPv4j7cjjv749Y8/v/1k1h0AAABKUVVV1Usf84+nz/f9rjsFAMxE3v9XSV4+s3pjxq+nVqvV3dR/6u/l/k8/1XV/1Ye0bqomu90sIvKeeqx+z+BwPAAcMBvxWdddoEPyL9owIp7quhPAXOt13QH2xb37t9Z6Kd9ec3+wOm7Pf6fckv9G78H1HTtNp2mfYzKrn687MYjndujP8oz6ME9y/v12/pfH7aN0v/3Of1Z2yn80vvSpODn/QTv/li35/yUiDmz+/Yn5lyrnP9xL/huDA7z9yx8AAAAAgMMv//3/aMfHfxcff1V25VHHf1dn1AcAAAAAAAAAeNIed/y/B4z/BwAAAHOr/qxe++uRh8t2+i62evlbvYhnWvcHCrPa+HJAAAAAAAAAAAAAAGA2hhEr6bz+hYh4ZmWlqqr61tSu9+pxH3/Qlb7+ULKuf8kDAMDYJ0da1/L3IpYi4q30XX8LKysrVbW0vFKtVMuL+f3saHGpWm58rs3TetniaBdviIejqn6ypcbjmqZ9Xp7W3n6++rVG1WAXHZuNDgMHgIgY743u2SMdMlX1bHT9LoeDwfZ/+Nj+2Y2uf04BAACA/VdVVdVLX+d9PB3z73fdKQBgJvL+v31cQK1Wq4upPx0vnJv+qNX7WDdVk91uFhGx0XxM/Z7BcPwAcMBsxGddd4EOyb9ow4g41nUngLnW67oD7It792+t9VK+veb+YHXcns8F2ZL/Rm/zcfnxk6bTtM8xmdXP150YxHM79Of5GfVhnuT8++38L4/b8xD/+53/rOyUf72eRzvoT9dy/oN2/i2HJ//+xPxLlfMf7in/gfwBAAAAAGCO5b//H3X8N68yAAAAAAAAABw49+7fWsvXvebj/1+acL9ec871n4dGzr+36/xd/3uY5Pz77fxbJ+QMGvN333yY/6f3b619dPPfX8zTuc9/YTCqX3uh1x8M0zk/1cI7cTWuxXqc3tat4Zb2M9ueb2FL+9kp7ee2tY/q9uXcfjLW4ldxLd5+0L445cSopSnt1ZT2nP/A9l+knP+wcavzX0ntvda0dvfD/rbtvjmd9DqX/v6fl07v/+pMdScGD9atqV6/Ex30Z/P/5KlR/ObG+vWTv7ty8+b1M5EmW5aejTR5wnL+C+mW83/5xXF7/r3f3F7vfjjac/7z4k4Md8z/xcZ8vb6vzLhvXcj5j9It55/3QJO3/4Oc/87b/6sd9AcAAAAAAAAAAAAAAAAepaqqzUtEL0XExXT9T1fXZgIAs5X3/1WSl6vVarVarT58dVM12RvNIiL+0XxM/Z7h95OeDACYZ/+NiH913Qk6I/+C5e/7q6df7rozwEzdeP+DX1y5dm39+o2uewIAAAAAAAAA/L/y+J+rjfGfN88Dao0bvWX81zdj9cCO/9kfDTbHOk8r9EJsGf972/1PxKPH/x5Oeb2FKe2jKe2LU9qXprRPvNCjIef/Qso45388rVhJ47++3EF/upbzP5HGes75f7V1v2b+1d8Ocv79Lfmfuvner0/deP+D166+d+Xd9XfXf3nm9MXz5y6cP3fhwql3rl5bPz3+t8Me76+cfx772nmgZcn558zlX5ac/1dSLf+y5PxfSrX8y5Lzz+/35F+WnH/+7CP/suT8X0m1/MuS8/9aquVflpz/q6mWf1ly/l9PtfzLkvN/LdXyL0vO/2Sq5V+WnP+pVMu/LDn/fIRL/mXJ+eczG+Rflpz/2VTLvyw5/3Opln9Zcv7nUy3/suT8L6Ra/mXJ+V9MtfzLkvP/RqrlX5ac/zdTLf+y5PxfT7X8y5Lz/1aq5V+WnP+3Uy3/suT8v5Nq+Zcl5//dVMu/LDn/76Va/mXJ+b+RavmX5eH3/5vZ88zKfHTDjJknP9P1byYAAAAAAAAAAAAAoG0WpxN3vY4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkau+7wB+9mavDQE33IkDa3MzsLC7voFDDCYJKSW9UBLSpiU1jndtNvGt3l0CCJVNoS1RkIrUPtCHpkmURpHaClRFairRCKlI7Vvz1IiXqJXy4AeoHJRUShXY6sz5//+emZ2dWa+93plzPh9k/7w7Z2b+c+bM7HwXfWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg3paPT/1ZX5Zl+Z/aX5uy7OL83xuyffmX87vXeoUAAADAuXqv9vffX5q+sW8ZZ6rb5t+u+4/vLSwsLGRfePfU+3+xsJBOGMmygfVZVjst+vdf/Hyhfpvg+Wy4r7/u6/4OVz/Q4fTBDqcPdTh9XYfT13c4fbjD6Yt2wCIbit/H1C7sxto/NxW7NLs8G6qddmOLcz3ft76/P/4up6avdp6FoUPZdHYkm8rGF52nr/Zflr2+Jb+uB7N4Xf1117U5y7LTP332YFxDX9jHN2YNV1ZTf9+9c3828u5Pnz34ndm3r2k1O+6GRSvNsm1b83W+kGVnfl2V9WXr0z6J6+yvW+fmFuscaFhnX+18+b+b13l6meuMt3s4rPOHbda5OXzvqRuyLJvPltym2fNZf7ax6VrT/h4ujoj8MvK78oPZ4FkdJ1uWcZzk5/nJDY3HSfMxGff/lrBPBpdYQ/3d8c5X1i3a7ys9TvJb3Q3Han7ZD+dXOjxc/6vVhmM13+bZm5Y+Blredy2OgXQs1x0DWzsdA/3rBmrHQP+ZNW9tOAYmFp2nP+urXdepm9ofA2OzR0+MzTz9zB3TRw8cnjo8dWxifPfOHbt27ti1a+zQ9JGp8eLvs9ulPWRj1p+Owa3huSYeg7c0bVt/SC588/w9Doa75HGQ3/bP3Jwv6OL+bIljPN/mhW3n/jhIP/frHgeDdY+Dls+pLR4Hg8t4HOTbnN62vJ+Zg3V/Wq1htZ4LN9UdA2v58zC/zsduXfq5cHNY14u3ne3Pw4FFx0C8WX3hsZd/J73eG7477JfFx8W1+QkXrcvmZqZO3vnUgdnZkxNZGBfEZXX3VfPxsrHuNmWLjpf+sz5e9v3dL2++tsX3N4V9NXx7+/sq32bnaPv7qvbs3np/Nnx3exbGeXah92ern2b5/kxZos3+zLd54Y5zfy2Ycknd899Qp+e/gaHB4vlvIO2NoYbnv8V3zUBtZVl2+o7lPf8NhT8X+vnv8i55/sv31WN3tj8G8m1eHDvbY2Cw7fPfDWH2hfXcGhLDcF3uf792+nxxmNbdlx2Pm8HBoXDcDMZrbDxudiw6T35p+XVvG1/ZcbPthsb7quF1SwmPm3xf/eV4++Mm3+aNiXN/7tgQ/1n33LGu0zEwNLAuX+9QOgiK57uFDfEYuDM7mB3PjmST6Tz5vZxf1+j25R0D68KfC/3ccXWXHAP5vnple/tjIN/mzR3n97XTtvCdtE3da6fm3y8slfmvHTxzec277Xxn/nydn9jZ/ndD+TZv7zzbnNF+P90evnNRi/3U/PhZ6piezC7Mfro6rPPIrva/m8q3uXz3Mo+nfVmWvTXxVu33XeH3u/8495/fa/i9b6vfKb818dZDY4/86GzWDwDAyr1f+3t+XfFas+7/WC/n//8DAAAAPSHm/v4wE/kfAAAASiPm/oEwE/kfAAAASiPm/sEwk4rk/yfu3vPqe89l6d0AF4J4etwND99bbBc73vPh65GFM/Lvf+zbQ69+9bnlXXd/lmW/fOhDLbd/4t64rsKJuM6PNH5/kauvX9b1P/7ome3q3z/h9J7i8uPtWe5hELvKr49tr13uyNMTtfnGQ1ltPjL/4vPF5Rdfx+1P7Si2/+vwpiX7DvU1nH9bWM+NYY6E95R5eN+Z/ZDPeL5XN1/3r5d99sz1xfP1bb2kdjNf+aPicuN7RL18WbF9vN1Lrf9fvvbdV/Ptn7qp9fqf62+9/lPhcn8S5i/2FtvX7/Ov1q3/T8L64/XF8935rR+0XP9rVxXbvxaOi2+E2bz++//8w++1ur/i9ey7pzhfvP7x/91ZO1+8vHj5zesffm6iYX80X/4b7xaXs/fJnw3Ubx+/H68nevyexuO7L9y/DT3yLMu++6dZw37OPlqc75+b1h8v78Q9rdd/e9M6T/RdXzv/mduzqeF2ff1vt7e8vXE9+/5hU8PtefmBsP/eHXszv9xTj4TjMZz+fz8sLq/5vUxfe6Dx+SZu/41NxeM2Xt5Y0/pfblr//PX5vuu8/gffLdb/2n3rG9a/75PheHqwmJ3Wf/hvLm04/ze/U9wfJ788euz4zNz0ZN1erX8crx/esPGiiz9wyaXhubT56/3HZ5+YOjkyPjKeZSM9+JaBq73+b4X5P8WYP//XUPjRz4rj7qVPFT+3bvl58fXL4fuPh/sz/nz8+l8NNRyvzff7/H3FPNf13xbWsVxXfe2/r1/Whqc+//rcP/3x282vC+LtOXHFcO32vbLlytppfW8Upzc/X3XyX1c0Pq5/PDhem98P+3UhvDPz1iuL62u+/PjeJC99unj8xldy8fxZ0/uJbBpovB3nuv4fh9cxP7i68fkvHh/ff67p3Zw3ZX35EubD80M2X5wet4r7+6XTV7a8vvg+PNn8NWezzCXNPD0zdmT62NxTY7NTM7NjM08/s//o8bljs/tr7126/4udzn/m8b2x9vienNq9M6s92o8XY5Wt9fpPPHpw8q7xmyenDh2YOzT76Impk4cPzswcnJqcufnAoUNTX+50/unJvRPb9+y4a/vo4enJvXfv2bNjz+j0seP5MopFdbB7/Eujx07ur51lZu/OPRO7du0cHz16fHJq713j46Nznc5f+9k0mp/7ydGTU0cOzE4fnRqdmX5mau/Ent27t3d898ejJw7NjIydnDs2NjczdXKsuC0js7Vv5z/7Op2fapg5Hp7vmvSFV+efu313en/c3Le/suRFFZs0vjzN3gnvBRV/vnX6Oub+oTCTiuR/AAAAqIKY+8Mb/585Qf4HAACA0oi5f32YifwPAAAApRFz/3CYSUXyv/6//r/+v/6//r/+/2rS/9f/b0f/X/+/l9ev/6//T2fd1v+PuX9DllUy/wMAAEAVxNy/McxE/gcAAIDSiLn/ojAT+R8AAABKI+b+i8NMqpH/h5r/qf+v/6//X9//j9vq/2f6//r/K6T/r//fjv6//n8vr78L+/8b9P/pNt3W/4+5/wNhJtXI/wAAAFAJMfdfEmYi/wMAAEBpxNx/aZiJ/A8AAAClEXP/pjCTiuR/n/+v/6//7/P/9f/1/1eT/r/+fzv6//r/vbz+Luz/+/x/uk639f9j7v+VMJOK5H8AAACogpj7PxhmIv8DAABAacTcf1mYifwPAAAApRFz/+VhJhXJ//r/+v/6//r/+v/6/6tJ/1//vx39f/3/Xl6//r/+P511W/8/5v4rwkwqkv8BAACgCmLuvzLMRP4HAACA0oi5/6owE/kfAAAASiPm/qvDTCqS//X/9f/1//X/9f/1/1eT/r/+fzv6//r/vbx+/X/9fzrrtv5/zP3XhJlUJP8DAABAFcTcf22YifwPAAAApRFz/4fCTOR/AAAAKI2Y+zeHmVQk/+v/6//r/+v/6//r/6+m3ur/9y95iv5/Qf+/kf6//r/+v/4/7XVb/z/m/g+HmVQk/wMAAEAVxNx/XZiJ/A8AAAClEXP/9WEm8j8AAACURsz9I2EmFcn/+v/6//r/+v/6//r/q6m3+v9L0/8v6P830v/X/9f/1/+nvW7r/8fcvyXMpCL5HwAAAKog5v6tYSbyPwAAAJRGzP03hJnI/wAAAFAaMfffGGZSkfyv/6//r/+v/6//r/+/mvT/9f/b0f/X/+/l9ev/L6//v67TBVFq3db/j7n/pjCTiuR/AAAAqIKY+28OM5H/AQAAoDRi7r8lzET+BwAAgNKIuX9bmElF8r/+v/6//r/+v/6//v9q0v9fdv9/w0rWpf9f0P9fmbXuz/f6+vX/ff4/nXVb/z/m/lvDTCqS/wEAAKAKYu6/LcxE/gcAAIDSiLn/9jAT+R8AAABKI+b+0TCTiuR//X/9f/1//X/9f/3/1VSO/v/Aov5/eh71+f/6//r/+v/6//r/LKnb+v8x998RZlKR/A8AAABVEHP/nWEm8j8AAACURsz9Y2Em8j8AAACURsz942EmFcn/+v/6//r/+v/6//r/q6kc/f8L8vn/K1q//n9B/39l1ro/3+vr1//X/6ezbuv/x9w/EWZSkfwPAAAAVRBz//YwE/kfAAAASiPm/h1hJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f/1/1eT/r/+fzv6//r/vbx+/X/9fxr1t/het/X/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/rvCTOR/AAAAKI2Y++8OM6lI/tf/1//X/9f/797+f+P16//r/7ei/6//n+n/r9ha9+d7ff36//r/dHZ++/+XnnP/P+b+PWEmFcn/AAAAUAUx938kzET+BwAAgNKIuf+eMBP5HwAAAHpKq88hjGLu/2iYSUXyv/5/2fv/C+v1//X/e7f/37g/9f/1/1vR/9f/z/T/V2yt+/O9vn79f/1/Oju//f9FL0/Puv8fc//eMJOK5H8AAACogpj77w0zkf8BAACgNGLuvy/MRP4HAACA0oi5f1+YSUXyv/5/2fv/3ff5/32Z/r/+f0H/X///fND/1//P9P9XbKX9+fCyRf+/i/r/+TGk/0836rb+f8z994eZVCT/AwAAQBXE3P+xMBP5HwAAAEoj5v6Ph5nI/wAAAFAaMfd/IsykIvlf/1//3+f/6//r/+v/ryb9f/3/dvT/e7P/H+n/d0//3+f/0626rf8fc/8DYSYVyf8AAABQBTH3fzLMRP4HAACA0oi5/1fDTOR/AAAAKI2Y+x8MM6lI/tf/1//X/9f/1//X/19N+v/6/+3o/+v/9/L69f/1/+ms2/r/Mff/WphJRfI/AAAAVEHM/Q+Fmcj/AAAAUBox938qzET+BwAAgNKIuf/Xw0wqkv/1/y9M/78/Xb7+v/6//r/+v/7/+aT/r/+f6f+v2Fr353t9/fr/+v901m39/5j7fyPMpCL5HwAAAKog5v7fDDOR/wEAAKA0Yu7/rTAT+R8AAABKI+b+h8NMKpL/9f99/r/+v/5/1/b/Bxv3p/6//n8r+v/6/5n+/4qtdX++19ev/6//T2fd1v+Puf+3w0wqkv8BAACgCmLufyTMRP4HAACA0oi5/9NhJvI/AAAAlEbM/Z8JM6lI/u+N/v+b+v/6//r/dSrT/2/an/r/+v+t6P/r/2f6/yu21v35Xl+//r/+P511W/8/5v5Hw0wqkv8BAACgCmLu/2yYifwPAAAApRFz/++Emcj/AAAAUBox9/9umElF8n9v9P99/r/+v/5//eXr/+v/9xL9/8X9//w5bC37/+uWs6H+/7Lo/+v/6//r/9Net/X/Y+7/XJhJRfI/AAAAVEHM/b8XZiL/AwAAQGnE3P/7YSbyPwAAAJRGzP2PhZlUJP/r/+v/6//r/+v/6/+vJv1/n//fjv6//n8vr1//X/+fzrqt/x9z/+fDTCqS/wEAAKAKYu7/gzAT+R8AAABKI+b+/WEm8j8AAACURsz9j4eZVCT/6//r/+v/6//r/+v/ryb9f/3/dvT/9f97ef36//r/dNZt/f+Y+w+EmVQk/wMAAEAVxNz/hTAT+R8AAABKI+b+g2Em8j8AAACURsz9k2EmFcn/+v/6//r/+v/6//r/q0n/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/qkwk4rkfwAAAKiCmPsPhZnI/wAAAFAaMfcfDjOR/wEAAKA0Yu5/IsykIvlf/1//X/9f/1//X/9/Nen/6/+3o/+v/9/L69f/1/+ns27r/8fcPx1mUpH8DwAAAFUQc/8Xw0zq8//ghV4VAAAAcD7F3P+lMBP//x8AAABKI+b+I2EmFcn/+v/6//r/Jez/D+r/Z/r/XUP/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/qNhJhXJ/wAAAFAFMfcfCzOR/wEAAKA0Yu4/HmYi/wMAAEBpxNx/IsykIvlf/1//X/+/hP1/n/9fo//fHfT/9f/b0f/X/+/l9ev/6//TWbf1/2Pu/8Mwk4rkfwAAAKiCmPtPhpnI/wAAAFAaMffPhJnI/wAAAFAaMffPhplUJP/r/+v/6//r/+v/6/+vJv1//f929P/1/3t5/fr/+v901m39/5j758JMKpL/AQAAoBe9dpbbx9z/ZJiJ/A8A/D9795mr11XFcfg1UZQghBgLI2AIjIEvTIHea+i9995777333nuHgOkQkILIXWsFsH3O9eWevPvs9TxflpI48ZYtJfor+ukAANPI3X+PuMX+BwAAgGnk7r9n3NJk/+v/9f/6/2H6/5POT/+v/9f/XxX9v/7/oP8/s2P383t/v/5f/8+60fr/3P33ilua7H8AAADoIHf/veMW+x8AAACmkbv/PnGL/Q8AAADTyN1/37ilyf7X/+v/9f/D9P/DfP//Yv1M+v9z6/8v3PrT6v/Pl/5f/3/Q/5/Zsfv5vb9f/6//Z91o/X/u/vvFLU32PwAAAHSQu//+cYv9DwAAANPI3f+AuMX+BwAAgGnk7n9g3NJk/+v/9f/6f/2/7//7/v+W9P/6/yX6f/3/nt+v/9f/s260/j93/4Pilib7HwAAADrI3f/guMX+BwAAgGnk7n9I3GL/AwAAwDRy9z80bmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+5/WNzSZP8DAABAB7n7Hx632P8AAAAwjdz9j4hb7H8AAACYRu7+R8YtTfa//l//r//X/+v/9f9b0v/r/5fo//X/e36//l//z7rN+/+73nDLPW3/n7v/hrilyf4HAACADnL3Pypusf8BAABgGrn7Hx232P8AAAAwjdz9j4lbmuz/y/T/1xz0/037/5sv6P/1/2P2/zfFv2X0//r/S+n/9f8H/f+ZXbmfP92vhP5f/6//Z83m/f9K7/+/f5y7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYBq5+58QtzTZ/77/r/8/z+//5z9X/39C/+/7//p//b/+f9mG/f/d8xdT/39lx+7n9/7+pf7/Lqd4v/6fDkbr/3P3PzFuabL/AQAAoIPc/U+KW+x/AAAAmEbu/ifHLfY/AAAATCN3/1Pilib7X/+v/z/P/r/N9/9vf/L36///+z36f/3/5ej/9f9LfP9f/7/n9/v+v/6fdaP1/7n7nxq3NNn/AAAA0EHu/qfFLfY/AAAATCN3/9PjFvsfAAAAppG7/xlxS5P9r//X/+v/ff///+r/r9H/6/+X6f/1/0v0//r/Pb9f/6//Z91o/X/u/mfGLU32PwAAAHSQu/9ZcYv9DwAAANPI3f/suMX+BwAAgGnk7n9O3NJk/+v/9f/6f/2/7//r/7ek/5+u/7+g/7+V/l//r//X/7NstP4/d/9z45Ym+x8AAAA6yN3/vLjF/gcAAIBp5O5/ftxi/wMAAMA0cve/IG5psv/1//p//b/+X/+v/9+S/n+6/t/3//+D/l//r//X/7NstP4/d/8L45Ym+x8AAAA6yN3/orjF/gcAAIBp5O5/cdxi/wMAAMA0cve/JG5psv/1//p//b/+X/+v/9+S/l//v0T/f/n+//or/Hz6/7Hefz79f/7u6/+Z02j9f+7+l8YtTfY/AAAAdJC7/2Vxi/0PAAAA08jd//K4xf4HAACAaeTuf0Xc0mT/X6n/v3iHk7+u/z8d/f/l36//1//r//X/+n/9/xL9v+//7/n9vv+v/2fdaP1/7v5Xxi1N9j8AAAB0kLv/VXGL/Q8AAADTyN3/6rjF/gcAAIBp5O5/TdzSZP/7/r/+X/+v/9f/6/+3pP/X/y/ZUf9/3eX+pP5f/6//1/+zbLT+P3f/a+OWJvsfAAAAOsjd/7q4xf4HAACAaeTuf33cYv8DAADANHL3vyFuabL/9f/6/6P3/7fT/yf9f/y+6v/1/1dB/6//P/j+/5kdu5/f+/v1//p/1o3W/+fuf2Pc0mT/AwAAQAe5+98Ut9j/AAAAMI3c/W+OW+x/AAAAmEbu/rfELU32v/5f/3/0/t/3/4v+P35f9f/6/6ug/9f/H/T/Z3bsfn7v79f/6/9ZN1r/n7v/rXFLk/0PAAAAHeTuf1vcYv8DAADANHL3vz1usf8BAABgGrn73xG3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z978zbmmy/wEAAKCD3P3vilvsfwAAAJhG7v53xy32PwAAAEwjd/974pYm+1//v0n/f+1t1//f7cZ4gf5f/6//1/8PSf+v/1+i/9f/7/n9+n/9P+tG6/9z9783bmmy/wEAAKCD3P3vi1vsfwAAAJhG7v73xy32PwAAAEwjd/8H4pYm+79H/3/tJT/M9/9P6P/1/wf9v/5/Y/p//f8S/b/+f8/v1//r/1k3Wv+fu/+DcUuT/Q8AAAAd5O7/UNxi/wMAAMA0cvd/OG6x/wEAAGAaufs/Erc02f89+v9L6f9PnHv/f/Od9P/6/6L/1/8f9P/6/xX6f/3/nt8/df9/4aD/51yM1v/n7v9o3NJk/wMAAEAHufs/FrfY/wAAADCN3P0fj1vsfwAAAJhG7v5PxA13vuPxnnSb0v/r/33/X/+v/9f/b0n/r/9fov/X/+/5/VP3/77/zzkZrf/P3f/JuMX//wcAAIBp5O7/VNxi/wMAAMA0cvd/Om6x/wEAAGAaufs/E7c02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/60br/3P3fzZuabL/AQAAoIPc/Z+LW+x/AAAAmEbu/s/HLfY/AAAATCN3/xfilib7X/+v/9f/6//1//r/Len/9f9L9P/6/z2/X/+v/2fdaP1/7v4vxi1N9j8AAAB0kLv/S3GL/Q8AAADTyN3/5bjF/gcAAIBp5O7/StzSZP/r//X/+n/9v/5f/78l/b/+f4n+X/+/5/fr//X/rBut/8/d/9W4pcn+BwAAgA5y938tbrH/AQAAYBq5+78et9j/AAAAMI3c/d+IW5rs/5n7/6Ufpv8/of/X/x/0//r/jen/9f9L9P/6/z2/X/+v/2fdaP1/7v5vxi1N9j8AAAB0kLv/W3GL/Q8AAADTyN3/7bjF/gcAAIBp5O7/TtzSZP/P3P8v0f+f0P/r/w/6f/3/xvT/+v8lx+r/r9f/3+LY/fze36//1/+zbrT+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAaeTu/37cYv8DAADANHL3/yBuabL/9f/6f/2//l//r//fkv5f/7/E9//1/3t+v/5f/8+60fr/3P0/jFua7H8AAADoIHf/j+IW+x8AAACmkbv/x3GL/Q8AAADTyN3/k7ilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/6dxS5P9DwAAAB3k7v9Z3GL/AwAAwDRy9/88brH/AQAAYBq5+38RtzTZ//p//b/+X/+v/9f/b6lt///v/6zq/1fp//X/e36//l//z7rR+v/c/b+MW5rsfwAAAOggd/+v4hb7HwAAAKaRu//XcYv9DwAAANPI3f+buKXJ/tf/6//1//p//b/+f0tt+3/f/z8V/b/+f8/v1//r/1k3Wv+fu//GuKXJ/gcAAIAOcvf/Nm6x/wEAAGAauft/F7fY/wAAADCN3P0X45Ym+1//r/+fsv+/Tv+v/9f/j0L/r/9fov/X/+/5/fp//T/rRuv/c/f/Pm5psv8BAACgg9z9f4hb7H8AAACYRu7+P8Yt9j8AAABMI3f/n+KWJvtf/6//n7L/9/1//b/+fxj6f/3/Ev2//n/P79f/6/9ZN1r/n7v/z3FLk/0PAAAAHeTu/0vcYv8DAADANHL3/zVusf8BAABgGrn7/xa3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z9/89bmmy/wEAAKCD3P03xS32PwAAAEwjd/8/4hb7HwAAAKaRu/+fcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/vwIAAP//yUQoyA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 3m8.407316779s ago: executing program 1 (id=3158): unshare(0x28040680) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m7.215257496s ago: executing program 1 (id=3168): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001240)='./file0\x00', 0x1000, &(0x7f0000000580)=ANY=[@ANYRES32], 0x5, 0x1201, &(0x7f0000003700)="$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") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m6.644803301s ago: executing program 1 (id=3171): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 3m6.127979617s ago: executing program 39 (id=3171): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1m17.454548614s ago: executing program 7 (id=3893): r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x6168, 0x8, 0x6, 0x328}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m14.559318594s ago: executing program 7 (id=3905): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x1, 0xced3}}) 1m11.217258161s ago: executing program 7 (id=3920): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) ppoll(&(0x7f0000000340)=[{r1, 0x4038}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 1m10.962895294s ago: executing program 7 (id=3924): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1m10.561166896s ago: executing program 7 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 1m9.80171553s ago: executing program 7 (id=3936): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r1, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r0, 0x0, 0x6, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1m9.064150651s ago: executing program 40 (id=3936): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r1, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r0, 0x0, 0x6, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 15.788690279s ago: executing program 0 (id=4324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.511051553s ago: executing program 0 (id=4335): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 13.00597466s ago: executing program 2 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 12.417205913s ago: executing program 0 (id=4355): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x2040400) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, 0x0, 0x5000003) 12.310430398s ago: executing program 2 (id=4356): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) 12.103614394s ago: executing program 2 (id=4360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xffe0, 0xe}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 11.798496843s ago: executing program 2 (id=4363): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") ioperm(0x0, 0x7fff, 0x15f9) r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000740)={0x0, 0x96}) 11.42802452s ago: executing program 0 (id=4367): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80002009}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f00000082c0)='./file0\x00', 0x0, 0xa40020, 0x0) 11.143473681s ago: executing program 0 (id=4370): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 10.973857078s ago: executing program 2 (id=4375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x4000000000, {0x7, 0x28, 0x3894, 0xb235333, 0x2, 0x1, 0x4000000, 0xfffffffe, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.350482588s ago: executing program 0 (id=4382): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bd", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x2) 10.335834292s ago: executing program 2 (id=4383): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000340)={[{}, {@errors_remount_ro}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 9.936073491s ago: executing program 41 (id=4382): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bd", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x2) 9.826403619s ago: executing program 42 (id=4383): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000340)={[{}, {@errors_remount_ro}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 6.306328089s ago: executing program 5 (id=4406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x24040840) 6.266915866s ago: executing program 3 (id=4408): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x7]}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 5.989009952s ago: executing program 5 (id=4410): ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000740), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x185f02, 0x2b) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201001) 4.926463815s ago: executing program 5 (id=4415): sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 3.986703027s ago: executing program 6 (id=4418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4040086) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.803567449s ago: executing program 3 (id=4421): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsync(r0) 2.772725329s ago: executing program 6 (id=4422): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') 2.473912792s ago: executing program 5 (id=4423): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@random="def4d4be65d3", @local, @val={@void, {0x8100, 0x2, 0x0, 0xfff}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x3b, 0xb0, 0x66, 0x0, 0xec, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e22, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "e829958cddf2c93f0000000000000100", "182fa25b566f836e5876b2d0c3e01412040f5d0c9120a667366fe504892ed99aa323e6b37d615832f340d983651d8bc7", "19c11a3e0c80f0c4dcb962e0a1768754bf2dbbe6739937497360cc69", {"6f5e6fcc2e06b375cd46366e40d57b18", "9c22a55abc4dde3bbfebf1b01bea6aee"}}}}}}}}, 0xc2) 1.978553544s ago: executing program 6 (id=4424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 1.976543684s ago: executing program 3 (id=4434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.606721808s ago: executing program 6 (id=4425): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x4e22, 0x3, 'sed\x00', 0x7, 0x400000, 0x68}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e23, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x4, 0x44, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.592920776s ago: executing program 3 (id=4426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="616302aaffcf9b2bb19ccccf84f531d9ec214627240b2ac1", 0x18) r1 = accept(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x810) recvmmsg$unix(r1, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/93, 0x5d}], 0x2}}], 0x1, 0x2, 0x0) 1.354867936s ago: executing program 6 (id=4428): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) 1.221430076s ago: executing program 5 (id=4429): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x101}, 0x8) 1.151140729s ago: executing program 6 (id=4430): syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 1.019211923s ago: executing program 4 (id=4431): creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "655446000000000000ecff00000000000000000000220600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close(0x4) 834.714399ms ago: executing program 4 (id=4432): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f, 0x1}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 808.613165ms ago: executing program 4 (id=4433): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) close(0x3) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 745.121096ms ago: executing program 4 (id=4435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 560.910903ms ago: executing program 3 (id=4436): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf", 0x52}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 363.441851ms ago: executing program 3 (id=4437): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc6) pwrite64(r0, &(0x7f0000000240)="ec", 0x1, 0x7013) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 310.421587ms ago: executing program 4 (id=4438): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) 160.4282ms ago: executing program 5 (id=4439): r0 = gettid() syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 4 (id=4440): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) kernel console output (not intermixed with test programs): e_pcp:33408kB local_pcp:14912kB free_cma:0kB [ 602.510364][T17124] lowmem_reserve[]: 0 0 0 0 0 [ 602.515140][T17124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 602.543307][T17158] bond0: (slave bond_slave_1): Releasing backup interface [ 602.643519][T17124] Node 0 DMA32: 1302*4kB (UM) 336*8kB (ME) 141*16kB (UME) 730*32kB (UME) 506*64kB (ME) 298*128kB (UME) 135*256kB (UME) 42*512kB (UME) 27*1024kB (M) 7*2048kB (UME) 231*4096kB (UM) = 1148264kB [ 602.710332][T17124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 602.760383][T17124] Node 1 Normal: 195*4kB (U) 51*8kB (UE) 39*16kB (UME) 110*32kB (UME) 39*64kB (UME) 8*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 942*4096kB (M) = 3875476kB [ 602.843216][T17124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.853841][T15070] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 602.912765][T17124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 602.965477][T17124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.009437][T17124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 603.033877][T15070] usb 4-1: Using ep0 maxpacket: 32 [ 603.047867][T15070] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 603.059747][T15070] usb 4-1: config 0 has no interface number 0 [ 603.108240][T17124] 63365 total pagecache pages [ 603.121336][T15070] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 603.146376][T17124] 0 pages in swap cache [ 603.189422][T15070] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 603.199043][T17124] Free swap = 124996kB [ 603.218466][T15070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.224101][T17124] Total swap = 124996kB [ 603.280498][ T978] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 603.314932][T15070] usb 4-1: Product: syz [ 603.330381][T17124] 2097051 pages RAM [ 603.336183][T17124] 0 pages HighMem/MovableOnly [ 603.344809][T15070] usb 4-1: Manufacturer: syz [ 603.349405][T15070] usb 4-1: SerialNumber: syz [ 603.370429][T17124] 424121 pages reserved [ 603.388289][T17124] 0 pages cma reserved [ 603.412379][T15070] usb 4-1: config 0 descriptor?? [ 603.434681][T17170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.473139][ T978] usb 8-1: Using ep0 maxpacket: 32 [ 603.482030][ T978] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 603.511259][ T978] usb 8-1: config 0 has no interface number 0 [ 603.544870][ T978] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 603.584651][ T978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.615992][ T978] usb 8-1: Product: syz [ 603.630522][ T978] usb 8-1: Manufacturer: syz [ 603.648907][T17170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.660411][ T978] usb 8-1: SerialNumber: syz [ 603.685027][ T978] usb 8-1: config 0 descriptor?? [ 603.718772][ T978] smsc95xx v2.0.0 [ 603.730243][ T978] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 603.770451][ T978] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 604.175969][ T30] audit: type=1800 audit(1763366345.899:153): pid=17160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3766" name="file1" dev="tmpfs" ino=1702 res=0 errno=0 [ 604.311896][T15070] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 604.351759][T15070] asix 4-1:0.188: probe with driver asix failed with error -71 [ 604.357198][ T10] usb 8-1: USB disconnect, device number 27 [ 604.431614][T15070] usb 4-1: USB disconnect, device number 43 [ 604.723699][T17185] loop4: detected capacity change from 0 to 2048 [ 604.823584][T17186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 604.939745][T17185] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 605.032416][T17185] Remounting filesystem read-only [ 605.166776][ T30] audit: type=1800 audit(1763366346.879:154): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3778" name="file2" dev="overlay" ino=3624 res=0 errno=0 [ 605.294321][T15506] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 605.405401][T17200] loop6: detected capacity change from 0 to 7 [ 605.449659][T17200] Dev loop6: unable to read RDB block 7 [ 605.472242][T17200] loop6: AHDI p1 p2 p3 [ 605.479738][T17200] loop6: partition table partially beyond EOD, truncated [ 605.517193][T17200] loop6: p1 start 4217409618 is beyond EOD, truncated [ 605.540901][T17200] loop6: p2 size 98 extends beyond EOD, truncated [ 605.854995][T13332] udevd[13332]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 606.023265][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 606.183939][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.207805][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.244843][ T10] usb 8-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 606.269873][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3792'. [ 606.292251][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.322736][ T10] usb 8-1: config 0 descriptor?? [ 606.717621][T17215] loop3: detected capacity change from 0 to 32768 [ 606.731104][ T5950] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 606.784355][T17215] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3786 (17215) [ 606.801061][T17238] loop6: detected capacity change from 0 to 2048 [ 606.804893][ T10] a4tech 0003:09DA:0006.0045: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.7-1/input0 [ 606.880800][T17215] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 606.925004][T17215] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 606.934702][ T5950] usb 6-1: Using ep0 maxpacket: 32 [ 606.951926][ T5950] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 606.954225][T17245] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.966384][ T5950] usb 6-1: config 0 has no interface number 0 [ 606.974705][ T10] usb 8-1: USB disconnect, device number 28 [ 607.001587][T17215] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 607.044151][ T5950] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.121327][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.129347][ T5950] usb 6-1: Product: syz [ 607.190776][ T5950] usb 6-1: Manufacturer: syz [ 607.226058][ T5950] usb 6-1: SerialNumber: syz [ 607.258805][ T5950] usb 6-1: config 0 descriptor?? [ 607.280864][T17215] BTRFS info (device loop3): rebuilding free space tree [ 607.316959][ T5950] smsc95xx v2.0.0 [ 607.322691][ T5950] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 607.365701][T17250] fido_id[17250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 607.367128][T17215] BTRFS info (device loop3): disabling free space tree [ 607.380912][ T5950] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 607.428550][T17215] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 607.500326][T17215] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 607.591418][T17215] BTRFS info (device loop3): setting nodatasum [ 607.597625][T17215] BTRFS info (device loop3): enabling ssd optimizations [ 607.635388][T17215] BTRFS info (device loop3): using spread ssd allocation scheme [ 607.647434][T17215] BTRFS info (device loop3): turning off barriers [ 607.655959][T17215] BTRFS info (device loop3): enabling disk space caching [ 607.676915][T17215] BTRFS info (device loop3): force clearing of disk cache [ 607.769055][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3801'. [ 607.944059][T17273] loop4: detected capacity change from 0 to 256 [ 608.453756][ T5831] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 608.694777][ T10] usb 6-1: USB disconnect, device number 23 [ 608.702200][T17285] loop7: detected capacity change from 0 to 32768 [ 608.711378][T17285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3811 (17285) [ 608.743144][T17285] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.753804][T17285] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 608.957193][T17285] BTRFS info (device loop7): enabling ssd optimizations [ 608.964230][T17285] BTRFS info (device loop7): turning on async discard [ 608.971067][T17285] BTRFS info (device loop7): enabling free space tree [ 609.391568][ T8134] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 610.560346][ T3572] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 610.769833][T17342] loop6: detected capacity change from 0 to 64 [ 610.979006][ T30] audit: type=1800 audit(1763366352.699:155): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3826" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 611.226607][T17356] loop7: detected capacity change from 0 to 47 [ 611.613600][ T30] audit: type=1326 audit(1763366353.339:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 611.979510][T17372] loop3: detected capacity change from 0 to 32768 [ 611.988629][ T30] audit: type=1326 audit(1763366353.339:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.011177][T17372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3837 (17372) [ 612.025029][ T30] audit: type=1326 audit(1763366353.339:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.048167][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 612.056469][ T30] audit: type=1326 audit(1763366353.339:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.093412][T17372] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 612.104047][T17372] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 612.178502][T17380] loop2: detected capacity change from 0 to 1024 [ 612.218988][ T30] audit: type=1326 audit(1763366353.339:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.242696][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 612.317970][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 612.361968][T17372] BTRFS info (device loop3): enabling ssd optimizations [ 612.368965][T17372] BTRFS info (device loop3): turning on async discard [ 612.377065][T17372] BTRFS info (device loop3): enabling free space tree [ 612.451581][ T10] usb 7-1: config 0 has no interface number 0 [ 612.452886][ T30] audit: type=1326 audit(1763366353.339:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.562596][ T30] audit: type=1326 audit(1763366353.339:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.570523][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 612.584947][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.647246][ T3572] hfsplus: b-tree write err: -5, ino 4 [ 612.662552][ T5831] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 612.695116][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.720347][ T30] audit: type=1326 audit(1763366353.369:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.722577][ T10] usb 7-1: Product: syz [ 612.764511][ T30] audit: type=1326 audit(1763366353.369:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17366 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7ffc0000 [ 612.786860][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.824015][ T10] usb 7-1: Manufacturer: syz [ 612.851962][ T10] usb 7-1: SerialNumber: syz [ 612.889994][ T10] usb 7-1: config 0 descriptor?? [ 612.908699][ T10] smsc95xx v2.0.0 [ 612.928484][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 612.949437][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 613.443639][T17365] loop4: detected capacity change from 0 to 32768 [ 614.027986][T17365] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 614.348818][T17365] XFS (loop4): Ending clean mount [ 614.382754][T17365] XFS (loop4): Quotacheck needed: Please wait. [ 614.382969][ T10] usb 7-1: USB disconnect, device number 25 [ 614.490874][T17365] XFS (loop4): Quotacheck: Done. [ 614.647383][T15506] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 615.460721][T17405] Bluetooth: hci2: command 0x0406 tx timeout [ 616.180159][T17438] loop4: detected capacity change from 0 to 2048 [ 616.300450][T17439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.391129][T17441] blktrace: Concurrent blktraces are not allowed on loop8 [ 617.540694][ T5950] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 617.723929][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.748465][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.765349][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 617.782322][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.800617][ T5950] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.809634][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.831312][ T5950] usb 4-1: config 0 descriptor?? [ 617.912041][ T978] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 618.002322][T17452] loop4: detected capacity change from 0 to 40427 [ 618.035175][T17452] F2FS-fs (loop4): Image doesn't support compression [ 618.068601][T17452] F2FS-fs (loop4): build fault injection rate: 684 [ 618.089273][T17452] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 618.103370][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 618.126147][ T978] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 618.193061][T17452] F2FS-fs (loop4): invalid crc value [ 618.199165][ T978] usb 3-1: config 0 has no interface number 0 [ 618.247723][ T978] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 618.283802][ T5950] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max [ 618.295800][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.318424][ T978] usb 3-1: Product: syz [ 618.370194][ T978] usb 3-1: Manufacturer: syz [ 618.478836][ T978] usb 3-1: SerialNumber: syz [ 618.560681][ T5950] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 618.586724][T17452] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 618.611586][ T978] usb 3-1: config 0 descriptor?? [ 618.628156][T17452] F2FS-fs (loop4): Start checkpoint disabled! [ 618.637110][ T978] smsc95xx v2.0.0 [ 618.653351][ T978] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 618.677087][T17452] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 618.690016][ T978] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 618.747912][T17452] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 618.886072][T17452] syz.4.3854: attempt to access beyond end of device [ 618.886072][T17452] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 619.000476][T17452] syz.4.3854: attempt to access beyond end of device [ 619.000476][T17452] loop4: rw=0, sector=45104, nr_sectors = 8 limit=40427 [ 619.227651][ T3430] kworker/u8:7: attempt to access beyond end of device [ 619.227651][ T3430] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 619.282433][ T3430] CPU: 1 UID: 0 PID: 3430 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 619.282466][ T3430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.282500][ T3430] Workqueue: writeback wb_workfn (flush-7:4) [ 619.282542][ T3430] Call Trace: [ 619.282552][ T3430] [ 619.282563][ T3430] dump_stack_lvl+0x189/0x250 [ 619.282604][ T3430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.282639][ T3430] ? __pfx_queue_work_on+0x10/0x10 [ 619.282667][ T3430] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 619.282700][ T3430] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.282747][ T3430] f2fs_handle_critical_error+0x37c/0x540 [ 619.282792][ T3430] f2fs_write_end_io+0x886/0xb60 [ 619.282838][ T3430] __submit_merged_bio+0x27a/0x6a0 [ 619.282882][ T3430] __submit_merged_write_cond+0x255/0x530 [ 619.282926][ T3430] f2fs_write_data_pages+0x261d/0x3000 [ 619.282989][ T3430] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 619.283029][ T3430] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 619.283097][ T3430] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 619.283149][ T3430] ? trace_f2fs_writepages+0x7f/0x200 [ 619.283187][ T3430] ? f2fs_write_node_pages+0x478/0x6e0 [ 619.283228][ T3430] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 619.283268][ T3430] ? __lock_acquire+0xab9/0xd20 [ 619.283300][ T3430] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 619.283326][ T3430] do_writepages+0x32e/0x550 [ 619.283364][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.283392][ T3430] ? reacquire_held_locks+0x127/0x1d0 [ 619.283421][ T3430] ? writeback_sb_inodes+0x384/0x1010 [ 619.283467][ T3430] __writeback_single_inode+0x145/0xff0 [ 619.283507][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.283534][ T3430] ? do_raw_spin_unlock+0x122/0x240 [ 619.283573][ T3430] writeback_sb_inodes+0x6c7/0x1010 [ 619.283638][ T3430] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 619.283719][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.283745][ T3430] ? rcu_is_watching+0x15/0xb0 [ 619.283773][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.283812][ T3430] wb_writeback+0x43b/0xaf0 [ 619.283855][ T3430] ? queue_io+0x321/0x590 [ 619.283893][ T3430] ? __pfx_wb_writeback+0x10/0x10 [ 619.283938][ T3430] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.283977][ T3430] wb_workfn+0x409/0xef0 [ 619.284022][ T3430] ? __pfx_wb_workfn+0x10/0x10 [ 619.284055][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284082][ T3430] ? __lock_acquire+0xab9/0xd20 [ 619.284119][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284151][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284184][ T3430] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.284215][ T3430] ? process_scheduled_works+0x9ef/0x17b0 [ 619.284242][ T3430] ? process_scheduled_works+0x9ef/0x17b0 [ 619.284272][ T3430] process_scheduled_works+0xae1/0x17b0 [ 619.284335][ T3430] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.284372][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284411][ T3430] worker_thread+0x8a0/0xda0 [ 619.284474][ T3430] kthread+0x711/0x8a0 [ 619.284520][ T3430] ? __pfx_worker_thread+0x10/0x10 [ 619.284548][ T3430] ? __pfx_kthread+0x10/0x10 [ 619.284579][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284612][ T3430] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.284644][ T3430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.284673][ T3430] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.284707][ T3430] ? __pfx_kthread+0x10/0x10 [ 619.284744][ T3430] ret_from_fork+0x4bc/0x870 [ 619.284775][ T3430] ? __pfx_ret_from_fork+0x10/0x10 [ 619.284812][ T3430] ? __switch_to_asm+0x39/0x70 [ 619.284833][ T3430] ? __switch_to_asm+0x33/0x70 [ 619.284853][ T3430] ? __pfx_kthread+0x10/0x10 [ 619.284888][ T3430] ret_from_fork_asm+0x1a/0x30 [ 619.284933][ T3430] [ 619.289456][ T3430] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 619.667263][ T5926] usb 3-1: USB disconnect, device number 37 [ 620.542061][ T5919] usb 4-1: USB disconnect, device number 44 [ 620.790587][ T978] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 620.989084][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 621.008784][ T978] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 621.040576][ T978] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 621.079823][ T978] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 621.110433][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.156502][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 621.192904][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 621.224115][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 621.272501][ T978] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 621.340913][ T978] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 621.392453][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.421856][ T978] usb 7-1: config 0 descriptor?? [ 621.428781][T17502] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 621.562369][T17496] loop7: detected capacity change from 0 to 32768 [ 621.641969][T17496] ERROR: (device loop7): dbAllocNext: Corrupt dmap page [ 621.641969][T17496] [ 621.655921][ T978] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 621.682748][T17496] ERROR: (device loop7): remounting filesystem as read-only [ 621.741582][T17517] ERROR: (device loop7): dbAllocNext: Corrupt dmap page [ 621.741582][T17517] [ 621.869029][ C0] usblp0: nonzero read bulk status received: -71 [ 621.878295][ T5919] usb 7-1: USB disconnect, device number 26 [ 622.072208][T17509] loop3: detected capacity change from 0 to 32768 [ 622.099335][T17501] usblp0: removed [ 622.137945][T17509] JBD2: Ignoring recovery information on journal [ 622.188543][T17514] loop2: detected capacity change from 0 to 32768 [ 622.284750][T17514] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3881 (17514) [ 622.359240][T17509] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 622.395949][T17514] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 622.439801][T17514] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 622.587503][T17533] loop7: detected capacity change from 0 to 512 [ 622.802906][T17514] BTRFS info (device loop2): enabling ssd optimizations [ 622.852757][T17514] BTRFS info (device loop2): turning on async discard [ 622.888101][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 622.888121][ T30] audit: type=1326 audit(1763366364.609:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17535 comm="syz.5.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538f6c9 code=0x7fc00000 [ 622.948052][T17514] BTRFS info (device loop2): enabling free space tree [ 623.159490][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 623.270373][ T30] audit: type=1800 audit(1763366364.979:170): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3881" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 623.469561][ T30] audit: type=1326 audit(1763366365.179:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17535 comm="syz.5.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f696538f6c9 code=0x7fc00000 [ 623.605892][T17528] loop4: detected capacity change from 0 to 131072 [ 623.614522][T17528] F2FS-fs (loop4): Test dummy encryption mode enabled [ 623.627122][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.635704][T17528] F2FS-fs (loop4): invalid crc value [ 623.643641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.650934][ T5845] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 623.781660][T17528] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 623.812811][T17528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 625.532646][T17587] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3901'. [ 625.582209][T17587] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3901'. [ 626.410512][T17572] loop3: detected capacity change from 0 to 262144 [ 626.421109][T17572] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3890 (17572) [ 626.446215][T17572] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 626.456408][T17572] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 626.749283][T17572] BTRFS info (device loop3): enabling ssd optimizations [ 626.756318][T17572] BTRFS info (device loop3): enabling free space tree [ 627.764279][ T5831] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 628.573904][ T5919] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 628.670355][ T978] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 628.780855][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 628.792246][ T5919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 628.810482][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.831487][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 628.838527][ T5919] pvrusb2: ********** [ 628.849288][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 628.880339][ T5919] pvrusb2: Important functionality might not be entirely working. [ 628.880373][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 628.888143][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 628.888161][ T5919] pvrusb2: ********** [ 628.939270][ T978] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 628.947943][ T978] usb 5-1: config 0 has no interface number 0 [ 628.974466][ T978] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 628.990358][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.008774][ T978] usb 5-1: Product: syz [ 629.030019][ T978] usb 5-1: Manufacturer: syz [ 629.032829][ T2339] pvrusb2: Invalid write control endpoint [ 629.044174][ T978] usb 5-1: SerialNumber: syz [ 629.076343][ T978] usb 5-1: config 0 descriptor?? [ 629.116507][ T978] smsc95xx v2.0.0 [ 629.120158][ T978] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 629.150721][ T978] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 629.250490][ T2339] pvrusb2: Invalid write control endpoint [ 629.256230][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 629.298156][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 629.317580][T17641] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3917'. [ 629.340428][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 629.369155][ T2339] pvrusb2: Device being rendered inoperable [ 629.396342][T17626] pvrusb2: Attempted to execute control transfer when device not ok [ 629.419223][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 629.425133][ T978] usb 3-1: USB disconnect, device number 38 [ 629.438529][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 629.464216][ T2339] pvrusb2: Attached sub-driver cx25840 [ 629.475229][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 629.506323][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 629.987923][ T5919] usb 5-1: USB disconnect, device number 23 [ 630.011738][T17660] loop7: detected capacity change from 0 to 512 [ 630.069821][T17660] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 630.148612][T17660] EXT4-fs (loop7): 1 truncate cleaned up [ 630.203164][T17660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.270469][ T8134] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 630.299084][ T8134] EXT4-fs (loop7): Remounting filesystem read-only [ 630.537566][T17676] netlink: 'syz.6.3930': attribute type 12 has an invalid length. [ 630.548259][T17676] netlink: 'syz.6.3930': attribute type 29 has an invalid length. [ 630.558791][T17676] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3930'. [ 630.572320][T17676] netlink: 'syz.6.3930': attribute type 2 has an invalid length. [ 630.580125][T17676] netlink: 'syz.6.3930': attribute type 3 has an invalid length. [ 630.962788][T13812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.240835][ T5926] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 631.410361][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 631.443094][ T5926] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 631.470752][ T5926] usb 3-1: config 0 has no interface number 0 [ 631.498197][ T5926] usb 3-1: config 0 interface 12 has no altsetting 0 [ 631.519691][ T5926] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 631.555168][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.592111][ T5926] usb 3-1: Product: syz [ 631.596281][ T5926] usb 3-1: Manufacturer: syz [ 631.612703][ T5926] usb 3-1: SerialNumber: syz [ 631.636122][ T5926] usb 3-1: config 0 descriptor?? [ 631.894138][T17692] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3939'. [ 632.390661][T17705] input: syz0 as /devices/virtual/input/input56 [ 632.566496][T17405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.579692][T17405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.592209][ T5919] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 632.592236][T17405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.608634][T17405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.616983][T17405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.752635][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 632.770115][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.790897][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.801263][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.843825][ T5919] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 632.845770][T17688] loop3: detected capacity change from 0 to 65536 [ 632.866345][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.885368][ T5919] usb 6-1: config 0 descriptor?? [ 632.897274][ T5926] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 632.909878][T17688] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 632.915750][ T5926] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 632.951349][ T5926] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 632.961359][ T5926] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 632.989502][T17688] XFS (loop3): Ending clean mount [ 633.004285][ T30] audit: type=1800 audit(1763366374.729:172): pid=17688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3911" name="file1" dev="loop3" ino=38 res=0 errno=0 [ 633.005391][T17688] XFS (loop3): User initiated shutdown received. [ 633.059218][ T5926] usb 3-1: USB disconnect, device number 39 [ 633.063297][T17688] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 633.079469][T17688] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 633.129397][T17706] chnl_net:caif_netlink_parms(): no params data found [ 633.129413][ T5831] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 633.355265][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.364080][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.371902][T17706] bridge_slave_0: entered allmulticast mode [ 633.388140][ T5919] HID 045e:07da: Invalid code 65791 type 1 [ 633.410219][T17706] bridge_slave_0: entered promiscuous mode [ 633.419762][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0047/input/input57 [ 633.451848][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.458970][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.488243][T17706] bridge_slave_1: entered allmulticast mode [ 633.496895][ T5919] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 633.513670][T17706] bridge_slave_1: entered promiscuous mode [ 633.597842][T15070] usb 6-1: USB disconnect, device number 24 [ 633.628257][T17723] fido_id[17723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 633.689680][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.705312][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.751196][T17706] team0: Port device team_slave_0 added [ 633.759286][T17706] team0: Port device team_slave_1 added [ 633.796685][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.803794][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.830371][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.842780][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.849702][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.889743][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.942085][T17706] hsr_slave_0: entered promiscuous mode [ 633.948523][T17706] hsr_slave_1: entered promiscuous mode [ 633.954879][T17706] debugfs: 'hsr0' already exists in 'hsr' [ 633.960634][T17706] Cannot create hsr debugfs directory [ 634.474948][T17706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 634.485671][T17706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 634.498033][T17706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 634.508565][T17706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 634.585331][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.609626][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.624955][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.632091][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.646522][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.653655][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.661294][ T5840] Bluetooth: hci1: command tx timeout [ 634.867717][T17706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.915755][T17706] veth0_vlan: entered promiscuous mode [ 634.932009][T17706] veth1_vlan: entered promiscuous mode [ 634.963942][T17706] veth0_macvtap: entered promiscuous mode [ 634.973432][T17706] veth1_macvtap: entered promiscuous mode [ 634.993796][T17706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.011062][T17706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.026816][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.036193][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.046727][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.061556][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.134993][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.153116][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.181376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.189212][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.285050][T17735] netlink: 'syz.6.3961': attribute type 1 has an invalid length. [ 635.336080][T17744] loop0: detected capacity change from 0 to 128 [ 635.391680][T17744] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 635.395614][T17735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.432661][T17744] hpfs: filesystem error: improperly stopped [ 635.480400][T17744] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 635.524934][T17744] hpfs: You really don't want any checks? You are crazy... [ 635.560011][T17747] bond1: (slave gretap1): making interface the new active one [ 635.569689][T17747] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 635.610856][T17744] hpfs: hpfs_map_sector(): read error [ 635.618443][T17744] hpfs: code page support is disabled [ 635.680154][T17744] hpfs: hpfs_map_4sectors(): unaligned read [ 635.690174][T17744] hpfs: hpfs_map_4sectors(): unaligned read [ 635.718083][T17744] hpfs: filesystem error: unable to find root dir [ 635.795776][ T30] audit: type=1326 audit(1763366377.509:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.3937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08e558f6c9 code=0x0 [ 636.588792][T17770] loop3: detected capacity change from 0 to 512 [ 636.594698][T17772] loop2: detected capacity change from 0 to 256 [ 636.643198][T17770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3952: bg 0: block 393: padding at end of block bitmap is not set [ 636.678337][T17772] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 636.721020][T17770] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 636.742937][ T5840] Bluetooth: hci1: command tx timeout [ 636.764858][T17770] EXT4-fs (loop3): 2 truncates cleaned up [ 636.777363][T17772] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 636.785991][ T978] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 636.813099][T17770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.882114][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.970389][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 636.990602][ T978] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 637.010589][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.030745][ T978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 637.080565][ T978] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 637.110072][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.148188][ T978] usb 6-1: config 0 descriptor?? [ 637.583336][ T978] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0048/input/input58 [ 637.747797][ T978] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0048/input/input59 [ 637.819899][ T978] kye 0003:0458:5013.0048: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 637.905362][ T978] usb 6-1: USB disconnect, device number 25 [ 637.978880][T17807] loop3: detected capacity change from 0 to 64 [ 638.097362][ T30] audit: type=1800 audit(1763366379.819:174): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3973" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 638.132859][T17804] fido_id[17804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 638.160041][T17807] syz.3.3973: attempt to access beyond end of device [ 638.160041][T17807] loop3: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 638.789111][T17817] program syz.5.3978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.830829][ T5840] Bluetooth: hci1: command tx timeout [ 639.641503][T17811] loop2: detected capacity change from 0 to 131072 [ 639.696470][T17811] F2FS-fs (loop2): invalid crc value [ 639.715828][T17828] loop3: detected capacity change from 0 to 64 [ 639.812001][ T30] audit: type=1800 audit(1763366381.529:175): pid=17828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3983" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 639.816774][T17811] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 639.859011][T17811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 639.876790][ T30] audit: type=1800 audit(1763366381.529:176): pid=17828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3983" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 639.897316][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.525273][T17845] loop0: detected capacity change from 0 to 4096 [ 640.580724][T17848] loop6: detected capacity change from 0 to 1024 [ 640.744792][T17848] hfsplus: xattr searching failed [ 640.815837][T17854] hfsplus: xattr searching failed [ 640.868223][T17854] hfsplus: xattr searching failed [ 640.901127][T17405] Bluetooth: hci1: command tx timeout [ 640.990367][ T30] audit: type=1800 audit(1763366382.709:177): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3989" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 641.070143][T17405] Bluetooth: hci3: command 0x0406 tx timeout [ 641.143491][ T30] audit: type=1800 audit(1763366382.709:178): pid=17855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3989" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 641.164964][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.253125][T17859] Bluetooth: hci0: invalid length 4, exp 2 for type 30 [ 641.590410][T17869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.804311][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4000'. [ 642.237808][T17882] netlink: 'syz.5.4006': attribute type 2 has an invalid length. [ 642.301088][T17882] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4006'. [ 642.446147][T17861] loop4: detected capacity change from 0 to 32768 [ 642.511838][T17861] find_entry called with index >= next_index [ 642.548658][T17861] find_entry called with index >= next_index [ 642.568884][T17861] find_entry called with index >= next_index [ 642.589023][T17861] find_entry called with index >= next_index [ 642.636178][T17861] find_entry called with index >= next_index [ 642.686093][T17861] add_index: next_index = 0. Resetting! [ 642.702079][T17861] find_entry called with index >= next_index [ 642.708415][T17861] find_entry called with index >= next_index [ 642.745463][T17861] find_entry called with index >= next_index [ 642.780527][T17861] find_entry called with index >= next_index [ 642.816693][T17861] find_entry called with index >= next_index [ 642.869745][T17861] find_entry called with index >= next_index [ 642.903858][T17861] find_entry called with index >= next_index [ 642.916877][T17874] loop3: detected capacity change from 0 to 32768 [ 643.003228][ T30] audit: type=1800 audit(1763366384.729:179): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4001" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 644.529836][T17924] loop2: detected capacity change from 0 to 128 [ 644.591228][T17924] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 644.658036][T17924] hpfs: filesystem error: improperly stopped [ 644.720360][T17924] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 644.749926][T17924] hpfs: You really don't want any checks? You are crazy... [ 644.795725][T17924] hpfs: hpfs_map_sector(): read error [ 644.834643][T17924] hpfs: code page support is disabled [ 644.840146][T17924] hpfs: hpfs_map_4sectors(): unaligned read [ 644.888310][T17924] hpfs: hpfs_map_4sectors(): unaligned read [ 644.910332][T17924] hpfs: filesystem error: unable to find root dir [ 644.941097][T17907] loop6: detected capacity change from 0 to 32768 [ 645.045963][T17907] JBD2: Ignoring recovery information on journal [ 645.130080][T17907] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 645.162253][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 645.346823][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 645.375077][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 645.391936][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 645.402465][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.418519][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.428667][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.442129][T13441] ocfs2: Unmounting device (7,6) on (node local) [ 645.448873][ T10] usb 5-1: config 0 descriptor?? [ 645.923072][ T10] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 645.955365][ T30] audit: type=1326 audit(1763366387.669:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17960 comm="syz.3.4039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa28838f6c9 code=0x0 [ 646.118774][T17970] loop6: detected capacity change from 0 to 512 [ 646.164800][T17970] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.4042: inode has both inline data and extents flags [ 646.228229][T17970] EXT4-fs (loop6): get root inode failed [ 646.246563][T17970] EXT4-fs (loop6): mount failed [ 646.749455][T17959] loop2: detected capacity change from 0 to 32768 [ 646.769830][T17959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4038 (17959) [ 646.844281][T17959] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 646.883429][T17959] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 646.994602][T17995] loop3: detected capacity change from 0 to 1024 [ 647.082101][T17959] BTRFS info (device loop2): setting nodatasum [ 647.093384][T17959] BTRFS info (device loop2): allowing degraded mounts [ 647.124048][T17959] BTRFS info (device loop2): disabling tree log [ 647.130434][T17959] BTRFS info (device loop2): turning on async discard [ 647.138159][T17959] BTRFS info (device loop2): enabling free space tree [ 647.295296][T17995] hfsplus: xattr searching failed [ 647.323138][ T30] audit: type=1800 audit(1763366389.049:181): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4049" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 647.331486][T17995] hfsplus: xattr searching failed [ 647.343574][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.445906][ T30] audit: type=1800 audit(1763366389.169:182): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4049" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 647.564426][T17983] loop0: detected capacity change from 0 to 32768 [ 647.641677][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.674921][T17983] JBD2: Ignoring recovery information on journal [ 647.763398][ T3430] hfsplus: b-tree write err: -5, ino 3 [ 647.807697][T17983] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 647.961694][T15070] usb 5-1: USB disconnect, device number 24 [ 648.154446][T17706] ocfs2: Unmounting device (7,0) on (node local) [ 648.436181][ T5950] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 648.630620][ T5950] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 648.644327][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 648.685615][ T5950] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 648.695044][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 648.724265][ T5950] usb 6-1: Product: syz [ 648.735290][ T5950] usb 6-1: Manufacturer: syz [ 648.757482][ T5950] usb 6-1: SerialNumber: syz [ 648.757640][T18039] tipc: Enabling of bearer rejected, already enabled [ 648.778126][ T5950] usb 6-1: config 0 descriptor?? [ 648.856844][ T5950] usb 6-1: selecting invalid altsetting 0 [ 649.068824][ T5926] usb 6-1: USB disconnect, device number 26 [ 649.186118][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.390835][ T5950] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 649.570649][ T5926] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 649.575745][T18050] loop6: detected capacity change from 0 to 2048 [ 649.590530][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 649.599449][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.627000][T18050] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18576, location=18576 [ 649.637126][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.669843][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.721138][ T5950] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.750396][T18050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.759313][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.783046][ T5926] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 649.794002][ T5950] usb 5-1: config 0 descriptor?? [ 649.819832][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.840694][T15070] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 649.857400][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 649.900525][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 649.939289][ T5926] usb 6-1: Product: syz [ 649.959550][ T5926] usb 6-1: Manufacturer: syz [ 649.979673][ T5926] usb 6-1: SerialNumber: syz [ 650.010065][ T5926] usb 6-1: config 0 descriptor?? [ 650.037523][ T5926] usb 6-1: selecting invalid altsetting 0 [ 650.040178][T15070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.083577][T15070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.122132][T15070] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 650.156771][T15070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.280231][ T5950] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 650.309918][T15070] usb 4-1: config 0 descriptor?? [ 650.330148][ T5950] microsoft 0003:045E:07DA.004A: unsupported Resolution Multiplier 0 [ 650.342313][ T5927] usb 6-1: USB disconnect, device number 27 [ 650.401089][ T5950] microsoft 0003:045E:07DA.004A: implement() called with n (152) > 32! (kworker/1:5) [ 650.483870][ T5950] microsoft 0003:045E:07DA.004A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 650.533088][ T5950] microsoft 0003:045E:07DA.004A: no inputs found [ 650.544980][T15070] usbhid 4-1:0.0: can't add hid device: -71 [ 650.555685][ T5950] microsoft 0003:045E:07DA.004A: could not initialize ff, continuing anyway [ 650.574978][T15070] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 650.612609][ T5950] usb 5-1: USB disconnect, device number 25 [ 650.618891][T15070] usb 4-1: USB disconnect, device number 45 [ 650.757265][T18062] fido_id[18062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 650.885243][T18056] loop0: detected capacity change from 0 to 40427 [ 650.899501][T18056] F2FS-fs (loop0): invalid crc value [ 650.996110][T18056] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 651.011651][T18056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 651.059405][T18056] syz.0.4069: attempt to access beyond end of device [ 651.059405][T18056] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 651.095823][T18056] CPU: 1 UID: 0 PID: 18056 Comm: syz.0.4069 Not tainted syzkaller #0 PREEMPT(full) [ 651.095856][T18056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.095872][T18056] Call Trace: [ 651.095883][T18056] [ 651.095893][T18056] dump_stack_lvl+0x189/0x250 [ 651.095937][T18056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.095974][T18056] ? __pfx_queue_work_on+0x10/0x10 [ 651.096003][T18056] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 651.096040][T18056] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 651.096091][T18056] f2fs_handle_critical_error+0x37c/0x540 [ 651.096140][T18056] f2fs_write_end_io+0x886/0xb60 [ 651.096189][T18056] __submit_merged_bio+0x27a/0x6a0 [ 651.096235][T18056] __submit_merged_write_cond+0x255/0x530 [ 651.096282][T18056] f2fs_write_data_pages+0x261d/0x3000 [ 651.096350][T18056] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 651.096431][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.096461][T18056] ? check_path+0x21/0x40 [ 651.096489][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.096518][T18056] ? check_noncircular+0xe0/0x160 [ 651.096610][T18056] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 651.096638][T18056] do_writepages+0x32e/0x550 [ 651.096679][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.096713][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.096747][T18056] ? do_raw_spin_unlock+0x122/0x240 [ 651.096789][T18056] filemap_fdatawrite+0x199/0x240 [ 651.096826][T18056] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 651.096916][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.096952][T18056] ? do_raw_spin_unlock+0x122/0x240 [ 651.096993][T18056] f2fs_sync_dirty_inodes+0x31f/0x830 [ 651.097041][T18056] f2fs_write_checkpoint+0x93e/0x2440 [ 651.097070][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097137][T18056] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 651.097212][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097241][T18056] ? down_write+0x162/0x1f0 [ 651.097267][T18056] ? __pfx_down_write+0x10/0x10 [ 651.097307][T18056] f2fs_issue_checkpoint+0x3b8/0x610 [ 651.097341][T18056] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 651.097369][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097403][T18056] ? __lock_acquire+0xab9/0xd20 [ 651.097453][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097490][T18056] ? __lock_acquire+0xab9/0xd20 [ 651.097558][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097587][T18056] ? f2fs_sync_fs+0x200/0x3d0 [ 651.097627][T18056] f2fs_do_sync_file+0x869/0x1860 [ 651.097668][T18056] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 651.097748][T18056] ? f2fs_file_write_iter+0x4ac/0x24a0 [ 651.097785][T18056] ? vfs_fsync_range+0x12c/0x1c0 [ 651.097812][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097841][T18056] ? f2fs_sync_file+0xe9/0x160 [ 651.097871][T18056] f2fs_file_write_iter+0x753/0x24a0 [ 651.097930][T18056] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 651.097970][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.097998][T18056] ? __asan_memset+0x22/0x50 [ 651.098042][T18056] iter_file_splice_write+0x975/0x10e0 [ 651.098116][T18056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 651.098162][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098190][T18056] ? rcu_read_lock_any_held+0xb3/0x120 [ 651.098235][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098268][T18056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 651.098310][T18056] direct_splice_actor+0x101/0x160 [ 651.098356][T18056] splice_direct_to_actor+0x5a8/0xcc0 [ 651.098423][T18056] ? __pfx_direct_splice_actor+0x10/0x10 [ 651.098464][T18056] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 651.098519][T18056] do_splice_direct+0x181/0x270 [ 651.098557][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098591][T18056] ? __pfx_do_splice_direct+0x10/0x10 [ 651.098633][T18056] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 651.098668][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098696][T18056] ? rw_verify_area+0x255/0x4d0 [ 651.098735][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098771][T18056] do_sendfile+0x4da/0x7e0 [ 651.098798][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098839][T18056] ? __pfx_do_sendfile+0x10/0x10 [ 651.098875][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.098904][T18056] ? __se_sys_futex+0x36f/0x400 [ 651.098948][T18056] __se_sys_sendfile64+0x13e/0x190 [ 651.098978][T18056] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 651.099011][T18056] ? do_syscall_64+0xbe/0xfa0 [ 651.099047][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.099082][T18056] do_syscall_64+0xfa/0xfa0 [ 651.099118][T18056] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.099156][T18056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.099180][T18056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.099209][T18056] ? exc_page_fault+0xab/0x100 [ 651.099250][T18056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.099275][T18056] RIP: 0033:0x7f08e558f6c9 [ 651.099297][T18056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.099319][T18056] RSP: 002b:00007f08e6441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 651.099346][T18056] RAX: ffffffffffffffda RBX: 00007f08e57e5fa0 RCX: 00007f08e558f6c9 [ 651.099366][T18056] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 651.099382][T18056] RBP: 00007f08e5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.099399][T18056] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 651.099416][T18056] R13: 00007f08e57e6038 R14: 00007f08e57e5fa0 R15: 00007ffd64a38f88 [ 651.099460][T18056] [ 651.646797][T18056] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 651.909018][T17706] syz-executor: attempt to access beyond end of device [ 651.909018][T17706] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 652.017845][T17706] syz-executor: attempt to access beyond end of device [ 652.017845][T17706] loop0: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 652.075580][T18088] loop2: detected capacity change from 0 to 2048 [ 652.103026][T18088] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 652.134546][T17706] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 652.168636][T17706] F2FS-fs (loop0): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 652.182711][T18088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.395328][ T5919] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 652.563158][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.596098][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.626252][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.699786][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.709513][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.723670][ T5919] usb 5-1: config 0 descriptor?? [ 653.161140][ T5919] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 653.210444][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 653.393328][ T978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.436250][ T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.492802][ T978] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 653.522334][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 653.547730][ T978] usb 6-1: SerialNumber: syz [ 653.796205][ T978] usb 6-1: 0:2 : does not exist [ 653.874544][ T978] usb 6-1: USB disconnect, device number 28 [ 653.933516][T13332] udevd[13332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.956489][ T5919] usb 5-1: USB disconnect, device number 26 [ 654.021343][ T5926] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 654.202199][ T5926] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.216002][ T5926] usb 7-1: config 0 has no interface number 0 [ 654.225079][ T5926] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 654.243877][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.287076][ T5926] usb 7-1: config 0 descriptor?? [ 654.309098][ T5926] cp210x 7-1:0.1: cp210x converter detected [ 654.403798][T18123] loop2: detected capacity change from 0 to 4096 [ 654.583667][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 654.712900][ T5926] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 654.931081][T18137] loop4: detected capacity change from 0 to 16 [ 654.948399][T18137] erofs (device loop4): mounted with root inode @ nid 36. [ 654.969241][ T5926] usb 7-1: cp210x converter now attached to ttyUSB0 [ 655.160714][ T5926] usb 7-1: USB disconnect, device number 27 [ 655.184351][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.217650][ T5926] cp210x 7-1:0.1: device disconnected [ 655.494009][T18154] binder: 18153:18154 ioctl c0306201 2000000001c0 returned -22 [ 655.669714][T18147] loop4: detected capacity change from 0 to 40427 [ 655.701773][T18147] F2FS-fs (loop4): build fault injection rate: 174 [ 655.725925][T18147] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 655.752395][T18147] F2FS-fs (loop4): invalid crc value [ 656.015394][T18147] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 656.100550][T18147] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 656.204507][T18147] syz.4.4119: attempt to access beyond end of device [ 656.204507][T18147] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 656.239531][T18147] CPU: 1 UID: 0 PID: 18147 Comm: syz.4.4119 Not tainted syzkaller #0 PREEMPT(full) [ 656.239565][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.239580][T18147] Call Trace: [ 656.239592][T18147] [ 656.239603][T18147] dump_stack_lvl+0x189/0x250 [ 656.239649][T18147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.239687][T18147] ? __pfx_queue_work_on+0x10/0x10 [ 656.239715][T18147] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 656.239758][T18147] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 656.239813][T18147] f2fs_handle_critical_error+0x37c/0x540 [ 656.239862][T18147] f2fs_write_end_io+0x886/0xb60 [ 656.239917][T18147] __submit_merged_bio+0x27a/0x6a0 [ 656.239967][T18147] __submit_merged_write_cond+0x255/0x530 [ 656.240018][T18147] f2fs_write_data_pages+0x261d/0x3000 [ 656.240044][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240074][T18147] ? unwind_next_frame+0x19ae/0x2390 [ 656.240155][T18147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 656.240201][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240288][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240353][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240382][T18147] ? __lock_acquire+0xab9/0xd20 [ 656.240422][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240451][T18147] ? do_raw_spin_lock+0x121/0x290 [ 656.240494][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240530][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240558][T18147] ? do_raw_spin_unlock+0x122/0x240 [ 656.240596][T18147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 656.240625][T18147] do_writepages+0x32e/0x550 [ 656.240667][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240702][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240736][T18147] ? do_raw_spin_unlock+0x122/0x240 [ 656.240779][T18147] filemap_fdatawrite+0x199/0x240 [ 656.240816][T18147] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 656.240915][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.240952][T18147] ? do_raw_spin_unlock+0x122/0x240 [ 656.240997][T18147] f2fs_sync_dirty_inodes+0x31f/0x830 [ 656.241049][T18147] f2fs_write_checkpoint+0x93e/0x2440 [ 656.241077][T18147] ? check_noncircular+0xe0/0x160 [ 656.241153][T18147] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 656.241180][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241268][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241297][T18147] ? down_write+0x162/0x1f0 [ 656.241323][T18147] ? __pfx_down_write+0x10/0x10 [ 656.241367][T18147] f2fs_issue_checkpoint+0x3b8/0x610 [ 656.241403][T18147] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 656.241457][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241485][T18147] ? __lock_acquire+0xab9/0xd20 [ 656.241563][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241593][T18147] ? f2fs_sync_fs+0x200/0x3d0 [ 656.241635][T18147] f2fs_do_sync_file+0x869/0x1860 [ 656.241679][T18147] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 656.241774][T18147] ? __pfx_down_write+0x10/0x10 [ 656.241803][T18147] ? sb_start_write+0x114/0x1c0 [ 656.241836][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241864][T18147] ? mnt_want_write_file+0x164/0x200 [ 656.241901][T18147] __f2fs_ioctl+0x485a/0xb5b0 [ 656.241957][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.241986][T18147] ? file_ioctl+0x22d/0x780 [ 656.242025][T18147] ? __pfx_file_ioctl+0x10/0x10 [ 656.242082][T18147] ? kasan_quarantine_put+0xdd/0x220 [ 656.242119][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242147][T18147] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.242185][T18147] ? __pfx___f2fs_ioctl+0x10/0x10 [ 656.242219][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242253][T18147] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 656.242294][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242322][T18147] ? do_vfs_ioctl+0xb33/0x1430 [ 656.242355][T18147] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 656.242392][T18147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 656.242510][T18147] ? __fget_files+0x2a/0x420 [ 656.242542][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242571][T18147] ? __fget_files+0x3a0/0x420 [ 656.242594][T18147] ? __fget_files+0x2a/0x420 [ 656.242622][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242651][T18147] ? f2fs_ioctl+0x135/0x250 [ 656.242680][T18147] ? __pfx_f2fs_ioctl+0x10/0x10 [ 656.242710][T18147] __se_sys_ioctl+0xfc/0x170 [ 656.242753][T18147] do_syscall_64+0xfa/0xfa0 [ 656.242791][T18147] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.242829][T18147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.242853][T18147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.242882][T18147] ? exc_page_fault+0xab/0x100 [ 656.242924][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.242948][T18147] RIP: 0033:0x7fe667d8f6c9 [ 656.242971][T18147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.242992][T18147] RSP: 002b:00007fe668c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.243018][T18147] RAX: ffffffffffffffda RBX: 00007fe667fe5fa0 RCX: 00007fe667d8f6c9 [ 656.243038][T18147] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005 [ 656.243053][T18147] RBP: 00007fe667e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.243070][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.243085][T18147] R13: 00007fe667fe6038 R14: 00007fe667fe5fa0 R15: 00007ffff2159958 [ 656.243133][T18147] [ 656.803769][T18147] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 656.851027][T18181] input: syz1 as /devices/virtual/input/input62 [ 656.950417][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 657.050381][ T978] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 657.132277][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.166937][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.173436][T18188] loop0: detected capacity change from 0 to 2048 [ 657.202255][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.212840][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.225217][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.234386][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.242455][ T978] usb 4-1: Product: syz [ 657.246973][ T978] usb 4-1: Manufacturer: syz [ 657.251827][ T978] usb 4-1: SerialNumber: syz [ 657.267965][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 657.315051][T18188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.344503][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.403796][ T10] usb 6-1: config 0 descriptor?? [ 657.417599][T18188] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.4126: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 657.477772][T18188] EXT4-fs (loop0): Remounting filesystem read-only [ 657.496496][ T978] usb 4-1: 0:2 : does not exist [ 657.520629][ T978] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 657.627793][ T978] usb 4-1: USB disconnect, device number 46 [ 657.644750][T17706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.828222][ T10] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 657.871855][T13332] udevd[13332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.877832][ T10] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 658.051453][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.004C/input/input63 [ 658.201370][ T10] cm6533_jd 0003:0D8C:0022.004C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 658.369866][ T10] usb 6-1: USB disconnect, device number 29 [ 658.671128][T18213] fido_id[18213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 659.041665][T18221] loop3: detected capacity change from 0 to 32768 [ 659.079448][T18221] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 659.202537][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 660.464182][T18262] input: syz0 as /devices/virtual/input/input64 [ 660.562194][T18266] loop3: detected capacity change from 0 to 512 [ 660.656522][T18266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.736737][T18266] ext4 filesystem being mounted at /729/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.047462][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.512650][ T5919] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 661.672965][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 661.709655][ T5919] usb 4-1: not running at top speed; connect to a high speed hub [ 661.778253][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.854738][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.935473][ T5919] usb 4-1: string descriptor 0 read error: -22 [ 661.963816][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.100399][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.151175][ T5919] usb 4-1: 0:2 : does not exist [ 662.235790][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.264321][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.294410][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.314824][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.337638][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.372407][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.578605][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.630952][T15070] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 662.670880][T15070] hid-generic 0003:0004:0000.004D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 662.951364][T18317] fido_id[18317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 663.445664][ T5919] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 663.730462][ T975] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 663.873278][ T5919] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 663.935378][ T5919] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 664.048411][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.104583][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.118985][ T5919] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 664.157422][ T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.170890][ T5919] usb 4-1: USB disconnect, device number 47 [ 664.205104][ T975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.237040][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.256598][ T975] usb 7-1: config 0 descriptor?? [ 664.736378][ T975] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 664.826551][ T975] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 664.991694][ T6676] udevd[6676]: 'fido_id' [18340] terminated by signal 33 (Unknown signal 33) [ 665.075906][ T975] usb 7-1: USB disconnect, device number 28 [ 665.660090][T18363] netlink: 'syz.0.4192': attribute type 2 has an invalid length. [ 665.690451][T18363] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4192'. [ 665.757812][T18368] netlink: 'syz.0.4192': attribute type 2 has an invalid length. [ 665.765859][T18368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4192'. [ 666.030782][ T975] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 666.221010][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.280002][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.347298][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.385021][T18382] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 666.435043][ T975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.478400][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.522655][ T975] usb 6-1: config 0 descriptor?? [ 666.968473][ T975] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 667.908384][T18410] loop6: detected capacity change from 0 to 1024 [ 667.983080][T18410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.402731][T13441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.076663][ T5919] usb 6-1: USB disconnect, device number 30 [ 669.279828][T18440] loop0: detected capacity change from 0 to 2048 [ 669.337736][T18442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 669.388430][ T30] audit: type=1800 audit(1763366411.099:183): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4221" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 669.393321][T18440] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 669.510223][T18440] Remounting filesystem read-only [ 669.673288][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'. [ 669.764731][T18454] netlink: 'syz.2.4227': attribute type 1 has an invalid length. [ 669.780184][T17706] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 669.806039][T18452] macvtap1: entered promiscuous mode [ 669.821354][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'. [ 669.832001][T18452] vlan0: entered promiscuous mode [ 669.837406][T18452] macvtap1: entered allmulticast mode [ 669.894516][T18452] vlan0: entered allmulticast mode [ 669.921677][T18452] veth0_vlan: entered allmulticast mode [ 670.006827][T18454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.093659][T18455] macvtap2: entered promiscuous mode [ 670.123985][T18436] loop6: detected capacity change from 0 to 40427 [ 670.130552][T18455] macvtap2: entered allmulticast mode [ 670.141035][T18436] F2FS-fs (loop6): build fault injection rate: 14 [ 670.147788][T18436] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 670.234824][T18436] F2FS-fs (loop6): invalid crc value [ 670.256210][ C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 670.280331][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 670.531038][T18436] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 670.586175][T18436] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 670.632188][T18436] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 670.815467][ T30] audit: type=1326 audit(1763366412.519:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 670.909659][ T30] audit: type=1326 audit(1763366412.519:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 670.932605][ T30] audit: type=1326 audit(1763366412.519:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 670.976627][ T30] audit: type=1326 audit(1763366412.519:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.042592][ T30] audit: type=1326 audit(1763366412.569:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.106995][ T30] audit: type=1326 audit(1763366412.619:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.172473][ T30] audit: type=1326 audit(1763366412.619:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.260875][ T30] audit: type=1326 audit(1763366412.619:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.355101][ T30] audit: type=1326 audit(1763366412.619:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667d8f6c9 code=0x7ffc0000 [ 671.509038][T18492] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4240'. [ 671.643405][T18472] loop3: detected capacity change from 0 to 32768 [ 671.722005][T18472] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 671.798125][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 671.845484][T18472] XFS (loop3): Ending clean mount [ 671.890603][T18472] XFS (loop3): Quotacheck needed: Please wait. [ 672.075837][T18472] XFS (loop3): Quotacheck: Done. [ 672.207826][ T5831] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 672.440374][ T975] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 672.622998][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.634229][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.644598][ T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.657803][ T975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.667591][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.679128][ T975] usb 7-1: config 0 descriptor?? [ 673.151957][ T975] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 673.465582][ T5950] usb 7-1: USB disconnect, device number 29 [ 673.609803][T18539] loop2: detected capacity change from 0 to 1024 [ 673.628121][T18539] EXT4-fs: Ignoring removed bh option [ 673.661914][T18539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 673.715560][T18539] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.4255: corrupted in-inode xattr: e_value out of bounds [ 673.792626][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 674.031561][T15070] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 674.091948][T18552] binder: 18551:18552 ioctl c0306201 2000000001c0 returned -22 [ 674.251296][T15070] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.266996][T15070] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.285998][T15070] usb 4-1: config 0 interface 0 has no altsetting 0 [ 674.293457][T15070] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 674.303416][T15070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.349429][T15070] usb 4-1: config 0 descriptor?? [ 674.479569][T18562] loop2: detected capacity change from 0 to 1024 [ 674.504639][T18562] EXT4-fs: Ignoring removed orlov option [ 674.530766][T18562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 674.607672][T18562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.778259][T15070] hid_parser_main: 10 callbacks suppressed [ 674.778285][T15070] hid-steam 0003:28DE:1102.0051: unknown main item tag 0x0 [ 674.800374][T15070] hid-steam 0003:28DE:1102.0051: unknown main item tag 0x0 [ 674.811104][T15070] hid-steam 0003:28DE:1102.0051: unknown main item tag 0x0 [ 674.835468][T15070] hid-steam 0003:28DE:1102.0051: unknown main item tag 0x0 [ 674.869278][T15070] hid-steam 0003:28DE:1102.0051: unknown main item tag 0x0 [ 674.935101][T15070] hid-steam 0003:28DE:1102.0051: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 675.008728][T15070] usb 4-1: USB disconnect, device number 48 [ 675.237683][T18571] fido_id[18571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 675.271936][T18560] loop4: detected capacity change from 0 to 32768 [ 675.289578][T18560] xfs: Deprecated parameter 'attr2' [ 675.302018][T18560] XFS: attr2 mount option is deprecated. [ 675.340145][T18560] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 675.356731][T18560] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 675.391951][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.482447][T18560] XFS (loop4): Ending clean mount [ 675.495190][T18560] XFS (loop4): Quotacheck needed: Please wait. [ 675.615900][T18560] XFS (loop4): Quotacheck: Done. [ 675.805886][T15506] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 675.935395][T15070] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 676.140372][T15070] usb 4-1: Using ep0 maxpacket: 8 [ 676.152806][T15070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 676.180473][T15070] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 676.200319][T15070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.274810][T15070] usb 4-1: config 0 descriptor?? [ 676.374942][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 676.374962][ T30] audit: type=1326 audit(1763366418.099:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.418516][T18609] netlink: 'syz.6.4281': attribute type 1 has an invalid length. [ 676.429795][ T30] audit: type=1326 audit(1763366418.099:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.482241][T18609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.490578][ T30] audit: type=1326 audit(1763366418.099:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.512908][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.521298][ T30] audit: type=1326 audit(1763366418.099:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.524825][T15070] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 676.543610][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.543971][ T30] audit: type=1326 audit(1763366418.099:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.584108][ T30] audit: type=1326 audit(1763366418.109:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.609959][ T30] audit: type=1326 audit(1763366418.109:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.624694][T18609] bond2: (slave ip6erspan0): making interface the new active one [ 676.643354][T18609] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 676.660144][ T30] audit: type=1326 audit(1763366418.109:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.755651][ T30] audit: type=1326 audit(1763366418.109:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 676.825086][ T30] audit: type=1326 audit(1763366418.109:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18605 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff32138f6c9 code=0x7ffc0000 [ 677.089504][T15070] usb 4-1: USB disconnect, device number 49 [ 677.910924][T18626] loop7: detected capacity change from 512 to 0 [ 678.505983][T18613] loop4: detected capacity change from 0 to 40427 [ 678.569771][T18613] F2FS-fs (loop4): invalid crc value [ 679.031323][T18615] loop0: detected capacity change from 0 to 262144 [ 679.072648][T18615] BTRFS: device fsid f14e9105-5c88-4782-b968-4539b9a731cb devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4282 (18615) [ 679.093931][T18615] BTRFS info (device loop0): first mount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb [ 679.104125][T18615] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 679.158966][T18613] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 679.217636][T18613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 679.325672][T18615] BTRFS info (device loop0): enabling ssd optimizations [ 679.332729][T18615] BTRFS info (device loop0): turning on async discard [ 679.340492][T18615] BTRFS info (device loop0): enabling free space tree [ 679.504604][T18613] syz.4.4274: attempt to access beyond end of device [ 679.504604][T18613] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 679.593342][T18613] CPU: 1 UID: 0 PID: 18613 Comm: syz.4.4274 Not tainted syzkaller #0 PREEMPT(full) [ 679.593377][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.593393][T18613] Call Trace: [ 679.593404][T18613] [ 679.593415][T18613] dump_stack_lvl+0x189/0x250 [ 679.593460][T18613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.593504][T18613] ? __pfx_queue_work_on+0x10/0x10 [ 679.593532][T18613] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 679.593573][T18613] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 679.593628][T18613] f2fs_handle_critical_error+0x37c/0x540 [ 679.593679][T18613] f2fs_write_end_io+0x886/0xb60 [ 679.593734][T18613] __submit_merged_bio+0x27a/0x6a0 [ 679.593784][T18613] __submit_merged_write_cond+0x255/0x530 [ 679.593834][T18613] f2fs_write_data_pages+0x261d/0x3000 [ 679.593914][T18613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 679.594022][T18613] ? __pfx_folios_put_refs+0x10/0x10 [ 679.594051][T18613] ? f2fs_balance_fs+0x3da/0x7f0 [ 679.594088][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594118][T18613] ? _raw_spin_unlock+0x28/0x50 [ 679.594188][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594216][T18613] ? __lock_acquire+0xab9/0xd20 [ 679.594269][T18613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 679.594297][T18613] do_writepages+0x32e/0x550 [ 679.594340][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594375][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594404][T18613] ? do_raw_spin_unlock+0x122/0x240 [ 679.594448][T18613] filemap_fdatawrite+0x199/0x240 [ 679.594485][T18613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 679.594590][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594626][T18613] ? do_raw_spin_unlock+0x122/0x240 [ 679.594670][T18613] f2fs_sync_dirty_inodes+0x31f/0x830 [ 679.594723][T18613] f2fs_write_checkpoint+0x93e/0x2440 [ 679.594751][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594826][T18613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 679.594910][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.594938][T18613] ? down_write+0x162/0x1f0 [ 679.594964][T18613] ? __pfx_down_write+0x10/0x10 [ 679.595007][T18613] f2fs_issue_checkpoint+0x3b8/0x610 [ 679.595041][T18613] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 679.595066][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595094][T18613] ? __lock_acquire+0xab9/0xd20 [ 679.595137][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595164][T18613] ? __lock_acquire+0xab9/0xd20 [ 679.595242][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595270][T18613] ? f2fs_sync_fs+0x200/0x3d0 [ 679.595312][T18613] f2fs_do_sync_file+0x869/0x1860 [ 679.595355][T18613] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 679.595442][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595471][T18613] ? __mark_inode_dirty+0x3d2/0xe10 [ 679.595516][T18613] ? vfs_fsync_range+0x149/0x1c0 [ 679.595542][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595570][T18613] ? f2fs_sync_file+0xe9/0x160 [ 679.595602][T18613] f2fs_file_write_iter+0x753/0x24a0 [ 679.595671][T18613] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 679.595714][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595742][T18613] ? __asan_memset+0x22/0x50 [ 679.595788][T18613] iter_file_splice_write+0x975/0x10e0 [ 679.595871][T18613] ? __pfx_iter_file_splice_write+0x10/0x10 [ 679.595919][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.595947][T18613] ? rcu_read_lock_any_held+0xb3/0x120 [ 679.595995][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596029][T18613] ? __pfx_iter_file_splice_write+0x10/0x10 [ 679.596071][T18613] direct_splice_actor+0x101/0x160 [ 679.596120][T18613] splice_direct_to_actor+0x5a8/0xcc0 [ 679.596195][T18613] ? __pfx_direct_splice_actor+0x10/0x10 [ 679.596235][T18613] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 679.596295][T18613] do_splice_direct+0x181/0x270 [ 679.596333][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596368][T18613] ? __pfx_do_splice_direct+0x10/0x10 [ 679.596411][T18613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 679.596448][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596477][T18613] ? rw_verify_area+0x255/0x4d0 [ 679.596515][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596551][T18613] do_sendfile+0x4da/0x7e0 [ 679.596579][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596622][T18613] ? __pfx_do_sendfile+0x10/0x10 [ 679.596661][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596689][T18613] ? __se_sys_futex+0x36f/0x400 [ 679.596735][T18613] __se_sys_sendfile64+0x13e/0x190 [ 679.596768][T18613] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 679.596802][T18613] ? do_syscall_64+0xbe/0xfa0 [ 679.596838][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.596875][T18613] do_syscall_64+0xfa/0xfa0 [ 679.596910][T18613] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.596948][T18613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.596972][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.597000][T18613] ? exc_page_fault+0xab/0x100 [ 679.597042][T18613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.597067][T18613] RIP: 0033:0x7fe667d8f6c9 [ 679.597090][T18613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.597111][T18613] RSP: 002b:00007fe668c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 679.597137][T18613] RAX: ffffffffffffffda RBX: 00007fe667fe5fa0 RCX: 00007fe667d8f6c9 [ 679.597156][T18613] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 679.597172][T18613] RBP: 00007fe667e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 679.597189][T18613] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 679.597206][T18613] R13: 00007fe667fe6038 R14: 00007fe667fe5fa0 R15: 00007ffff2159958 [ 679.597255][T18613] [ 680.170967][T18613] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 680.613146][T17706] BTRFS info (device loop0): last unmount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb [ 680.642409][T15506] syz-executor: attempt to access beyond end of device [ 680.642409][T15506] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 680.743817][T15506] syz-executor: attempt to access beyond end of device [ 680.743817][T15506] loop4: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 680.861140][T15506] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 680.869606][T15506] F2FS-fs (loop4): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 681.181145][T18689] loop3: detected capacity change from 0 to 1024 [ 681.225750][T18689] EXT4-fs: Ignoring removed orlov option [ 681.269018][T18689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 681.419505][T18689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.471633][T18700] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4306'. [ 682.046992][ T5919] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 682.119606][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.235399][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 682.249886][ T5919] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 682.273211][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.301556][ T5919] usb 7-1: Product: syz [ 682.314759][ T5919] usb 7-1: Manufacturer: syz [ 682.328470][ T5919] usb 7-1: SerialNumber: syz [ 682.364134][ T5919] usb 7-1: config 0 descriptor?? [ 682.527162][T18703] loop0: detected capacity change from 0 to 32768 [ 682.622792][ T5919] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 682.627368][T18703] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 682.642315][T18700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.698832][T18700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.742468][T18700] bond0 (unregistering): Released all slaves [ 682.779759][T18703] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 682.821138][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 682.930209][T18703] XFS (loop0): Starting recovery (logdev: internal) [ 682.990806][T18703] XFS (loop0): Ending recovery (logdev: internal) [ 683.121762][T18703] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 683.174239][T18703] XFS (loop0): Unmount and run xfs_repair [ 683.226097][T18703] XFS (loop0): Internal error ltbno + ltlen > bno at line 2104 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_free_ag_extent+0x1098/0x1760 [ 683.285205][T18703] CPU: 1 UID: 0 PID: 18703 Comm: syz.0.4305 Not tainted syzkaller #0 PREEMPT(full) [ 683.285239][T18703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.285255][T18703] Call Trace: [ 683.285265][T18703] [ 683.285277][T18703] dump_stack_lvl+0x189/0x250 [ 683.285318][T18703] ? __pfx__xfs_alert_tag+0x10/0x10 [ 683.285347][T18703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.285389][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.285418][T18703] ? xfs_alloc_get_rec+0x2df/0x410 [ 683.285450][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.285493][T18703] xfs_corruption_error+0x122/0x170 [ 683.285525][T18703] ? xfs_free_ag_extent+0x1098/0x1760 [ 683.285561][T18703] xfs_free_ag_extent+0x1260/0x1760 [ 683.285593][T18703] ? xfs_free_ag_extent+0x1098/0x1760 [ 683.285649][T18703] ? __pfx_xfs_free_ag_extent+0x10/0x10 [ 683.285685][T18703] ? kasan_save_track+0x4f/0x80 [ 683.285720][T18703] ? kasan_save_track+0x3e/0x80 [ 683.285760][T18703] ? __kasan_slab_alloc+0x6c/0x80 [ 683.285810][T18703] __xfs_free_extent+0x2f1/0x470 [ 683.285853][T18703] ? __pfx___xfs_free_extent+0x10/0x10 [ 683.285919][T18703] ? rcu_is_watching+0x15/0xb0 [ 683.285956][T18703] xfs_extent_free_finish_item+0x28b/0x670 [ 683.285993][T18703] ? __pfx_xfs_extent_free_finish_item+0x10/0x10 [ 683.286024][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286053][T18703] ? rcu_is_watching+0x15/0xb0 [ 683.286090][T18703] ? __pfx_xfs_extent_free_finish_item+0x10/0x10 [ 683.286116][T18703] xfs_defer_finish_one+0x5c8/0xcf0 [ 683.286171][T18703] ? __pfx_xfs_defer_finish_one+0x10/0x10 [ 683.286214][T18703] xfs_defer_finish_noroll+0x910/0x12d0 [ 683.286249][T18703] ? xfs_trans_commit+0x10b/0x1c0 [ 683.286292][T18703] ? __pfx_xfs_defer_finish_noroll+0x10/0x10 [ 683.286318][T18703] ? down_write_nested+0x169/0x200 [ 683.286355][T18703] ? __pfx_down_write_nested+0x10/0x10 [ 683.286392][T18703] ? xfs_trans_reserve_quota_nblks+0x18a/0x2e0 [ 683.286431][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286469][T18703] xfs_trans_commit+0x10b/0x1c0 [ 683.286504][T18703] ? __pfx_xfs_trans_commit+0x10/0x10 [ 683.286542][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286583][T18703] xfs_free_file_space+0x5ce/0xce0 [ 683.286632][T18703] ? __pfx_xfs_free_file_space+0x10/0x10 [ 683.286687][T18703] xfs_collapse_file_space+0x22c/0x690 [ 683.286732][T18703] ? __pfx_xfs_collapse_file_space+0x10/0x10 [ 683.286773][T18703] ? xfs_break_layouts+0x248/0x2f0 [ 683.286803][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286833][T18703] ? mnt_put_write_access_file+0xc0/0x100 [ 683.286868][T18703] ? __pfx_xfs_vn_update_time+0x10/0x10 [ 683.286900][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286935][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.286972][T18703] __xfs_file_fallocate+0xcda/0x1610 [ 683.287026][T18703] ? __pfx___xfs_file_fallocate+0x10/0x10 [ 683.287089][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.287124][T18703] ? aa_file_perm+0x13a/0x1550 [ 683.287153][T18703] ? aa_file_perm+0x13a/0x1550 [ 683.287178][T18703] ? aa_file_perm+0x44d/0x1550 [ 683.287209][T18703] ? futex_private_hash_put+0x13b/0x170 [ 683.287249][T18703] ? setup_signal_shadow_stack+0x197/0x210 [ 683.287299][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.287329][T18703] ? __lock_acquire+0xab9/0xd20 [ 683.287369][T18703] xfs_file_fallocate+0x27b/0x340 [ 683.287415][T18703] ? __pfx_xfs_file_fallocate+0x10/0x10 [ 683.287456][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.287495][T18703] vfs_fallocate+0x669/0x7e0 [ 683.287537][T18703] ? __fget_files+0x2a/0x420 [ 683.287568][T18703] ? __pfx_vfs_fallocate+0x10/0x10 [ 683.287606][T18703] ? __fget_files+0x3a0/0x420 [ 683.287630][T18703] ? __fget_files+0x2a/0x420 [ 683.287660][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.287696][T18703] __x64_sys_fallocate+0xc0/0x110 [ 683.287748][T18703] do_syscall_64+0xfa/0xfa0 [ 683.287787][T18703] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.287826][T18703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.287850][T18703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.287881][T18703] ? exc_page_fault+0xab/0x100 [ 683.287922][T18703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.287947][T18703] RIP: 0033:0x7f08e558f6c9 [ 683.287971][T18703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.287993][T18703] RSP: 002b:00007f08e6441038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 683.288020][T18703] RAX: ffffffffffffffda RBX: 00007f08e57e5fa0 RCX: 00007f08e558f6c9 [ 683.288041][T18703] RDX: 0000000000004000 RSI: 0000000000000008 RDI: 0000000000000005 [ 683.288058][T18703] RBP: 00007f08e5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 683.288076][T18703] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 683.288092][T18703] R13: 00007f08e57e6038 R14: 00007f08e57e5fa0 R15: 00007ffd64a38f88 [ 683.288138][T18703] [ 683.288150][T18703] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 683.427920][ T5919] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 683.550521][T18703] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xcc0/0x12d0 (fs/xfs/libxfs/xfs_defer.c:721). Shutting down filesystem. [ 683.594274][T18731] loop4: detected capacity change from 0 to 47 [ 683.697307][T18703] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 683.837728][ T5919] usb 7-1: USB disconnect, device number 30 [ 683.923790][T18722] loop3: detected capacity change from 0 to 32768 [ 683.937757][T17706] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 683.954260][T18722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4312 (18722) [ 684.034997][T18722] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 684.078382][T18722] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 684.416119][T18722] BTRFS info (device loop3): setting nodatasum [ 684.462242][T18722] BTRFS info (device loop3): setting nodatacow [ 684.468424][T18722] BTRFS info (device loop3): turning on async discard [ 684.506352][T18722] BTRFS info (device loop3): enabling free space tree [ 684.527163][T18722] BTRFS info (device loop3): enabling auto defrag [ 684.575199][T18722] BTRFS info (device loop3): max_inline set to 0 [ 685.078052][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.085941][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.117811][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 685.139506][T18769] loop6: detected capacity change from 0 to 1024 [ 685.310829][ T12] hfsplus: b-tree write err: -5, ino 4 [ 685.679612][T18779] loop4: detected capacity change from 0 to 512 [ 685.785950][T18779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 685.803797][T18779] System zones: 0-2, 18-18, 34-34 [ 685.887075][T18779] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 685.998214][T18779] EXT4-fs (loop4): Remounting filesystem read-only [ 686.051077][T18779] EXT4-fs (loop4): 1 truncate cleaned up [ 686.092260][T18779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.117872][ T36] __quota_error: 160 callbacks suppressed [ 686.117890][ T36] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 686.160424][T18779] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.171592][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 686.200311][ T36] Quota error (device loop4): write_blk: dquota write failed [ 686.207693][ T36] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 686.233884][T18779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.270808][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 686.290497][ T36] Quota error (device loop4): write_blk: dquota write failed [ 686.357295][ T36] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 686.380040][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 686.427282][ T36] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 686.469892][ T36] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 686.506171][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 686.884496][ T30] audit: type=1326 audit(1763366428.609:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18802 comm="syz.2.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32138f6c9 code=0x7fc00000 [ 687.118471][T18821] overlayfs: upper fs does not support file handles, falling back to index=off. [ 687.378527][T18799] loop0: detected capacity change from 0 to 32768 [ 687.519699][ T30] audit: type=1326 audit(1763366429.229:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18802 comm="syz.2.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff32138f6c9 code=0x7fc00000 [ 687.605581][T18799] JBD2: Ignoring recovery information on journal [ 687.966909][T18799] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 688.463366][T17706] ocfs2: Unmounting device (7,0) on (node local) [ 688.543115][T18848] loop6: detected capacity change from 0 to 128 [ 689.126297][T18869] loop2: detected capacity change from 0 to 512 [ 689.160381][ T5950] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 689.215239][T18869] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 689.252349][T18869] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.4363: iget: bad i_size value: 12154757448730 [ 689.278890][T18877] input: syz0 as /devices/virtual/input/input66 [ 689.305555][T18869] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4363: couldn't read orphan inode 13 (err -117) [ 689.343195][ T5950] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.343733][T18869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.365316][ T5950] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.385413][ T5950] usb 7-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 689.420643][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.457097][ T5950] usb 7-1: config 0 descriptor?? [ 689.560579][T18883] loop0: detected capacity change from 0 to 512 [ 689.593725][T18883] EXT4-fs (loop0): 1 truncate cleaned up [ 689.612751][T18883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.655960][T17706] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 689.747685][T18892] netlink: 'syz.4.4372': attribute type 12 has an invalid length. [ 689.758474][T18892] netlink: 'syz.4.4372': attribute type 29 has an invalid length. [ 689.768545][T17706] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 689.800432][T18892] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4372'. [ 689.816191][T18892] netlink: 'syz.4.4372': attribute type 2 has an invalid length. [ 689.824718][T17706] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 689.846600][ T5845] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 689.858725][T18892] netlink: 'syz.4.4372': attribute type 3 has an invalid length. [ 689.930202][ T5950] aquacomputer_d5next 0003:0C70:F014.0052: unknown main item tag 0x0 [ 689.969011][ T5950] aquacomputer_d5next 0003:0C70:F014.0052: unknown main item tag 0x0 [ 689.989262][ T5950] aquacomputer_d5next 0003:0C70:F014.0052: unknown main item tag 0x0 [ 690.031212][ T5950] aquacomputer_d5next 0003:0C70:F014.0052: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.6-1/input0 [ 690.208712][ T7649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.381459][T17706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.600049][ T3479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.767475][ T3479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.928579][ T3479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.169317][ T3479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.518061][ T3479] bridge_slave_1: left allmulticast mode [ 691.538401][ T3479] bridge_slave_1: left promiscuous mode [ 691.551283][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.581894][ T3479] bridge_slave_0: left allmulticast mode [ 691.594188][ T3479] bridge_slave_0: left promiscuous mode [ 691.606573][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.765777][T17405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 691.776758][T17405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 691.796965][T17405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 691.835713][T17405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 691.843582][T17405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.894863][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.927604][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.936389][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.941959][T15070] usb 7-1: USB disconnect, device number 31 [ 691.959620][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.977641][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.704975][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 692.714097][T18949] netlink: 'syz.4.4396': attribute type 29 has an invalid length. [ 692.738064][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 692.756518][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 692.766478][T18949] netlink: 'syz.4.4396': attribute type 29 has an invalid length. [ 692.778339][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 693.186552][T18940] loop6: detected capacity change from 0 to 40427 [ 693.197638][T18951] loop3: detected capacity change from 0 to 32768 [ 693.236171][T18940] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 693.249204][T18940] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 693.259247][T18951] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 693.269453][T18951] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 693.312927][T18951] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 693.325058][ T5919] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 693.331889][ T5919] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 693.344744][T18940] F2FS-fs (loop6): invalid crc value [ 693.382160][T18957] netlink: 'syz.4.4399': attribute type 298 has an invalid length. [ 693.410109][ T5919] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 693.433195][ T5919] gfs2: fsid=syz:syz.0: jid=0: Done [ 693.449881][T18951] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 693.571973][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.625995][T18964] netlink: 'syz.4.4400': attribute type 1 has an invalid length. [ 693.628722][T18940] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 693.636197][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.664871][T18940] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 693.674356][T18940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 693.709987][ T3479] bond0 (unregistering): Released all slaves [ 693.741297][T18940] syz.6.4392: attempt to access beyond end of device [ 693.741297][T18940] loop6: rw=2049, sector=45096, nr_sectors = 72 limit=40427 [ 693.774330][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 693.774352][ T30] audit: type=1800 audit(1763366435.499:559): pid=18940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4392" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 693.827322][T18964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.933828][T18966] bond1: (slave gretap1): making interface the new active one [ 693.942969][T18966] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 693.958651][ T5840] Bluetooth: hci1: command tx timeout [ 694.106460][ T5840] Bluetooth: hci5: command tx timeout [ 694.783331][ T3479] hsr_slave_0: left promiscuous mode [ 694.810480][ T3479] hsr_slave_1: left promiscuous mode [ 694.816616][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.828792][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.843346][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.851711][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.909280][ T3479] veth1_macvtap: left promiscuous mode [ 694.920909][ T3479] veth0_macvtap: left promiscuous mode [ 694.929519][ T3479] veth1_vlan: left promiscuous mode [ 694.940716][ T3479] veth0_vlan: left promiscuous mode [ 694.990492][T18989] loop6: detected capacity change from 0 to 512 [ 695.046733][T18989] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4402: bg 0: block 393: padding at end of block bitmap is not set [ 695.113285][T18993] loop4: detected capacity change from 0 to 128 [ 695.125770][T18989] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 695.145516][T18993] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 695.177622][T18993] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 695.178066][T18989] EXT4-fs (loop6): 2 truncates cleaned up [ 695.214329][T18989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.356394][ T13] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 695.399756][T13441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.022312][ T5840] Bluetooth: hci1: command tx timeout [ 696.187267][ T5840] Bluetooth: hci5: command tx timeout [ 696.646782][T19002] loop4: detected capacity change from 0 to 32768 [ 696.721998][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 697.006678][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 698.100502][ T5840] Bluetooth: hci1: command tx timeout [ 698.260565][T17405] Bluetooth: hci5: command tx timeout [ 698.383531][T19021] loop6: detected capacity change from 0 to 2048 [ 698.574705][T19021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.725998][T18937] chnl_net:caif_netlink_parms(): no params data found [ 698.744992][T19017] loop4: detected capacity change from 0 to 32768 [ 698.765624][T19017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4420 (19017) [ 698.833163][T19017] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 698.833410][T13441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.867392][T19017] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 699.052763][T19017] BTRFS info (device loop4): setting nodatasum [ 699.101063][T19017] BTRFS info (device loop4): allowing degraded mounts [ 699.134097][T19017] BTRFS info (device loop4): disabling tree log [ 699.151191][T19017] BTRFS info (device loop4): turning on async discard [ 699.159337][T19017] BTRFS info (device loop4): enabling free space tree [ 699.329659][ T5919] IPVS: starting estimator thread 0... [ 699.418623][T15506] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 699.450558][T19064] IPVS: using max 27 ests per chain, 64800 per kthread [ 699.471833][T18935] chnl_net:caif_netlink_parms(): no params data found [ 699.572432][T18937] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.589022][T18937] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.619524][T18937] bridge_slave_0: entered allmulticast mode [ 699.651724][T18937] bridge_slave_0: entered promiscuous mode [ 699.774899][T18937] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.796594][T18937] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.815437][T18937] bridge_slave_1: entered allmulticast mode [ 699.838655][T18937] bridge_slave_1: entered promiscuous mode [ 699.961109][ T5847] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 700.135123][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 700.137014][T19085] loop4: detected capacity change from 0 to 512 [ 700.154093][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 700.156390][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.176814][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.177928][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.190528][T17405] Bluetooth: hci1: command tx timeout [ 700.246623][ T5847] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.260614][T19085] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4435: bad orphan inode 11862016 [ 700.275205][T19085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 700.278277][T18937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.298087][T19085] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.319744][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 700.340491][T17405] Bluetooth: hci5: command tx timeout [ 700.353469][ T5847] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 700.357115][T18937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.377733][T19085] EXT4-fs (loop4): shut down requested (1) [ 700.383969][ T30] audit: type=1800 audit(1763366442.079:560): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4435" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 700.388394][ T5847] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 700.482757][T15506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 700.496944][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.515517][ T5847] usb 7-1: config 0 descriptor?? [ 700.567288][T17405] Bluetooth: hci6: urb ffff888066188200 submission failed (90) [ 700.664029][T19094] loop3: detected capacity change from 0 to 4096 [ 700.777964][T19098] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.830359][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.886480][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.936682][ T5847] usb 7-1: USB disconnect, device number 32 [ 701.025750][T19101] [ 701.028105][T19101] ===================================================== [ 701.035021][T19101] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 701.042466][T19101] syzkaller #0 Not tainted [ 701.046891][T19101] ----------------------------------------------------- [ 701.053808][T19101] syz.4.4440/19101 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 701.061523][T19101] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 701.070160][T19101] [ 701.070160][T19101] and this task is already holding: [ 701.077513][T19101] ffff888059779ea0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 701.086147][T19101] which would create a new lock dependency: [ 701.092021][T19101] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 701.099623][T19101] [ 701.099623][T19101] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 701.109058][T19101] (&dev->event_lock#2){..-.}-{3:3} [ 701.109109][T19101] [ 701.109109][T19101] ... which became SOFTIRQ-irq-safe at: [ 701.121975][T19101] lock_acquire+0x120/0x360 [ 701.126562][T19101] _raw_spin_lock_irqsave+0xa7/0xf0 [ 701.131862][T19101] input_event+0x76/0xe0 [ 701.136185][T19101] xpad360_process_packet+0x1fe/0xdd0 [ 701.141640][T19101] xpad_irq_in+0x1583/0x2590 [ 701.146315][T19101] __usb_hcd_giveback_urb+0x376/0x540 [ 701.151779][T19101] dummy_timer+0x85f/0x44c0 [ 701.156368][T19101] __hrtimer_run_queues+0x52c/0xc60 [ 701.161655][T19101] hrtimer_run_softirq+0x187/0x2b0 [ 701.166854][T19101] handle_softirqs+0x286/0x870 [ 701.171703][T19101] __irq_exit_rcu+0xca/0x1f0 [ 701.176379][T19101] irq_exit_rcu+0x9/0x30 [ 701.180706][T19101] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 701.186435][T19101] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 701.192507][T19101] lock_acquire+0x175/0x360 [ 701.197092][T19101] _raw_spin_lock+0x2e/0x40 [ 701.201687][T19101] fast_dput+0xdd/0x430 [ 701.205927][T19101] dput+0xe8/0x2b0 [ 701.209730][T19101] terminate_walk+0x371/0x4b0 [ 701.214496][T19101] path_openat+0x2e01/0x3830 [ 701.219176][T19101] do_filp_open+0x1fa/0x410 [ 701.223769][T19101] do_sys_openat2+0x121/0x1c0 [ 701.228527][T19101] __x64_sys_openat+0x138/0x170 [ 701.233463][T19101] do_syscall_64+0xfa/0xfa0 [ 701.238070][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.244042][T19101] [ 701.244042][T19101] to a SOFTIRQ-irq-unsafe lock: [ 701.251042][T19101] (tasklist_lock){.+.+}-{3:3} [ 701.251080][T19101] [ 701.251080][T19101] ... which became SOFTIRQ-irq-unsafe at: [ 701.263680][T19101] ... [ 701.263693][T19101] lock_acquire+0x120/0x360 [ 701.270839][T19101] _raw_read_lock+0x36/0x50 [ 701.275429][T19101] __do_wait+0xde/0x740 [ 701.279678][T19101] do_wait+0x1f8/0x510 [ 701.283839][T19101] kernel_wait+0xab/0x170 [ 701.288261][T19101] call_usermodehelper_exec_work+0xbe/0x230 [ 701.294241][T19101] process_scheduled_works+0xae1/0x17b0 [ 701.299868][T19101] worker_thread+0x8a0/0xda0 [ 701.304531][T19101] kthread+0x711/0x8a0 [ 701.308677][T19101] ret_from_fork+0x4bc/0x870 [ 701.313337][T19101] ret_from_fork_asm+0x1a/0x30 [ 701.318170][T19101] [ 701.318170][T19101] other info that might help us debug this: [ 701.318170][T19101] [ 701.328374][T19101] Chain exists of: [ 701.328374][T19101] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 701.328374][T19101] [ 701.341416][T19101] Possible interrupt unsafe locking scenario: [ 701.341416][T19101] [ 701.349708][T19101] CPU0 CPU1 [ 701.355049][T19101] ---- ---- [ 701.360394][T19101] lock(tasklist_lock); [ 701.364634][T19101] local_irq_disable(); [ 701.371365][T19101] lock(&dev->event_lock#2); [ 701.378555][T19101] lock(&f_owner->lock); [ 701.385389][T19101] [ 701.388821][T19101] lock(&dev->event_lock#2); [ 701.393668][T19101] [ 701.393668][T19101] *** DEADLOCK *** [ 701.393668][T19101] [ 701.401789][T19101] 5 locks held by syz.4.4440/19101: [ 701.406964][T19101] #0: ffff888033e550b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 701.416019][T19101] #1: ffff888032abc420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 701.424915][T19101] #2: ffffffff9980f710 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x735/0x1a80 [ 701.434401][T19101] #3: ffff888075f2d100 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 701.444070][T19101] #4: ffff888059779ea0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 701.453125][T19101] [ 701.453125][T19101] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 701.463508][T19101] -> (&dev->event_lock#2){..-.}-{3:3} { [ 701.469336][T19101] IN-SOFTIRQ-W at: [ 701.473556][T19101] lock_acquire+0x120/0x360 [ 701.480212][T19101] _raw_spin_lock_irqsave+0xa7/0xf0 [ 701.487579][T19101] input_event+0x76/0xe0 [ 701.493975][T19101] xpad360_process_packet+0x1fe/0xdd0 [ 701.501506][T19101] xpad_irq_in+0x1583/0x2590 [ 701.508248][T19101] __usb_hcd_giveback_urb+0x376/0x540 [ 701.515777][T19101] dummy_timer+0x85f/0x44c0 [ 701.522435][T19101] __hrtimer_run_queues+0x52c/0xc60 [ 701.529805][T19101] hrtimer_run_softirq+0x187/0x2b0 [ 701.537072][T19101] handle_softirqs+0x286/0x870 [ 701.543995][T19101] __irq_exit_rcu+0xca/0x1f0 [ 701.550742][T19101] irq_exit_rcu+0x9/0x30 [ 701.557140][T19101] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 701.564939][T19101] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 701.573078][T19101] lock_acquire+0x175/0x360 [ 701.579735][T19101] _raw_spin_lock+0x2e/0x40 [ 701.586398][T19101] fast_dput+0xdd/0x430 [ 701.592710][T19101] dput+0xe8/0x2b0 [ 701.598587][T19101] terminate_walk+0x371/0x4b0 [ 701.605418][T19101] path_openat+0x2e01/0x3830 [ 701.612170][T19101] do_filp_open+0x1fa/0x410 [ 701.618831][T19101] do_sys_openat2+0x121/0x1c0 [ 701.625664][T19101] __x64_sys_openat+0x138/0x170 [ 701.632672][T19101] do_syscall_64+0xfa/0xfa0 [ 701.639340][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.647384][T19101] INITIAL USE at: [ 701.651521][T19101] lock_acquire+0x120/0x360 [ 701.658089][T19101] _raw_spin_lock_irqsave+0xa7/0xf0 [ 701.665364][T19101] input_inject_event+0xa5/0x340 [ 701.672371][T19101] kbd_led_trigger_activate+0xbc/0x100 [ 701.679899][T19101] led_trigger_set+0x52d/0x950 [ 701.686732][T19101] led_trigger_set_default+0x260/0x2a0 [ 701.694265][T19101] led_classdev_register_ext+0x73d/0x930 [ 701.701969][T19101] input_leds_connect+0x517/0x790 [ 701.709062][T19101] input_register_device+0xd00/0x1140 [ 701.716502][T19101] atkbd_connect+0x72e/0xa00 [ 701.723166][T19101] serio_driver_probe+0x82/0xd0 [ 701.730083][T19101] really_probe+0x26d/0x9e0 [ 701.736662][T19101] __driver_probe_device+0x18c/0x2f0 [ 701.744024][T19101] driver_probe_device+0x4f/0x430 [ 701.751123][T19101] __driver_attach+0x452/0x700 [ 701.757960][T19101] bus_for_each_dev+0x233/0x2b0 [ 701.764877][T19101] serio_handle_event+0x1f9/0x8d0 [ 701.771984][T19101] process_scheduled_works+0xae1/0x17b0 [ 701.779600][T19101] worker_thread+0x8a0/0xda0 [ 701.786260][T19101] kthread+0x711/0x8a0 [ 701.792407][T19101] ret_from_fork+0x4bc/0x870 [ 701.799066][T19101] ret_from_fork_asm+0x1a/0x30 [ 701.805893][T19101] } [ 701.808630][T19101] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 701.817895][T19101] -> (&client->buffer_lock){....}-{3:3} { [ 701.823796][T19101] INITIAL USE at: [ 701.827845][T19101] lock_acquire+0x120/0x360 [ 701.834240][T19101] _raw_spin_lock+0x2e/0x40 [ 701.840645][T19101] evdev_pass_values+0xb9/0xbd0 [ 701.847394][T19101] evdev_events+0x1e6/0x340 [ 701.853795][T19101] input_pass_values+0x288/0x890 [ 701.860626][T19101] input_event_dispose+0x330/0x6b0 [ 701.867629][T19101] input_inject_event+0x1dd/0x340 [ 701.874545][T19101] evdev_write+0x2fc/0x480 [ 701.880865][T19101] vfs_write+0x27e/0xb30 [ 701.887008][T19101] ksys_write+0x145/0x250 [ 701.893240][T19101] do_syscall_64+0xfa/0xfa0 [ 701.899652][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.907443][T19101] } [ 701.910094][T19101] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 701.918405][T19101] ... acquired at: [ 701.922356][T19101] lock_acquire+0x120/0x360 [ 701.927015][T19101] _raw_spin_lock+0x2e/0x40 [ 701.931679][T19101] evdev_pass_values+0xb9/0xbd0 [ 701.936691][T19101] evdev_events+0x1e6/0x340 [ 701.941354][T19101] input_pass_values+0x288/0x890 [ 701.946450][T19101] input_event_dispose+0x330/0x6b0 [ 701.951719][T19101] input_inject_event+0x1dd/0x340 [ 701.956897][T19101] evdev_write+0x2fc/0x480 [ 701.961472][T19101] vfs_write+0x27e/0xb30 [ 701.965884][T19101] ksys_write+0x145/0x250 [ 701.970381][T19101] do_syscall_64+0xfa/0xfa0 [ 701.975062][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.981113][T19101] [ 701.983415][T19101] -> (&new->fa_lock){....}-{3:3} { [ 701.988621][T19101] INITIAL USE at: [ 701.992581][T19101] lock_acquire+0x120/0x360 [ 701.998803][T19101] _raw_write_lock_irq+0xa2/0xf0 [ 702.005471][T19101] fasync_remove_entry+0xf1/0x1c0 [ 702.012226][T19101] sock_fasync+0x85/0xf0 [ 702.018191][T19101] __fput+0x8a2/0xa70 [ 702.023898][T19101] task_work_run+0x1d4/0x260 [ 702.030220][T19101] exit_to_user_mode_loop+0xe9/0x130 [ 702.037227][T19101] do_syscall_64+0x2bd/0xfa0 [ 702.043551][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.051163][T19101] INITIAL READ USE at: [ 702.055561][T19101] lock_acquire+0x120/0x360 [ 702.062216][T19101] _raw_read_lock_irqsave+0xaf/0x100 [ 702.069664][T19101] kill_fasync+0x199/0x4d0 [ 702.076239][T19101] sock_wake_async+0x137/0x160 [ 702.083169][T19101] sk_wake_async+0x189/0x280 [ 702.089925][T19101] tcp_rcv_state_process+0x1d9d/0x44d0 [ 702.097550][T19101] tcp_v4_do_rcv+0x6bb/0x1430 [ 702.104386][T19101] __release_sock+0x265/0x3a0 [ 702.111222][T19101] release_sock+0x5f/0x1f0 [ 702.117801][T19101] __inet_stream_connect+0x8df/0xe70 [ 702.125237][T19101] inet_stream_connect+0x66/0xa0 [ 702.132327][T19101] __sys_connect+0x316/0x440 [ 702.139084][T19101] __x64_sys_connect+0x7a/0x90 [ 702.145998][T19101] do_syscall_64+0xfa/0xfa0 [ 702.152665][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.160712][T19101] } [ 702.163276][T19101] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 702.172032][T19101] ... acquired at: [ 702.175898][T19101] lock_acquire+0x120/0x360 [ 702.180562][T19101] _raw_read_lock_irqsave+0xaf/0x100 [ 702.186015][T19101] kill_fasync+0x199/0x4d0 [ 702.190593][T19101] evdev_pass_values+0x627/0xbd0 [ 702.195691][T19101] evdev_events+0x1e6/0x340 [ 702.200358][T19101] input_pass_values+0x288/0x890 [ 702.205465][T19101] input_event_dispose+0x330/0x6b0 [ 702.210733][T19101] input_inject_event+0x1dd/0x340 [ 702.215911][T19101] evdev_write+0x2fc/0x480 [ 702.220491][T19101] vfs_write+0x27e/0xb30 [ 702.224899][T19101] ksys_write+0x145/0x250 [ 702.229391][T19101] do_syscall_64+0xfa/0xfa0 [ 702.234061][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.240111][T19101] [ 702.242412][T19101] -> (&f_owner->lock){....}-{3:3} { [ 702.247633][T19101] INITIAL USE at: [ 702.251506][T19101] lock_acquire+0x120/0x360 [ 702.257556][T19101] _raw_write_lock_irq+0xa2/0xf0 [ 702.264047][T19101] __f_setown+0x67/0x370 [ 702.269837][T19101] fcntl_dirnotify+0x3fa/0x6a0 [ 702.276151][T19101] do_fcntl+0x6d0/0x1910 [ 702.281945][T19101] __se_sys_fcntl+0xc8/0x150 [ 702.288086][T19101] do_syscall_64+0xfa/0xfa0 [ 702.294144][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.301583][T19101] INITIAL READ USE at: [ 702.305894][T19101] lock_acquire+0x120/0x360 [ 702.312378][T19101] _raw_read_lock_irqsave+0xaf/0x100 [ 702.319654][T19101] send_sigio+0x38/0x370 [ 702.325879][T19101] dnotify_handle_event+0x169/0x440 [ 702.333062][T19101] fsnotify+0x1671/0x1a80 [ 702.339371][T19101] __fsnotify_parent+0x3fe/0x540 [ 702.346287][T19101] vfs_readv+0x6e2/0x850 [ 702.352510][T19101] __x64_sys_preadv+0x197/0x2a0 [ 702.359350][T19101] do_syscall_64+0xfa/0xfa0 [ 702.365843][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.373719][T19101] } [ 702.376195][T19101] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 702.385039][T19101] ... acquired at: [ 702.388819][T19101] lock_acquire+0x120/0x360 [ 702.393477][T19101] _raw_read_lock_irqsave+0xaf/0x100 [ 702.398932][T19101] send_sigio+0x38/0x370 [ 702.403337][T19101] kill_fasync+0x24d/0x4d0 [ 702.407914][T19101] lease_break_callback+0x26/0x30 [ 702.413106][T19101] __break_lease+0x6a5/0x1620 [ 702.417948][T19101] do_dentry_open+0x8b7/0x13f0 [ 702.422869][T19101] vfs_open+0x3b/0x340 [ 702.427095][T19101] path_openat+0x2ee5/0x3830 [ 702.431847][T19101] do_filp_open+0x1fa/0x410 [ 702.436515][T19101] do_sys_openat2+0x121/0x1c0 [ 702.441355][T19101] __x64_sys_openat+0x138/0x170 [ 702.446365][T19101] do_syscall_64+0xfa/0xfa0 [ 702.451034][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.457082][T19101] [ 702.459381][T19101] [ 702.459381][T19101] the dependencies between the lock to be acquired [ 702.459393][T19101] and SOFTIRQ-irq-unsafe lock: [ 702.472863][T19101] -> (tasklist_lock){.+.+}-{3:3} { [ 702.477982][T19101] HARDIRQ-ON-R at: [ 702.481945][T19101] lock_acquire+0x120/0x360 [ 702.488086][T19101] _raw_read_lock+0x36/0x50 [ 702.494230][T19101] __do_wait+0xde/0x740 [ 702.500028][T19101] do_wait+0x1f8/0x510 [ 702.505739][T19101] kernel_wait+0xab/0x170 [ 702.511714][T19101] call_usermodehelper_exec_work+0xbe/0x230 [ 702.519242][T19101] process_scheduled_works+0xae1/0x17b0 [ 702.526423][T19101] worker_thread+0x8a0/0xda0 [ 702.532649][T19101] kthread+0x711/0x8a0 [ 702.538360][T19101] ret_from_fork+0x4bc/0x870 [ 702.544580][T19101] ret_from_fork_asm+0x1a/0x30 [ 702.550973][T19101] SOFTIRQ-ON-R at: [ 702.554934][T19101] lock_acquire+0x120/0x360 [ 702.561069][T19101] _raw_read_lock+0x36/0x50 [ 702.567210][T19101] __do_wait+0xde/0x740 [ 702.573008][T19101] do_wait+0x1f8/0x510 [ 702.578722][T19101] kernel_wait+0xab/0x170 [ 702.584695][T19101] call_usermodehelper_exec_work+0xbe/0x230 [ 702.592223][T19101] process_scheduled_works+0xae1/0x17b0 [ 702.599403][T19101] worker_thread+0x8a0/0xda0 [ 702.605626][T19101] kthread+0x711/0x8a0 [ 702.611336][T19101] ret_from_fork+0x4bc/0x870 [ 702.617560][T19101] ret_from_fork_asm+0x1a/0x30 [ 702.623954][T19101] INITIAL USE at: [ 702.627829][T19101] lock_acquire+0x120/0x360 [ 702.633875][T19101] _raw_write_lock_irq+0xa2/0xf0 [ 702.640367][T19101] copy_process+0x224f/0x3c00 [ 702.646593][T19101] kernel_clone+0x21e/0x840 [ 702.652647][T19101] user_mode_thread+0xdd/0x140 [ 702.658958][T19101] rest_init+0x23/0x300 [ 702.664676][T19101] start_kernel+0x3ae/0x410 [ 702.670728][T19101] x86_64_start_reservations+0x24/0x30 [ 702.677741][T19101] x86_64_start_kernel+0x143/0x1c0 [ 702.684405][T19101] common_startup_64+0x13e/0x147 [ 702.690897][T19101] INITIAL READ USE at: [ 702.695208][T19101] lock_acquire+0x120/0x360 [ 702.701691][T19101] _raw_read_lock+0x36/0x50 [ 702.708183][T19101] __do_wait+0xde/0x740 [ 702.714327][T19101] do_wait+0x1f8/0x510 [ 702.720386][T19101] kernel_wait+0xab/0x170 [ 702.726705][T19101] call_usermodehelper_exec_work+0xbe/0x230 [ 702.734578][T19101] process_scheduled_works+0xae1/0x17b0 [ 702.742105][T19101] worker_thread+0x8a0/0xda0 [ 702.748680][T19101] kthread+0x711/0x8a0 [ 702.754739][T19101] ret_from_fork+0x4bc/0x870 [ 702.761309][T19101] ret_from_fork_asm+0x1a/0x30 [ 702.768049][T19101] } [ 702.770524][T19101] ... key at: [] tasklist_lock+0x18/0x40 [ 702.778234][T19101] ... acquired at: [ 702.782013][T19101] lock_acquire+0x120/0x360 [ 702.786670][T19101] _raw_read_lock+0x36/0x50 [ 702.791337][T19101] send_sigio+0x101/0x370 [ 702.795829][T19101] dnotify_handle_event+0x169/0x440 [ 702.801189][T19101] fsnotify+0x1671/0x1a80 [ 702.805673][T19101] __fsnotify_parent+0x3fe/0x540 [ 702.810765][T19101] vfs_write+0x854/0xb30 [ 702.815172][T19101] ksys_write+0x145/0x250 [ 702.819668][T19101] do_syscall_64+0xfa/0xfa0 [ 702.824337][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.830387][T19101] [ 702.832690][T19101] [ 702.832690][T19101] stack backtrace: [ 702.838559][T19101] CPU: 0 UID: 0 PID: 19101 Comm: syz.4.4440 Not tainted syzkaller #0 PREEMPT(full) [ 702.838584][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 702.838599][T19101] Call Trace: [ 702.838608][T19101] [ 702.838619][T19101] dump_stack_lvl+0x189/0x250 [ 702.838653][T19101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.838683][T19101] ? __pfx__printk+0x10/0x10 [ 702.838712][T19101] validate_chain+0x1f05/0x2140 [ 702.838754][T19101] __lock_acquire+0xab9/0xd20 [ 702.838779][T19101] ? send_sigio+0x101/0x370 [ 702.838803][T19101] lock_acquire+0x120/0x360 [ 702.838824][T19101] ? send_sigio+0x101/0x370 [ 702.838851][T19101] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 702.838882][T19101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.838912][T19101] _raw_read_lock+0x36/0x50 [ 702.838940][T19101] ? send_sigio+0x101/0x370 [ 702.838964][T19101] send_sigio+0x101/0x370 [ 702.838993][T19101] dnotify_handle_event+0x169/0x440 [ 702.839028][T19101] fsnotify+0x1671/0x1a80 [ 702.839050][T19101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.839084][T19101] ? fsnotify+0x735/0x1a80 [ 702.839104][T19101] ? __pfx_fsnotify+0x10/0x10 [ 702.839128][T19101] ? take_dentry_name_snapshot+0x29/0x500 [ 702.839154][T19101] __fsnotify_parent+0x3fe/0x540 [ 702.839180][T19101] ? __pfx___fsnotify_parent+0x10/0x10 [ 702.839207][T19101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.839232][T19101] ? shmem_file_write_iter+0x103/0x120 [ 702.839267][T19101] vfs_write+0x854/0xb30 [ 702.839300][T19101] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 702.839333][T19101] ? __pfx_vfs_write+0x10/0x10 [ 702.839370][T19101] ? __fget_files+0x2a/0x420 [ 702.839392][T19101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.839420][T19101] ksys_write+0x145/0x250 [ 702.839453][T19101] ? __pfx_ksys_write+0x10/0x10 [ 702.839491][T19101] ? do_syscall_64+0xbe/0xfa0 [ 702.839526][T19101] do_syscall_64+0xfa/0xfa0 [ 702.839557][T19101] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.839589][T19101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.839610][T19101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.839634][T19101] ? exc_page_fault+0xab/0x100 [ 702.839666][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.839688][T19101] RIP: 0033:0x7fe667d8f6c9 [ 702.839707][T19101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.839726][T19101] RSP: 002b:00007fe668c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.839749][T19101] RAX: ffffffffffffffda RBX: 00007fe667fe5fa0 RCX: 00007fe667d8f6c9 [ 702.839766][T19101] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 702.839781][T19101] RBP: 00007fe667e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 702.839795][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.839810][T19101] R13: 00007fe667fe6038 R14: 00007fe667fe5fa0 R15: 00007ffff2159958 [ 702.839836][T19101] [ 703.310064][T18937] team0: Port device team_slave_0 added [ 703.345071][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.354043][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.362011][T18935] bridge_slave_0: entered allmulticast mode [ 703.369089][T18935] bridge_slave_0: entered promiscuous mode [ 703.376905][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.386023][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.393246][T18935] bridge_slave_1: entered allmulticast mode [ 703.399994][T18935] bridge_slave_1: entered promiscuous mode [ 703.407679][T18937] team0: Port device team_slave_1 added [ 703.416963][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.428458][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.471279][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.480975][T18937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.487909][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.513800][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.521017][T18937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.534921][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.552497][T18937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.559420][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.585290][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.591500][T18937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.604775][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.615671][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.643246][T18935] team0: Port device team_slave_0 added [ 703.651090][T18935] team0: Port device team_slave_1 added [ 703.690115][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.697165][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.724742][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.739228][T18937] hsr_slave_0: entered promiscuous mode [ 703.745918][T18937] hsr_slave_1: entered promiscuous mode [ 703.753357][T18937] debugfs: 'hsr0' already exists in 'hsr' [ 703.759076][T18937] Cannot create hsr debugfs directory [ 703.765200][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.772371][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.798576][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.890784][T18935] hsr_slave_0: entered promiscuous mode [ 703.897199][T18935] hsr_slave_1: entered promiscuous mode [ 703.903476][T18935] debugfs: 'hsr0' already exists in 'hsr' [ 703.909185][T18935] Cannot create hsr debugfs directory [ 703.921442][ T3479] bridge_slave_1: left allmulticast mode [ 703.927135][ T3479] bridge_slave_1: left promiscuous mode [ 703.932866][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.941444][ T3479] bridge_slave_0: left allmulticast mode [ 703.947064][ T3479] bridge_slave_0: left promiscuous mode [ 703.952989][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.096077][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.105752][ T3479] bond0 (unregistering): Released all slaves [ 704.232000][ T3479] bond1 (unregistering): Released all slaves [ 704.336890][ T3479] tipc: Disabling bearer [ 704.342905][ T3479] tipc: Left network mode [ 704.491100][ T3479] hsr_slave_0: left promiscuous mode [ 704.496833][ T3479] hsr_slave_1: left promiscuous mode [ 704.503008][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.510715][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.518297][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.525759][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.537582][ T3479] team_slave_0: left promiscuous mode [ 704.543021][ T3479] team_slave_1: left promiscuous mode [ 704.548541][ T3479] veth1_macvtap: left promiscuous mode [ 704.554455][ T3479] veth1_vlan: left promiscuous mode [ 704.559771][ T3479] veth0_vlan: left promiscuous mode [ 704.738173][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 704.777445][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 705.201802][ T3479] IPVS: stop unused estimator thread 0... [ 705.228985][ T3479] ------------[ cut here ]------------ [ 705.234684][ T3479] WARNING: CPU: 0 PID: 3479 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 705.235981][T18937] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 705.244474][ T3479] Modules linked in: [ 705.255849][ T3479] CPU: 0 UID: 0 PID: 3479 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 705.265449][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.275851][ T3479] Workqueue: netns cleanup_net [ 705.280922][ T3479] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 705.286478][ T3479] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 89 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 6d 1a f8 e8 04 c7 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 c6 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 705.306393][ T3479] RSP: 0018:ffffc9000bb07878 EFLAGS: 00010293 [ 705.312689][ T3479] RAX: ffffffff89eb3d0c RBX: ffff888078d18000 RCX: ffff88802fde0000 [ 705.320845][ T3479] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffff88802fde0000 [ 705.328814][ T3479] RBP: ffffc9000bb07990 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 705.336971][ T3479] R10: dffffc0000000000 R11: fffffbfff1ef9d6f R12: ffffffff8f3c6b80 [ 705.345081][ T3479] R13: 1ffff92001760f3c R14: ffff888078d194c0 R15: dffffc0000000000 [ 705.353531][ T3479] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 705.362986][ T3479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.369562][ T3479] CR2: 00007ffc26a607e8 CR3: 0000000074ecd000 CR4: 0000000000350ef0 [ 705.377714][ T3479] Call Trace: [ 705.381337][ T3479] [ 705.384542][ T3479] xfrm_net_exit+0x2d/0x70 [ 705.388951][ T3479] ops_undo_list+0x49a/0x990 [ 705.393710][ T3479] ? __pfx_ops_undo_list+0x10/0x10 [ 705.398820][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.404636][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.410260][ T3479] ? do_raw_spin_unlock+0x122/0x240 [ 705.415691][ T3479] cleanup_net+0x4d8/0x820 [ 705.420091][ T3479] ? __pfx_cleanup_net+0x10/0x10 [ 705.425228][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.431000][ T3479] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.436188][ T3479] ? process_scheduled_works+0x9ef/0x17b0 [ 705.442103][ T3479] ? process_scheduled_works+0x9ef/0x17b0 [ 705.447826][ T3479] process_scheduled_works+0xae1/0x17b0 [ 705.453876][ T3479] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.459864][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.465989][ T3479] worker_thread+0x8a0/0xda0 [ 705.470625][ T3479] kthread+0x711/0x8a0 [ 705.474687][ T3479] ? __pfx_worker_thread+0x10/0x10 [ 705.479883][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.484636][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.490308][ T3479] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.495524][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.501228][ T3479] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.506448][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.511088][ T3479] ret_from_fork+0x4bc/0x870 [ 705.515687][ T3479] ? __pfx_ret_from_fork+0x10/0x10 [ 705.520848][ T3479] ? __switch_to_asm+0x39/0x70 [ 705.525612][ T3479] ? __switch_to_asm+0x33/0x70 [ 705.530389][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.534993][ T3479] ret_from_fork_asm+0x1a/0x30 [ 705.539746][ T3479] [ 705.543656][ T3479] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 705.550944][ T3479] CPU: 0 UID: 0 PID: 3479 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 705.560400][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.570444][ T3479] Workqueue: netns cleanup_net [ 705.575202][ T3479] Call Trace: [ 705.578464][ T3479] [ 705.581381][ T3479] dump_stack_lvl+0x99/0x250 [ 705.585963][ T3479] ? __asan_memcpy+0x40/0x70 [ 705.590549][ T3479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.595738][ T3479] ? __pfx__printk+0x10/0x10 [ 705.600323][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.605965][ T3479] vpanic+0x237/0x6d0 [ 705.609939][ T3479] ? __pfx_vpanic+0x10/0x10 [ 705.614439][ T3479] panic+0xb9/0xc0 [ 705.618160][ T3479] ? __pfx_panic+0x10/0x10 [ 705.622575][ T3479] __warn+0x31b/0x4b0 [ 705.626547][ T3479] ? xfrm_state_fini+0x26d/0x2f0 [ 705.631473][ T3479] ? xfrm_state_fini+0x26d/0x2f0 [ 705.636402][ T3479] report_bug+0x2be/0x4f0 [ 705.640724][ T3479] ? xfrm_state_fini+0x26d/0x2f0 [ 705.645651][ T3479] ? xfrm_state_fini+0x26d/0x2f0 [ 705.650581][ T3479] ? xfrm_state_fini+0x26f/0x2f0 [ 705.655523][ T3479] handle_bug+0x84/0x160 [ 705.659763][ T3479] exc_invalid_op+0x1a/0x50 [ 705.664254][ T3479] asm_exc_invalid_op+0x1a/0x20 [ 705.669092][ T3479] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 705.674632][ T3479] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 89 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 6d 1a f8 e8 04 c7 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 c6 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 705.694226][ T3479] RSP: 0018:ffffc9000bb07878 EFLAGS: 00010293 [ 705.700287][ T3479] RAX: ffffffff89eb3d0c RBX: ffff888078d18000 RCX: ffff88802fde0000 [ 705.708252][ T3479] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffff88802fde0000 [ 705.716212][ T3479] RBP: ffffc9000bb07990 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 705.724170][ T3479] R10: dffffc0000000000 R11: fffffbfff1ef9d6f R12: ffffffff8f3c6b80 [ 705.732128][ T3479] R13: 1ffff92001760f3c R14: ffff888078d194c0 R15: dffffc0000000000 [ 705.740090][ T3479] ? xfrm_state_fini+0x26c/0x2f0 [ 705.745027][ T3479] ? xfrm_state_fini+0x26c/0x2f0 [ 705.749957][ T3479] xfrm_net_exit+0x2d/0x70 [ 705.754371][ T3479] ops_undo_list+0x49a/0x990 [ 705.758953][ T3479] ? __pfx_ops_undo_list+0x10/0x10 [ 705.764050][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.769678][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.775300][ T3479] ? do_raw_spin_unlock+0x122/0x240 [ 705.780499][ T3479] cleanup_net+0x4d8/0x820 [ 705.784901][ T3479] ? __pfx_cleanup_net+0x10/0x10 [ 705.789823][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.795446][ T3479] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.800647][ T3479] ? process_scheduled_works+0x9ef/0x17b0 [ 705.806355][ T3479] ? process_scheduled_works+0x9ef/0x17b0 [ 705.812062][ T3479] process_scheduled_works+0xae1/0x17b0 [ 705.817611][ T3479] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.823580][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.829205][ T3479] worker_thread+0x8a0/0xda0 [ 705.833797][ T3479] kthread+0x711/0x8a0 [ 705.837862][ T3479] ? __pfx_worker_thread+0x10/0x10 [ 705.842961][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.847543][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.853164][ T3479] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.858355][ T3479] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.863975][ T3479] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.869171][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.873755][ T3479] ret_from_fork+0x4bc/0x870 [ 705.878335][ T3479] ? __pfx_ret_from_fork+0x10/0x10 [ 705.883437][ T3479] ? __switch_to_asm+0x39/0x70 [ 705.888187][ T3479] ? __switch_to_asm+0x33/0x70 [ 705.892933][ T3479] ? __pfx_kthread+0x10/0x10 [ 705.897521][ T3479] ret_from_fork_asm+0x1a/0x30 [ 705.902277][ T3479] [ 705.905491][ T3479] Kernel Offset: disabled [ 705.909801][ T3479] Rebooting in 86400 seconds..