last executing test programs: 10m1.906503384s ago: executing program 32 (id=1813): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) accept4(r0, 0x0, 0x0, 0x180800) 8m44.687422694s ago: executing program 33 (id=2540): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) 8m28.392286229s ago: executing program 34 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m47.564374325s ago: executing program 35 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 7m16.038369025s ago: executing program 36 (id=3261): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x19}, 0x0) 3m51.333339376s ago: executing program 1 (id=5136): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 3m51.106766365s ago: executing program 1 (id=5140): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x1c, "73009cbd9b7773b7ec9c2c4ddb78b636bac8ed769f21f2d18171c7db"}, &(0x7f0000000380)=0x24) 3m50.85705005s ago: executing program 1 (id=5144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x40810, 0x4081a}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x4000000) 3m50.647500427s ago: executing program 1 (id=5147): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) 3m49.930236046s ago: executing program 1 (id=5154): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='name', &(0x7f0000000000)='c!\xf1\xa7\x9d', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) 3m49.3743011s ago: executing program 1 (id=5159): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000000)="05", 0x1}], 0x1, 0x4, 0x0) 3m48.652327993s ago: executing program 37 (id=5159): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000000)="05", 0x1}], 0x1, 0x4, 0x0) 1m49.767032459s ago: executing program 7 (id=6352): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') 1m49.398510041s ago: executing program 7 (id=6357): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0xfff5, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m49.153951189s ago: executing program 7 (id=6359): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002500)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1m48.706871834s ago: executing program 7 (id=6363): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)=""/61, 0x3d) 1m47.526855375s ago: executing program 7 (id=6375): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1m45.438599134s ago: executing program 3 (id=6395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 1m44.697026531s ago: executing program 3 (id=6401): setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 1m44.422278348s ago: executing program 3 (id=6405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x64b2, &(0x7f00000002c0)={0x0, 0x4d49, 0x40, 0x5, 0x1ed}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000040)={0x9}, 0x1) 1m44.186026246s ago: executing program 3 (id=6409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 1m43.679566187s ago: executing program 3 (id=6414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000350000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x138}}, 0x0) 1m40.839570235s ago: executing program 3 (id=6444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) 1m40.019443554s ago: executing program 38 (id=6444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) 1m39.955039726s ago: executing program 7 (id=6448): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) unshare(0x24060400) move_mount(r0, 0x0, r1, 0x0, 0x46) 1m39.453388899s ago: executing program 39 (id=6448): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) unshare(0x24060400) move_mount(r0, 0x0, r1, 0x0, 0x46) 1m24.433939591s ago: executing program 8 (id=6539): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.186376891s ago: executing program 8 (id=6549): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.022985226s ago: executing program 8 (id=6551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1m21.91914772s ago: executing program 8 (id=6552): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc08, &(0x7f00000002c0)={[{@allow_utime={'allow_utime', 0x3d, 0xd4}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {}, {@umask={'umask', 0x3d, 0x1338}}, {@errors_remount}, {@errors_continue}, {@keep_last_dots}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m21.723513416s ago: executing program 8 (id=6554): openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) unshare(0xa020480) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r0, r0, 0x2f, 0x2008, 0x4}, 0x20) 1m20.831422814s ago: executing program 8 (id=6565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1m20.434531885s ago: executing program 40 (id=6565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 3.558585326s ago: executing program 6 (id=7269): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.822793673s ago: executing program 0 (id=7281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x61) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x108, 0x5}, 0x0, 0x0, 0x40, 0x6, 0x92, 0xda2, 0x0, 0x5, 0x6, 0x8, 0xffffffffffffffff}) 2.763843049s ago: executing program 9 (id=7282): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 2.623999174s ago: executing program 0 (id=7284): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, 0x0) 2.523048889s ago: executing program 6 (id=7286): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0xfff, 0x0, 0x3}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x4], [0x10000000, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x2fa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x81, 0x0, 0x419], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x42af19d6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 2.383366343s ago: executing program 0 (id=7288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r0) 2.36428036s ago: executing program 9 (id=7290): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) 2.211073542s ago: executing program 6 (id=7292): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x8}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000007c40)=@abs, 0x6e, &(0x7f0000008f00)}}], 0x4, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2.155044372s ago: executing program 0 (id=7293): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000340)={0x1d, r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) 2.125194826s ago: executing program 9 (id=7294): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) 1.829696802s ago: executing program 0 (id=7296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x90}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20004091}, 0x4) 1.829333945s ago: executing program 6 (id=7297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0x8, 0xa, 0x60, 0x10, 0x58, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x10003}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1158e3b975e78980}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.82913232s ago: executing program 2 (id=7298): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800"/16, @ANYRES64=r0], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) 1.644826431s ago: executing program 6 (id=7300): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70769c266299881e362049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f7c896c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4b", @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES8], 0x1, 0x620f, &(0x7f000000cb40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.620112033s ago: executing program 9 (id=7301): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000004000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400400008002600a8090000"], 0x3c}}, 0x80) 1.619559206s ago: executing program 5 (id=7302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000240)={0x0, 0x9}) 1.549038489s ago: executing program 2 (id=7303): r0 = fanotify_init(0x4, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x100, 0x0) fanotify_mark(r0, 0x441, 0x8000029, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x84a42, 0x99) 1.527489986s ago: executing program 0 (id=7304): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$eJzs3WuQXNV9IPBzu3s0Lz1GAgcZzGiQ0Ybg2BrxKj9SsZJN7BQQSi5SDmJlw4BGRLYkVHoEECSILHhRAS6cIpXg5ANxYXYxiosq2BiFMuGxEmtjq9h4qS1MrZ3F/uAtwqIKoKVcXs/W9NzT032779yenh4hid+vYG7fM6f/99xzT9++/9NX0wEAAID3hEN37Dx62em/+90/G3/71t/7h623hcFytbwvVhhKlze+Wy3kWOqtLK8us+PiV2/+xk9Hrv3t7zw68PV3Dm48a9MPf+eUa5/8wsUH7v/rZ95a9PgvXy2KG8fTudPryetJCH3fPvIXXzr4wmmTZcniyZ+lvSEsTZY9szQJ4fb6EKM/DyFsTFeWZ+I/9vb5myaXt93V21C+JFPPeH9vmzzOSQhhz9EbPhR+9Fvrb//+im/+Xc/+1/ZOV0n66sZTCIuvrn9+TwihP/1/UhxtcTwm6XJdCGGg7nkfLWjXB9to96TVmfK4fka6XJAuBwvixd+vzKyXMvWy61FPZjlQsL25ymtHp/WKLMysJ12KG+W1M5YvTZffSpfnzjJ+Od2HchJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fK6x/X13h/L0hfqO9k6maCDTQ9q+1UV23VkhrYcC6W6c1Cr8tqBTw/GYFo2mCxres5EC/F3B9ffvaq84dlDQzntSB5N0vhJR/H3fG/pws8/sm939n29Fv/qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9vZ+/MEld12ce3zXxf4Z6ij+pWc/efvCo0+cmXfuTB7o1jsnwHvTKek11p3peqd55lzV5Qt/NVKZuuZbmP6/qJsbylx8ZvMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiG933ov376f3126PVKut6bPnilNLWM5QtCSPpDCDt3je3YtXnbdSNfuH73jm1jW0bGdo2Mb9u146aRC359ZMf49i1jN03+dvTD5089b1lIppbJmU3b7p2YmCgNNZbF7f3bs/f/aNVH//e/hDD6vh8MV3Lbv/r+rQ+e2uJnRrJ24pNbd1/2gwv/Nt2vobRdQy3aNTExMRFy2vV/rvjFg39+5KfnhDD6KzO16/lXfvMfGxpULZiOkyr1hqkG9SYDLdtRa3XanthflU2bt4yPzty/k88v5+zHv7v5tZ9vuvErv5jq377c/Wizf/vXTmwp/eX6S//fX94yVVDUrnfruE/2dzkn5mS74l7E9sX+60v7e3G6X4tz9quSs193fP/pl759+r639obRypsrmo910X71pAOgJ3l/W9uNWxhIljaU96X14xGPz1u9a+v21Ttv2vPhzVvHrhu/bnzbx9ZcsOai0QsvunB1dc9Xd3n/4/b/TZv7f2zG05I/3vut+LO98dTYrgWz7o/JdhX3R32L8l5/A5d/6b6P3f/cZVMFReeVWLt2PkmXA5PHeU2oG2/NfdVqv4qOTwhhpFU/vPHWxeG0/7H59qLzUP2Rqf+ZkaydeGHlv/7tR/9m+W9MFRyT83x9gzo8z9daPd2ean/1pcdj4jjt3970bNqbDLZs15oXnuu5+9C//EmtfQsWhBvHdu3asWbq58K0pQuTM1q2K1sa92tF9Wc5pN0SasO0xXid1BOm2pc9f8bq2V4dTH83mCxruV9Z8XcH19+9qrzh2UN5PZ08OrXF/rBoapl8IKfmlswTy7UGt9r+8fr6Kxofw5/+m8c/+/jfX9A0Ps6b+lm0X0nOfn3zpYfu+/pX/sPfd2+/Pv2bh4f+9X/+0aqpgmNwXglzOq+UpxpSa3XanqT+vHJeCEWvvxWh9X7kvv5Krfen6PWX3c50/dbxRjLrg6Hc0ev1vKcGXr/kuTtW5r5ej8z0eq3f2VsanlcueL0eL+9L2ddXUmlsx/y9vhoGSrJ24jt3nrL3mVvXnT5VUPR+Wavdalyf30b+kbNf/3jly8PXj/z7/96988Y3fv2xq344tvZPpwo6P+6xLd057n1p//bl9G+t1THvrO/fj1x7/ZaNU+VF/fzuXf+my4L8J55Kdt6054tjW7aM79jZ3n61+34at5Pt5U7fT+PZbVnBfpWa9mv+HrTTX+2+3mL7N3bcX42vt8GQdPS+sOd7Sxd+/pF9u4eanpVu6OpSGr/UUfwfX3L4jSv3fe2rufHvjfErHcUfe/X5e1aces3+3PgPJGn8vuL4i0NT/LUHDvcuOvrU07nxR2P7+ztq/yuf+NRPHn7piddy44cYf7Cz/n9z/0UvDw//LDf+i0m6nclrpBAee/v8TVPrSehJX2+xHT0N7QrZ9SSzXsqsl+vXS3EWId1AOUkay2O9tPysura08oc55fEqrG/51PKduB6yD2YuP96U6s79rcqLrlMBAE528fP/eA0aP/8fTy+U8mcaYNpc87DlOXFjHjY9n9P4GevyNH58fpwHHP5IGJ1c3jYydaE/288R4ushO88Zt3POBxtjtJyfOFC/ker2m+Y5i+bfV2bWY7um5ssrdXloqjmvqYQ25t+btzPz/Htm94s/zxq5s6lZI3XzVtnj15POmLW63yHT3spkhLzxkZ0Xi/dzDC8O66rba3N8ZO+jicchex9N3M7pmRNnp/fR5I2PoeZ+aGhXHB+x3gzjo9rk4s8jm49fmKF/p49f62jZ4zeL4903WX++P5/twrxhy1PasZs3nN/Pw46LeckW8Y/xvOTCpvjpC+x4nzeM5bGfKm3OJ342p7xb84nxdBHbdWSGthwL5hOBk1XM/+N7xGT+P3kB/n8z9YrylOxVY4yXe59Qzk3YRXlH8316Ax29j284sP3LvcNHz8m9znm63fv0tjesDRTc91PUj6sy64X9mDNBU5TvZbdT1O/Z+zIGw6KO+v2hvfd//MEld12c2+/rpt5Ii/v9voa1RQX9fgLkC63jyxdOpnyhOX6X7mMomj/Lz0fKtXbMSz6S3vg0X/nIH+SUzzYfGWh6UNuvquM3H5l+I23IR3qObbsAgBNHzP9rn5+l+f8/xwuL9DqiKG89N7Me4+XmrTnXJ3l56++nyxsz9QfTf1Ex2+vmS89+8vaFR584MzdveaDdPPQ/NawNFeahc8ubc/OIdd25Xzw3j6jlWXPLE3PbX8sT55an53xMW5enzy2Pzu2fWh7dOA9w3+HpTGOm+HEeIDd+bR6gi3nuL6crHbs8t2C+LrOxuNrufN2xzqMnS3oWN+5nY1480J08Ov3ns/OVR1+eUz7bPHqw6UFtv6qO3zy6sVweDQCcrGL+Hy/jqvl/bwjPxQr98cHcPmfPzQu6dN2e/XsgtfgvzkteOR2/S5//Fud98523zndeP9/zEif657/zPS80VP0DnvM1T/au3e86L3nxP9cetZ0XpxuVFwMAcDyL+X9M8+Pn/89l6s01P2nK33qmLiGn85MTLz+vr3cC5+dXhGOVn/eeyPn5iT7/Nb/3yZxc+f+0Dj8Xf2fiJM7/q22W/wMAnJBi/h//2WP8+3//JV3P/t36NvP0B7K38/oc3efoQZ7eRp7e5Xm2GL/+PoATeB6gPPd5gP5jfn98/3T9k2keoKonmAwAADgB9FQzpeZ/Z/+5dJn9d/Z5/y7/ypz67aqkl8fX7NoxPn7V7u0bx3aNX7Xt+o3jO6+6YcfmXbvGa9fOc8sbc/OWNG/sCZW0P1rXy+ZtS9K/h7Ak5+8hZOvHsGdUHzT/PYTsZvsL/o7A9PFrr715x680Q/1W4yPveOfF/8Oc+lHt+F/7R+ddtWnnVZu3bd61eWzL5j3jjfWGqv+Suv3vzYyfU87q+1IzP5qUZv/9nfHwzK0dpaZ29KT9kff97EmmHUvTlizN+/6DnHZ/97/9+R+fPfGLh0MYfV/5A3Pqv2TtxH++Yvz3dx36wfbJ9pdmbH+tZtquou8rzdaP+1PZcv3OXR/adP3ubdlvlOxMnM8o1dbn6b6G9OVfbnN+YkNO+Wz//X656cHxqe35CQAAGsTP/+P1bPz88CvpBVQsL8zTt03Vm+vnx7l5+mh7eXr2e8mK8vRs/bi/7ebpfXPM07PbL8rTW9Vvlafn5d158f8gp/5stT9OOrjPo5L2wyP7dueOk6vbGyfZ7zMoGifZ+rMdJ8kcx0l2+0XjpFX9VuMk77jnxf9MTv08ReOhUhsPc7svJ3c83NveePi1zHrReMjWn+14KM1xPGS3XzQeWtVvNR7yjm9z/MYJgu7M/04OjOq4GL/qhut3fLGu3nx//0VoviWjnfYtmH7u/H7/R6fa79/5ve9r7u0PYW21JK/98fOBBbNqf7v3lc29/UX9P4v7yhaHpvvKctv/4txmwtpv/6zuS7wt/q7d73fJyKve/PxjNV+bDrui+8+K5nHX55TPdh53QdOD45N5XHj3xPw/Xs3F/P+udNntj4FO/O9J6+D++3gO9j1m+f3f5nXMe+79PPuRu/dzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNCb2V5dXnojp1HLzv9d7/7Z+Nv3/p7/7D1tl+9+Rs/Hbn2t7/z6MDX3zm48axNP/ydU6598gsXH7j/r595a9Hjv3y1MPBQ9Wfl3HS1L4Tk9SSEvm8f+YsvHXzhtMmyJIRQTob2hrA0WfbM0iQTYfTnIYSNtXY2/vKxt8/fNLm87a7ehvIlmSDZ/QqD5die+naGcGPhHnEC6kvH2Z6jN3wo/Oi31t/+/RXf/Lue/a/tna6S9NWNpxAWX13//J4QQn/6/6Q42pbHJ6fLdSGEgbrnfbSgXR9ss/2rc9bPSJcL0uVgQZz4+5WZ9VKmXnY96sks6/a1v2DTHclrR6f1iizMrGdPRnOV185YvjRdfitdnjvL+OX4fxJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fKc8veny770hfpOXA/ZB1MGmx7U9qsqtuvIDG1J/cfWxZXiZ7ahVHcOalVeO/DpwRhMywaTZU3PmWgh/u7g+rtXlTc8e2gopx3Jo0kaP+ko/p7vLV34+Uf27V6eF//qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9t7/8QeX3HVx7vFdF/tnqKP4l5795O0Ljz5xZt65M3mgW++cAO9Np6TXWHem653mmXNVly/81Uhl6ppvYfr/om5uKGNyO4vnMT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACenf7rlgs9d8cnPrK8kISQ5dSZaiL8rL1i7dqSD7Y69+vw9K069Zn992fIO4gAAAADFYh5eqpX0heXhhqQ/nNGyfpwjOCOuJY3l2TmEGCc7R9BpnFKLOKUO4pS71J5Kl+L0dCnOgi7F6e1SnL6COH2hvTj9M8SpTI6ANtszMGN72o8z2KU4C7sUZ1EmRKdxFnepPUu6FGdoxjjtj8OlXYqzrEtxTulSnFO7FOd9XYrzK12Kc1qX4mTnlGc7DhelNU/Pi1N9UC6MU0nKtV+0mk8/Ld3OmXPczmDBdhYVvR+3uZ3+NrfzwczzSrPcTl+b27lgjttJ2tzOr81xO6WC7cRxe2O2fXE7ca3N8X9Tl+Ls6VKcm7sU55YuxfmTLsX50y7FuTU0XpzONg5Au2L+P53vDYXeym+EgfSMk50FiPnuiurP5ve7vBNSjPeBTPmConjZRD0Tb8Vs25edQMjEW5kp72mIV6nlIzPE66uPtyrzy5n29xNrW7etPt65mfLeGeI17AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAP/dMsFn7vik59ZH5Iw+V9LEy3E35UXrF070sF2D66/e1V5w7OH6st6Kx0EAgAAAArFPLynVtIXeitrQm+yoKFeXzoP0Jeul4emlsOLw7rJZTJSqq4PJEtnfF4lfd7qXVu3r955054Pb946dt34dePbPrbmgjUXjV540YWrN23eMj469TOE3oJ4IYTq9MPOm/Z8cWzLlvEdO6cKs+1fnj5vebqepM8b/kgYnVzelrZ/WcH2Sk3bm78HxUcPAAAAAAAAAAAAAAAAAAAAAAD+P7v2GyJpXQcA/PvMzM6Mq5cb/hsP7xzOU6ys9FpDS9wHggT/HC5CzFqbHHmStHqH3onZpAepKUWgHBwXvujCJE1645+UyD8cGGYJ7XWESvmiXhRahoovQpnY3Xnm38442yS35/X5vJjnme/v+/t9f7+H4+D7zAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxa8/XJ2drU9Mx4EpEMyGn0kY3li2laHaHuV57c/oPS+nfO7IyVCiMsBAAAAAyV9eFjrUg5SoV85OPkxW8bomMg2n0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e+Pjlbm5qeOTqJSAbkNPrIxvLFNK2OUPfVtx7+7Evr1/+tM1YZYR0AAABguKwPz7Ui5ajEaTGWnLzQ+bei2buBtT3zl/LasnXWrTCv993BoLzTVph3xgrzPjYkb3PzenMAAADAh1/W/xdakYkoFdYs64ez/n9YX5/lndqTl29eq51J76u4kiQAAABgBbL+v9SKVKJUqLT69ZX2+xvaocWfzrP5w363z+af3pOXzR/2e/5lzavf6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgw2O+Pjlbm5qeyScRyYCcRh/ZWL6YptUR6m56avwfl+y/Y0NnrFQYYSEAAABgqKwPb7fe5SgVxmMsjl7s+9dfdN+jX3r08cmIWGrzi8W4ecuOHTdsWviMTVneOS/sH/v+c69/e1neOUufq3ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAzNfn5ytTU3PHJVEJANyGn1kY/limlZHqPvK57/4lwcPPvFaZ6wywjoAAADAcFkf3u79y1GJYhTjxMVvnb3+glzP/EHvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjx43fvOUbW+bmtt7gZnVuGvmIw2Ab/+NN9s/pcNnPh/+mvNrbWN3/lwAAgA/eqZFE47900uWrvWsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBwMF+fnK1NTc+Uk4hkQE4jU2oHsrF8MU2rI9RNn3yxtOadp57pjFVGWAcAAAAYLuvD271/OSoxFmNxwuK3fu8EGgv9/8Qh3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWJmvT87WpqZn1iQRyYCcRh/ZWL6YptUR6j6wa+/n7j/2exd3xkqFERYCAAAAhsr68GIrUo5S4eNRilOa3+e6JyT55rX/e4H2vO1d08ZXPK/eNS//fvOSQkRr3l09Jys0T7M0r5ytN7F0bdWrtuflmvOqHfMq0Spfbc1bfFi7u6qtGXK+5U8eAAAADp2s/y+1IhNRKpQ6+v+fNq9HNa+D+tzcod04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDYma9PztampmeSJCIZkNPoIxvLF9O0OkLdW3770WO++rO7d3bGKiOsAwAAAAyX9eHt3r8clVgXH4l1i31/THTnZ3n/rL17/73/+uuZEWefeGB9oXfZH2U3v37lwqd7PyJy3dm5iGOb9ZIB9X7z+3tv2th498GIs0/In7KsXrx/ve4l08Zjta2X7XjuwPYhDwcAAACOEFn/P9aKTESpcP3A/j/rvIf0/y2LDfixN+36xfHNz2ZH3jMjN9GslxtQ7wsbH/7z6ef9/fWF/n95vU+27j6997r7j+8quBTpkaSNqet2bj5w7r5cduql+vme+tlz+fK3Xvv3NTff8+5S/XKUm/G1PVtZqrb8s6d8pI253J6ZS9/bU++uXxhw/jt+98zBX629++2F+m+dOt6qf0b0q7908sLA+nFU2hi/4s7d5+/dv7m7fkRU+9V/4+2L46Q/Xnt77/nH42DXwp1PvvOz9wGkjRc2vLnvvPsqF3TXT3rqZ8//5wcf2P2Te777eFY/+1uRM0+LFdbP9dR//q7jdj172+Vru+vnBpz/6StfWr+t+p0/9J7/6q5VCwN3sfz8D531yFUvb0lv7R0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sszXJ2drU9MzuSQiGZDT6CMbyxfTtDpC3VcvefGNK+/+8Q87Y5UR1gEAAACGy/rwdu9fjkoUoxjji33/Y7Wtl+147sD2mFgaTZrXwty2G3d84pptO6+/epV2DgAAAKzUq5cki/1/oRWZiFJhY4w1+/+p63ZuPnDuvlzW/+cWrklEXHPt3Nazo5X3/F3H7Xr2tsvXtt4TRCz+WUB5Ie8z7byLLnxx4s0/ff30vnmb2nkvbHhz33n3VS7I8qIz75xovZ946KxHrnp5S3pra3+deZ/62ra55uuJbN3xK+7cff7e/Ztz2XuM5nW8uW6WN5fbM3Ppe3vquYkoLYznm3nl5rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOXm65OztanpmchHJANyGp2agWwsX0zT6gh1L934y9uPeeeJdZ2xUmGEhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36CY2j7OMA/jy7yZtNNmmT9gWjYppWRamHFgURvaioSCtS8FQpUm3tQRQEEaUeTKUVS1W8CFYvRVRQoxQq2FgsrZKK/4oXDyooVA9CKQY0S/Ggks0zm81kpxs3KiifDyxPnmdmvvObmWefzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL9KT9dwvT2x56Ha7Rfc/MkT904/fut7D+y67LE3fhjdduPHB/tePTu5ffWOr29aue3IfRsm9r90/JeBd3471Tb40dlmbepWQohnYgiV96eef3Ly0/NmxmIIoRwHx0IYiiuOD8VcwvpfQwjbG3XO33ho+qodM+2ufT3zxpfnQvLXFarlrJ5Zg/Pr5b+lkubZztojV4Rvb9i8+/NVb7/VPX56bG6XOLNPOc2nEJZtbT6+O4TQmz4zstk2nB2c2k0hhL6m465pU9fFi6x/XQi1XL/uwtT+L7XVNjnZ9jW5fim3X76f6c61fW3Ot1RFdbTdr7ez8/Xn+vnFaKkada5rPT6U2ndTu/ZP5pezTwylGLoa5d8f5+ZIaHpuMcT6s6w0+qXGsw3p+nP9mOuXcv1yd+666udNE60c4/zxbL/ceLYcd6Xx1c1rdQt3FIyfn9pK+qKezfoh/8es6oI/GtdVl9U1dY5a/gmlpjWo1XjjwaeHUU1j1bhiwTG/t5Btm9z89KXlLR+cGCyoIx6MKT92lL/zs6H+u97c+/BwUf7WUsovdZT/3caTP9259+UXC/Ofy/LLHeVfebTvzMYP96wpvD9TcyvIYvJj6mfb7j710TOr/n/PeKtnXc88kN3/Skf1Xz9xsmegdvRYYf3rs/vT21H+N9fd8v3rXx4+XZgfsvy+jvK3TDz4bM9I7fLC/GOzX4VqfYZ2MH9+Hr/6q5GRH0eL8r/I7v9Ai/zYNv+1sf3XvrJ834bC+bkpuz+DKX/hD9u58m+75Mju/trhi4rWznhgsb+wALSyMv2P9VTqt3vPPDRdavmeuVRN7wsvjHbN/gL1p8/AX3minJnzLPsb8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//0wFDK4=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.439585781s ago: executing program 4 (id=7305): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001300)="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", 0x5b5}, {0x0}], 0x2}}], 0x2, 0x2004884c) 1.363867135s ago: executing program 5 (id=7306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 1.329323712s ago: executing program 2 (id=7307): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140), &(0x7f0000000180)) 1.296204605s ago: executing program 9 (id=7308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0xc3d33000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1.242709778s ago: executing program 4 (id=7309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x100000000}, 0x18) fstatfs(r0, &(0x7f0000000180)=""/167) 1.154764347s ago: executing program 5 (id=7310): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) 1.049512721s ago: executing program 4 (id=7311): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x808, &(0x7f0000000080)=ANY=[], 0xfd, 0x1a7, &(0x7f0000000d40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) lseek(r0, 0x8, 0x1) getdents(r0, 0x0, 0x40) 1.039093465s ago: executing program 9 (id=7312): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086304270000000000000109022400010000300709040c0004030000000921faff080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\a\x00'], 0x0}, 0x0) 875.077005ms ago: executing program 5 (id=7313): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r0, 0x2def, 0xb80c, 0x2c, 0x0, 0x0) 767.469387ms ago: executing program 4 (id=7314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 735.093962ms ago: executing program 5 (id=7315): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002380)=""/4094, 0xffe) 615.034519ms ago: executing program 2 (id=7316): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x0, 0xfffd, 0x5, 0x6, 0x8}, {0x74, 0x2, 0x8, 0x576, 0x5d7, 0x2}, 0xa, 0xc0000, 0xc58}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0x6c}}, 0x44080) 384.69452ms ago: executing program 5 (id=7317): socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 321.019162ms ago: executing program 4 (id=7318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 204.212777ms ago: executing program 2 (id=7319): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x2000, 0x6) 122.912674ms ago: executing program 6 (id=7320): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 80.300177ms ago: executing program 4 (id=7321): r0 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x2a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 0s ago: executing program 2 (id=7322): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@noblock_validity}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') kernel console output (not intermixed with test programs): . Please run fsck. [ 809.525439][T24447] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6668'. [ 809.592431][T24447] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 810.065232][T24466] team_slave_0: entered promiscuous mode [ 810.071415][T24466] team_slave_1: entered promiscuous mode [ 810.092428][T24469] loop5: detected capacity change from 0 to 256 [ 810.100715][T24470] loop2: detected capacity change from 0 to 512 [ 810.113547][T24469] exfat: Deprecated parameter 'utf8' [ 810.122968][T24469] exfat: Deprecated parameter 'utf8' [ 810.133735][T24470] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 810.181120][T24469] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 810.215012][ T30] audit: type=1800 audit(2000000530.229:331): pid=24470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6677" name="file1" dev="loop2" ino=1049132 res=0 errno=0 [ 810.500654][T24480] loop5: detected capacity change from 0 to 2048 [ 810.549105][T24480] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 810.579920][T24480] NILFS (loop5): mounting unchecked fs [ 810.690911][T24480] NILFS (loop5): recovery complete [ 810.706333][T24488] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 810.886773][T24489] loop6: detected capacity change from 0 to 4096 [ 811.054238][T24489] ntfs3(loop6): failed to convert "0080" to koi8-ru [ 811.078520][T24489] ntfs3(loop6): failed to convert name for inode 1e. [ 811.097557][T24489] ntfs3(loop6): ino=1f, mi_enum_attr [ 811.112622][T24489] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 811.118939][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6690'. [ 811.152642][T24489] ntfs3(loop6): ino=1f, mi_enum_attr [ 811.414879][T24508] loop6: detected capacity change from 0 to 2048 [ 811.459854][T24508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.502539][T24508] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.643848][T24508] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.6695: corrupted xattr block 128: bad e_name length [ 811.830211][T20255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.216154][T24517] loop5: detected capacity change from 0 to 8192 [ 812.369128][T24504] loop4: detected capacity change from 0 to 40427 [ 812.402558][T24504] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 812.410307][T24504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 812.464645][T24504] F2FS-fs (loop4): invalid crc value [ 812.718932][T24504] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 812.752376][T24504] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 813.032942][T23811] syz-executor: attempt to access beyond end of device [ 813.032942][T23811] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 813.071375][T23811] CPU: 1 UID: 0 PID: 23811 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 813.071409][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.071426][T23811] Call Trace: [ 813.071436][T23811] [ 813.071448][T23811] dump_stack_lvl+0x189/0x250 [ 813.071494][T23811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.071522][T23811] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 813.071551][T23811] ? __pfx_queue_work_on+0x10/0x10 [ 813.071584][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.071614][T23811] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 813.071640][T23811] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 813.071668][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.071697][T23811] ? f2fs_hw_is_readonly+0x39b/0x470 [ 813.071733][T23811] f2fs_handle_critical_error+0x37c/0x540 [ 813.071772][T23811] f2fs_write_end_io+0x495/0x810 [ 813.071801][T23811] ? blkg_put+0x22/0x240 [ 813.071865][T23811] __submit_merged_bio+0x27a/0x6a0 [ 813.071890][T23811] ? up_write+0x1c4/0x420 [ 813.071933][T23811] __submit_merged_write_cond+0x44c/0x530 [ 813.071989][T23811] f2fs_sync_node_pages+0x1869/0x1a00 [ 813.072068][T23811] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 813.072161][T23811] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 813.072203][T23811] ? up_write+0x1c4/0x420 [ 813.072233][T23811] ? do_raw_spin_unlock+0x122/0x240 [ 813.072284][T23811] f2fs_write_checkpoint+0xe5f/0x1de0 [ 813.072355][T23811] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 813.072462][T23811] ? kill_f2fs_super+0x298/0x6c0 [ 813.072503][T23811] kill_f2fs_super+0x2c3/0x6c0 [ 813.072547][T23811] ? __pfx_kill_f2fs_super+0x10/0x10 [ 813.072576][T23811] ? radix_tree_delete_item+0x2b6/0x400 [ 813.072615][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.072644][T23811] ? shrinker_free+0x2ce/0x3e0 [ 813.072677][T23811] deactivate_locked_super+0xbc/0x130 [ 813.072713][T23811] cleanup_mnt+0x425/0x4c0 [ 813.072742][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.072771][T23811] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.072804][T23811] task_work_run+0x1d4/0x260 [ 813.072850][T23811] ? __pfx_task_work_run+0x10/0x10 [ 813.072887][T23811] ? __x64_sys_umount+0x122/0x160 [ 813.072931][T23811] ? exit_to_user_mode_loop+0x40/0x110 [ 813.072967][T23811] exit_to_user_mode_loop+0xec/0x110 [ 813.072995][T23811] do_syscall_64+0x2bd/0x3b0 [ 813.073024][T23811] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.073052][T23811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.073076][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.073105][T23811] ? exc_page_fault+0x9f/0xf0 [ 813.073146][T23811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.073170][T23811] RIP: 0033:0x7f6f3a78fcd7 [ 813.073193][T23811] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 813.073215][T23811] RSP: 002b:00007fff7be1cd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 813.073241][T23811] RAX: 0000000000000000 RBX: 00007f6f3a810b55 RCX: 00007f6f3a78fcd7 [ 813.073259][T23811] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7be1cde0 [ 813.073276][T23811] RBP: 00007fff7be1cde0 R08: 0000000000000000 R09: 0000000000000000 [ 813.073292][T23811] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7be1de70 [ 813.073310][T23811] R13: 00007f6f3a810b55 R14: 00000000000c6545 R15: 00007fff7be1deb0 [ 813.073356][T23811] [ 813.473853][T23811] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 813.739934][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6716'. [ 813.751987][T24555] netlink: 39 bytes leftover after parsing attributes in process `syz.5.6716'. [ 814.442381][T14258] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 814.612482][T14258] usb 10-1: Using ep0 maxpacket: 16 [ 814.652939][T14258] usb 10-1: config 8 has an invalid interface number: 39 but max is 0 [ 814.661165][T14258] usb 10-1: config 8 has no interface number 0 [ 814.692361][T14258] usb 10-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 814.717539][T24591] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 814.732587][T14258] usb 10-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 814.772385][T14258] usb 10-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 814.812382][T14258] usb 10-1: config 8 interface 39 has no altsetting 0 [ 814.871284][T14258] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 814.892226][T14258] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.900446][T14258] usb 10-1: Product: syz [ 814.930239][T14258] usb 10-1: Manufacturer: syz [ 814.942397][T14258] usb 10-1: SerialNumber: syz [ 815.378477][T24583] loop6: detected capacity change from 0 to 32768 [ 815.400675][T24583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6728 (24583) [ 815.408081][T24601] loop5: detected capacity change from 0 to 1024 [ 815.457755][T24583] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 815.463428][T24601] EXT4-fs: Ignoring removed nobh option [ 815.498759][T24583] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 815.532518][T24601] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 815.565276][T24583] BTRFS info (device loop6): using free-space-tree [ 815.586695][T14258] ipheth 10-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 815.609505][T24601] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.6736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 815.614136][T14258] ipheth 10-1:8.39: Apple iPhone USB Ethernet device attached [ 815.652767][T24601] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.6736: couldn't read orphan inode 11 (err -117) [ 815.687290][T24601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.798178][T24601] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6736: bg 0: block 10: padding at end of block bitmap is not set [ 815.834859][T14258] usb 10-1: USB disconnect, device number 20 [ 815.894726][T24622] Quota error (device loop5): write_blk: dquota write failed [ 815.906282][T14258] ipheth 10-1:8.39: Apple iPhone USB Ethernet now disconnected [ 815.914113][T24622] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 815.944883][T24622] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6736: Failed to acquire dquot type 0 [ 815.996914][T20255] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 816.145970][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.355441][T24628] loop4: detected capacity change from 0 to 64 [ 816.683328][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6739'. [ 816.794652][ T5844] Bluetooth: hci0: command tx timeout [ 816.862652][T24637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6745'. [ 816.999349][T24641] ALSA: mixer_oss: invalid OSS volume 'w' [ 817.198493][T24644] openvswitch: netlink: Multiple metadata blocks provided [ 817.698130][T24650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6752'. [ 817.917857][T24640] loop9: detected capacity change from 0 to 131072 [ 817.940081][T24640] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 817.948295][T24640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 817.987354][T24640] F2FS-fs (loop9): invalid crc value [ 818.099177][T24640] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 818.106620][T24640] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 818.260320][T24638] loop5: detected capacity change from 0 to 32768 [ 818.290902][T24658] loop4: detected capacity change from 0 to 4096 [ 818.324900][T24658] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 818.344657][T24658] ntfs3(loop4): It is recommened to use chkdsk. [ 818.351600][ T30] audit: type=1800 audit(2000000538.369:332): pid=24638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6746" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 818.389813][T24638] ERROR: (device loop5): dbAllocBits: leaf page corrupt [ 818.389813][T24638] [ 818.416429][T24638] ERROR: (device loop5): remounting filesystem as read-only [ 818.424479][T24638] syz.5.6746: attempt to access beyond end of device [ 818.424479][T24638] loop5: rw=34817, sector=4680192, nr_sectors = 512 limit=32768 [ 818.525179][ T111] blkno = 8ed40, nblocks = 40 [ 818.529939][ T111] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 818.529939][ T111] [ 818.550666][T24658] ntfs3(loop4): failed to convert "076c" to koi8-r [ 818.571172][T24658] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 818.576860][ T111] blkno = 8ed40, nblocks = 40 [ 818.601512][ T111] ERROR: (device loop5): dbFree: block to be freed is outside the map [ 818.601512][ T111] [ 818.872002][T24659] loop6: detected capacity change from 0 to 32768 [ 818.967509][T24659] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 819.038711][T24670] loop4: detected capacity change from 0 to 1024 [ 819.095279][T24659] XFS (loop6): Ending clean mount [ 819.117387][T24659] XFS (loop6): Quotacheck needed: Please wait. [ 819.231455][T24659] XFS (loop6): Quotacheck: Done. [ 819.363159][T24675] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 819.374605][T24675] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 819.434728][T20255] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 819.626439][T24587] syz.2.6731 (24587): drop_caches: 1 [ 819.627891][T24592] syz.2.6731 (24592): drop_caches: 1 [ 819.968557][T24690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6767'. [ 820.069359][T24690] bond0: entered promiscuous mode [ 820.097916][T24690] bond_slave_0: entered promiscuous mode [ 820.125446][T24690] bond_slave_1: entered promiscuous mode [ 820.161286][T24690] bond0: left promiscuous mode [ 820.167963][T24690] bond_slave_0: left promiscuous mode [ 820.186026][T24690] bond_slave_1: left promiscuous mode [ 820.428257][T24702] loop4: detected capacity change from 0 to 136 [ 820.502503][T24709] program syz.0.6773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.002471][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 821.119008][T24735] loop5: detected capacity change from 0 to 256 [ 821.131574][T24735] exfat: Deprecated parameter 'namecase' [ 821.138543][T24735] exfat: Deprecated parameter 'utf8' [ 821.172627][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 821.188532][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 821.198965][T24735] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 821.212561][ T5928] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 821.221627][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.277515][ T5928] usb 5-1: Product: syz [ 821.281752][ T5928] usb 5-1: Manufacturer: syz [ 821.301758][ T5928] usb 5-1: SerialNumber: syz [ 821.323801][ T5928] usb 5-1: config 0 descriptor?? [ 821.688397][T24744] loop9: detected capacity change from 0 to 128 [ 821.768430][T24744] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.819890][T24744] ext4 filesystem being mounted at /692/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 821.822573][ T5928] gs_usb 5-1:0.0: Configuring for 26 interfaces [ 821.915379][ T5928] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 821.980307][ T5928] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 822.051972][ T5928] usb 5-1: USB disconnect, device number 24 [ 822.082027][T13853] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 822.166626][T24755] loop5: detected capacity change from 0 to 1024 [ 822.246900][T24755] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 822.292492][T24755] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 822.317378][T24755] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6794: Failed to acquire dquot type 0 [ 822.390641][T24755] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 822.476770][T24755] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.6794: corrupted inode contents [ 822.540985][T24755] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #13: comm syz.5.6794: mark_inode_dirty error [ 822.606839][T24745] loop2: detected capacity change from 0 to 32768 [ 822.616660][T24750] loop6: detected capacity change from 0 to 32768 [ 822.628479][T24755] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.6794: corrupted inode contents [ 822.651883][T24745] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6789 (24745) [ 822.674070][T24755] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.6794: mark_inode_dirty error [ 822.693735][T24750] (syz.6.6791,24750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 822.709345][T24755] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.6794: corrupted inode contents [ 822.712028][T24770] erspan0: entered promiscuous mode [ 822.730267][T24745] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 822.741752][T24755] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 822.757021][T24745] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 822.768473][T24755] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.6794: corrupted inode contents [ 822.772345][T24750] (syz.6.6791,24750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 822.800564][T24745] BTRFS info (device loop2): using free-space-tree [ 822.808741][T24755] EXT4-fs error (device loop5): ext4_truncate:4597: inode #13: comm syz.5.6794: mark_inode_dirty error [ 822.848644][T24755] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 822.908657][T24755] EXT4-fs (loop5): 1 truncate cleaned up [ 822.917814][T24750] JBD2: Ignoring recovery information on journal [ 822.934591][T24755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.010513][T24755] EXT4-fs (loop5): shut down requested (2) [ 823.070278][T24750] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 823.106505][T24745] BTRFS info (device loop2): Snapshot src from another FS [ 823.249129][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.358664][T23817] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 823.437394][T24806] loop5: detected capacity change from 0 to 256 [ 823.470117][T24806] exfat: Deprecated parameter 'namecase' [ 823.477453][T24808] loop4: detected capacity change from 0 to 1024 [ 823.507086][T20255] ocfs2: Unmounting device (7,6) on (node local) [ 823.541326][T24806] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 824.085323][T24816] loop4: detected capacity change from 0 to 16 [ 824.215047][T24816] erofs (device loop4): mounted with root inode @ nid 36. [ 824.958678][T24825] loop6: detected capacity change from 0 to 4096 [ 825.018665][T24825] NILFS (loop6): invalid segment: Inconsistency found [ 825.062576][T24825] NILFS (loop6): trying rollback from an earlier position [ 825.120825][T24825] NILFS (loop6): recovery complete [ 825.148728][T24838] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 825.374754][T24842] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 825.402482][T24842] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.878349][T24854] loop9: detected capacity change from 0 to 2048 [ 825.964223][T24854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.067038][T24827] loop5: detected capacity change from 0 to 40427 [ 826.130553][T24827] F2FS-fs (loop5): heap/no_heap options were deprecated [ 826.182407][T24827] F2FS-fs (loop5): build fault injection rate: 19 [ 826.189052][T24827] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 826.267633][T24827] F2FS-fs (loop5): invalid crc value [ 826.315616][T24827] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 826.401466][T24879] loop9: detected capacity change from 0 to 2048 [ 826.434772][T24879] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 826.457354][T24879] NILFS (loop9): mounting unchecked fs [ 826.547805][T24879] NILFS (loop9): recovery complete [ 826.577552][T24886] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 826.619429][ T30] audit: type=1800 audit(2000000546.639:333): pid=24879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6838" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 826.631375][T24827] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 826.692165][T24883] loop4: detected capacity change from 0 to 4096 [ 826.721366][T24827] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 826.780708][T24827] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40 [ 826.862038][T24859] loop2: detected capacity change from 0 to 32768 [ 826.873587][T24883] ntfs3(loop4): ino=18, mi_enum_attr [ 826.880683][T24883] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 826.926844][T24859] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 827.070439][ C0] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of blk_update_request+0x5eb/0xe70 [ 827.081146][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 827.081182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.081197][ C0] Call Trace: [ 827.081208][ C0] [ 827.081219][ C0] dump_stack_lvl+0x189/0x250 [ 827.081260][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.081291][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 827.081321][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 827.081349][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 827.081394][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 827.081431][ C0] f2fs_write_end_io+0x495/0x810 [ 827.081461][ C0] ? blkg_put+0x22/0x240 [ 827.081517][ C0] blk_update_request+0x5eb/0xe70 [ 827.081562][ C0] blk_mq_end_request+0x3e/0x70 [ 827.081588][ C0] blk_done_softirq+0x10a/0x160 [ 827.081631][ C0] handle_softirqs+0x286/0x870 [ 827.081660][ C0] ? schedule+0x165/0x360 [ 827.081688][ C0] ? run_ksoftirqd+0x9b/0x100 [ 827.081729][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.081764][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.081792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.081827][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.081856][ C0] run_ksoftirqd+0x9b/0x100 [ 827.081889][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 827.081933][ C0] smpboot_thread_fn+0x542/0xa60 [ 827.081965][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.082005][ C0] kthread+0x711/0x8a0 [ 827.082046][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 827.082072][ C0] ? __pfx_kthread+0x10/0x10 [ 827.082102][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.082132][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.082154][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.082180][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.082203][ C0] ? __pfx_kthread+0x10/0x10 [ 827.082236][ C0] ret_from_fork+0x3fc/0x770 [ 827.082268][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.082303][ C0] ? __switch_to_asm+0x39/0x70 [ 827.082335][ C0] ? __switch_to_asm+0x33/0x70 [ 827.082364][ C0] ? __pfx_kthread+0x10/0x10 [ 827.082404][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.082452][ C0] [ 827.293280][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 827.300179][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 827.300212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.300230][ C0] Call Trace: [ 827.300240][ C0] [ 827.300251][ C0] dump_stack_lvl+0x189/0x250 [ 827.300291][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.300323][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 827.300354][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 827.300381][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 827.300429][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 827.300466][ C0] f2fs_write_end_io+0x495/0x810 [ 827.300496][ C0] ? blkg_put+0x22/0x240 [ 827.300552][ C0] blk_update_request+0x5eb/0xe70 [ 827.300597][ C0] blk_mq_end_request+0x3e/0x70 [ 827.300623][ C0] blk_done_softirq+0x10a/0x160 [ 827.300666][ C0] handle_softirqs+0x286/0x870 [ 827.300694][ C0] ? schedule+0x165/0x360 [ 827.300722][ C0] ? run_ksoftirqd+0x9b/0x100 [ 827.300763][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.300797][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.300824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.300858][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.300885][ C0] run_ksoftirqd+0x9b/0x100 [ 827.300918][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 827.300960][ C0] smpboot_thread_fn+0x542/0xa60 [ 827.300993][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.301033][ C0] kthread+0x711/0x8a0 [ 827.301074][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 827.301104][ C0] ? __pfx_kthread+0x10/0x10 [ 827.301137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.301171][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.301195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.301224][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.301249][ C0] ? __pfx_kthread+0x10/0x10 [ 827.301287][ C0] ret_from_fork+0x3fc/0x770 [ 827.301318][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.301352][ C0] ? __switch_to_asm+0x39/0x70 [ 827.301386][ C0] ? __switch_to_asm+0x33/0x70 [ 827.301425][ C0] ? __pfx_kthread+0x10/0x10 [ 827.301463][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.301517][ C0] [ 827.301527][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 827.519941][T24911] loop9: detected capacity change from 0 to 1024 [ 827.520346][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 827.520378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.520394][ C0] Call Trace: [ 827.520405][ C0] [ 827.520422][ C0] dump_stack_lvl+0x189/0x250 [ 827.520462][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.520492][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 827.520522][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 827.520549][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 827.520588][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 827.520623][ C0] f2fs_write_end_io+0x495/0x810 [ 827.520653][ C0] ? blkg_put+0x22/0x240 [ 827.520708][ C0] blk_update_request+0x5eb/0xe70 [ 827.520752][ C0] blk_mq_end_request+0x3e/0x70 [ 827.520777][ C0] blk_done_softirq+0x10a/0x160 [ 827.520819][ C0] handle_softirqs+0x286/0x870 [ 827.520847][ C0] ? schedule+0x165/0x360 [ 827.520875][ C0] ? run_ksoftirqd+0x9b/0x100 [ 827.520914][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.520948][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.520975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.521008][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.521036][ C0] run_ksoftirqd+0x9b/0x100 [ 827.521068][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 827.521110][ C0] smpboot_thread_fn+0x542/0xa60 [ 827.521140][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.521179][ C0] kthread+0x711/0x8a0 [ 827.521219][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 827.521248][ C0] ? __pfx_kthread+0x10/0x10 [ 827.521280][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.521314][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.521337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.521365][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.521391][ C0] ? __pfx_kthread+0x10/0x10 [ 827.521434][ C0] ret_from_fork+0x3fc/0x770 [ 827.521465][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.521500][ C0] ? __switch_to_asm+0x39/0x70 [ 827.521533][ C0] ? __switch_to_asm+0x33/0x70 [ 827.521564][ C0] ? __pfx_kthread+0x10/0x10 [ 827.521600][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.521653][ C0] [ 827.521664][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 827.745511][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 827.745547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.745563][ C0] Call Trace: [ 827.745574][ C0] [ 827.745585][ C0] dump_stack_lvl+0x189/0x250 [ 827.745628][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.745661][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 827.745692][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 827.745720][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 827.745760][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 827.745798][ C0] f2fs_write_end_io+0x495/0x810 [ 827.745829][ C0] ? blkg_put+0x22/0x240 [ 827.745886][ C0] blk_update_request+0x5eb/0xe70 [ 827.745931][ C0] blk_mq_end_request+0x3e/0x70 [ 827.745957][ C0] blk_done_softirq+0x10a/0x160 [ 827.745999][ C0] handle_softirqs+0x286/0x870 [ 827.746027][ C0] ? schedule+0x165/0x360 [ 827.746057][ C0] ? run_ksoftirqd+0x9b/0x100 [ 827.746097][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.746131][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.746159][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.746193][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.746221][ C0] run_ksoftirqd+0x9b/0x100 [ 827.746255][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 827.746298][ C0] smpboot_thread_fn+0x542/0xa60 [ 827.746331][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.746372][ C0] kthread+0x711/0x8a0 [ 827.746413][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 827.746449][ C0] ? __pfx_kthread+0x10/0x10 [ 827.746482][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.746517][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.746541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.746570][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.746596][ C0] ? __pfx_kthread+0x10/0x10 [ 827.746634][ C0] ret_from_fork+0x3fc/0x770 [ 827.746664][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.746698][ C0] ? __switch_to_asm+0x39/0x70 [ 827.746732][ C0] ? __switch_to_asm+0x33/0x70 [ 827.746764][ C0] ? __pfx_kthread+0x10/0x10 [ 827.746802][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.746855][ C0] [ 827.746866][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 827.846000][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 827.846033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.846049][ C0] Call Trace: [ 827.846060][ C0] [ 827.846070][ C0] dump_stack_lvl+0x189/0x250 [ 827.846110][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.846142][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 827.846171][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 827.846198][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 827.846237][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 827.846272][ C0] f2fs_write_end_io+0x495/0x810 [ 827.846301][ C0] ? blkg_put+0x22/0x240 [ 827.846357][ C0] blk_update_request+0x5eb/0xe70 [ 827.846401][ C0] blk_mq_end_request+0x3e/0x70 [ 827.846432][ C0] blk_done_softirq+0x10a/0x160 [ 827.846474][ C0] handle_softirqs+0x286/0x870 [ 827.846502][ C0] ? schedule+0x165/0x360 [ 827.846530][ C0] ? run_ksoftirqd+0x9b/0x100 [ 827.846569][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.846602][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.846630][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.846664][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.846691][ C0] run_ksoftirqd+0x9b/0x100 [ 827.846724][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 827.846766][ C0] smpboot_thread_fn+0x542/0xa60 [ 827.846797][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 827.846838][ C0] kthread+0x711/0x8a0 [ 827.846878][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 827.846907][ C0] ? __pfx_kthread+0x10/0x10 [ 827.846939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.847001][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.847025][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.847053][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.847078][ C0] ? __pfx_kthread+0x10/0x10 [ 827.847116][ C0] ret_from_fork+0x3fc/0x770 [ 827.847147][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.847182][ C0] ? __switch_to_asm+0x39/0x70 [ 827.847214][ C0] ? __switch_to_asm+0x33/0x70 [ 827.847245][ C0] ? __pfx_kthread+0x10/0x10 [ 827.847282][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.847335][ C0] [ 827.847345][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 828.154120][T24921] random: crng reseeded on system resumption [ 828.167378][T24145] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 828.201644][ T3528] hfsplus: b-tree write err: -5, ino 8 [ 828.395122][T24859] XFS (loop2): Ending clean mount [ 828.455671][T24859] XFS (loop2): Quotacheck needed: Please wait. [ 828.456410][T24923] loop6: detected capacity change from 0 to 4096 [ 828.553851][T24930] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 828.611622][T24859] XFS (loop2): Quotacheck: Done. [ 828.891825][T23817] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 829.207847][T24949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6867'. [ 829.395970][T24945] loop4: detected capacity change from 0 to 8192 [ 830.072632][ T43] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 830.230828][T24976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6879'. [ 830.263077][ T43] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 830.275257][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.305146][ T43] usb 10-1: config 0 descriptor?? [ 830.313362][ T43] cp210x 10-1:0.0: cp210x converter detected [ 830.550721][T24957] loop5: detected capacity change from 0 to 40427 [ 830.565336][T24981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6881'. [ 830.586693][T24957] F2FS-fs (loop5): invalid crc value [ 830.717767][ T43] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 830.746825][T24984] loop6: detected capacity change from 0 to 64 [ 830.758086][ T43] usb 10-1: cp210x converter now attached to ttyUSB0 [ 830.798027][T24957] F2FS-fs (loop5): Start checkpoint disabled! [ 830.822367][T24957] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 830.939981][ T12] kworker/u8:0: attempt to access beyond end of device [ 830.939981][ T12] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 830.956473][T24974] loop4: detected capacity change from 0 to 32768 [ 830.971039][T19951] usb 10-1: USB disconnect, device number 21 [ 830.990083][T24974] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 831.002103][T19951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 831.015476][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 831.015509][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.015527][ T12] Workqueue: writeback wb_workfn (flush-7:5) [ 831.015562][ T12] Call Trace: [ 831.015573][ T12] [ 831.015584][ T12] dump_stack_lvl+0x189/0x250 [ 831.015622][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.015650][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 831.015677][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 831.015710][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.015739][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 831.015765][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.015791][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.015819][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 831.015852][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 831.015886][ T12] f2fs_write_end_io+0x495/0x810 [ 831.015915][ T12] ? blkg_put+0x22/0x240 [ 831.015972][ T12] __submit_merged_bio+0x27a/0x6a0 [ 831.015996][ T12] ? up_write+0x1c4/0x420 [ 831.016036][ T12] __submit_merged_write_cond+0x44c/0x530 [ 831.016088][ T12] f2fs_sync_node_pages+0x1869/0x1a00 [ 831.016148][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016206][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 831.016247][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 831.016306][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016335][ T12] ? do_raw_spin_lock+0x121/0x290 [ 831.016374][ T12] ? rcu_is_watching+0x15/0xb0 [ 831.016412][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016440][ T12] ? blk_start_plug+0x52/0x1b0 [ 831.016476][ T12] f2fs_write_node_pages+0x303/0x6e0 [ 831.016524][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 831.016573][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016601][ T12] ? __lock_acquire+0xab9/0xd20 [ 831.016633][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 831.016674][ T12] do_writepages+0x32e/0x550 [ 831.016713][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016742][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 831.016772][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 831.016816][ T12] __writeback_single_inode+0x145/0xff0 [ 831.016851][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.016879][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 831.016922][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 831.016972][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017016][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 831.017100][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017129][ T12] ? rcu_is_watching+0x15/0xb0 [ 831.017157][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017197][ T12] wb_writeback+0x43b/0xaf0 [ 831.017240][ T12] ? queue_io+0x3b1/0x590 [ 831.017276][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 831.017321][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.017352][ T12] wb_workfn+0x409/0xef0 [ 831.017411][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 831.017444][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017472][ T12] ? __lock_acquire+0xab9/0xd20 [ 831.017513][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017545][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017579][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.017602][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 831.017630][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 831.017663][ T12] process_scheduled_works+0xae1/0x17b0 [ 831.017731][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 831.017770][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.017810][ T12] worker_thread+0x8a0/0xda0 [ 831.017874][ T12] kthread+0x711/0x8a0 [ 831.017914][ T12] ? __pfx_worker_thread+0x10/0x10 [ 831.017944][ T12] ? __pfx_kthread+0x10/0x10 [ 831.017977][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.018010][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.018035][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.018063][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.018089][ T12] ? __pfx_kthread+0x10/0x10 [ 831.018129][ T12] ret_from_fork+0x3fc/0x770 [ 831.018161][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 831.018197][ T12] ? __switch_to_asm+0x39/0x70 [ 831.018230][ T12] ? __switch_to_asm+0x33/0x70 [ 831.018263][ T12] ? __pfx_kthread+0x10/0x10 [ 831.018297][ T12] ret_from_fork_asm+0x1a/0x30 [ 831.018346][ T12] [ 831.020041][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 831.068089][T24997] can: request_module (can-proto-0) failed. [ 831.074045][T19951] cp210x 10-1:0.0: device disconnected [ 831.080704][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 831.080745][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.080763][ T12] Workqueue: writeback wb_workfn (flush-7:5) [ 831.080799][ T12] Call Trace: [ 831.080810][ T12] [ 831.080821][ T12] dump_stack_lvl+0x189/0x250 [ 831.080861][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.080889][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 831.080917][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 831.080949][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.080978][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 831.081005][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.081032][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081061][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 831.081096][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 831.081133][ T12] f2fs_write_end_io+0x495/0x810 [ 831.081198][ T12] __submit_merged_bio+0x27a/0x6a0 [ 831.081225][ T12] ? up_write+0x1c4/0x420 [ 831.081268][ T12] __submit_merged_write_cond+0x44c/0x530 [ 831.081322][ T12] f2fs_sync_node_pages+0x1869/0x1a00 [ 831.081361][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081426][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 831.081466][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 831.081536][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081564][ T12] ? do_raw_spin_lock+0x121/0x290 [ 831.081609][ T12] ? rcu_is_watching+0x15/0xb0 [ 831.081638][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081665][ T12] ? blk_start_plug+0x52/0x1b0 [ 831.081706][ T12] f2fs_write_node_pages+0x303/0x6e0 [ 831.081757][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 831.081808][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081836][ T12] ? __lock_acquire+0xab9/0xd20 [ 831.081870][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 831.081912][ T12] do_writepages+0x32e/0x550 [ 831.081954][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.081982][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 831.082012][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 831.082060][ T12] __writeback_single_inode+0x145/0xff0 [ 831.082096][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082125][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 831.082175][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 831.082229][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082281][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 831.082380][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082408][ T12] ? rcu_is_watching+0x15/0xb0 [ 831.082438][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082485][ T12] wb_writeback+0x43b/0xaf0 [ 831.082536][ T12] ? queue_io+0x3b1/0x590 [ 831.082574][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 831.082622][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.082658][ T12] wb_workfn+0x409/0xef0 [ 831.082714][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 831.082750][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082777][ T12] ? __lock_acquire+0xab9/0xd20 [ 831.082822][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082855][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.082893][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.082916][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 831.082946][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 831.082978][ T12] process_scheduled_works+0xae1/0x17b0 [ 831.083056][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 831.083099][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.083161][ T12] worker_thread+0x8a0/0xda0 [ 831.083239][ T12] kthread+0x711/0x8a0 [ 831.083284][ T12] ? __pfx_worker_thread+0x10/0x10 [ 831.083314][ T12] ? __pfx_kthread+0x10/0x10 [ 831.083346][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.083381][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.083404][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.083433][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.083458][ T12] ? __pfx_kthread+0x10/0x10 [ 831.083496][ T12] ret_from_fork+0x3fc/0x770 [ 831.083530][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 831.083568][ T12] ? __switch_to_asm+0x39/0x70 [ 831.083601][ T12] ? __switch_to_asm+0x33/0x70 [ 831.083635][ T12] ? __pfx_kthread+0x10/0x10 [ 831.083674][ T12] ret_from_fork_asm+0x1a/0x30 [ 831.083734][ T12] [ 831.086765][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 831.199678][T24974] XFS (loop4): Ending clean mount [ 832.026377][T23811] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 832.499603][T25017] loop9: detected capacity change from 0 to 2048 [ 832.549215][T25017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.036268][T19951] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 833.154443][T25020] loop6: detected capacity change from 0 to 32768 [ 833.194177][T19951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.205666][T19951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.226792][T19951] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 833.229414][T25020] overlayfs: upper fs needs to support d_type. [ 833.237938][T25022] loop5: detected capacity change from 0 to 40427 [ 833.250117][T19951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.263691][T19951] usb 5-1: config 0 descriptor?? [ 833.272834][T25020] overlayfs: upper fs does not support tmpfile. [ 833.295943][T25022] F2FS-fs (loop5): invalid crc value [ 833.320858][T25020] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 833.388575][T25020] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 833.388575][T25020] [ 833.412379][ T5996] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 833.454070][T25020] ERROR: (device loop6): remounting filesystem as read-only [ 833.475046][T25022] F2FS-fs (loop5): Start checkpoint disabled! [ 833.477355][T25020] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 833.505767][T25022] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 833.572428][ T5996] usb 10-1: Using ep0 maxpacket: 8 [ 833.590471][ T5996] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 833.612644][ T5996] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.633914][ T5996] usb 10-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 833.652420][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.652649][ T13] kworker/u8:1: attempt to access beyond end of device [ 833.652649][ T13] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 833.671003][ T5996] usb 10-1: Product: syz [ 833.680918][ T5996] usb 10-1: Manufacturer: syz [ 833.696549][ T5996] usb 10-1: SerialNumber: syz [ 833.703996][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 833.704031][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.704047][ T13] Workqueue: writeback wb_workfn (flush-7:5) [ 833.704083][ T13] Call Trace: [ 833.704093][ T13] [ 833.704104][ T13] dump_stack_lvl+0x189/0x250 [ 833.704144][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.704172][ T13] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 833.704200][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 833.704235][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.704264][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 833.704290][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 833.704317][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.704346][ T13] ? f2fs_hw_is_readonly+0x39b/0x470 [ 833.704381][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 833.704437][ T13] f2fs_write_end_io+0x495/0x810 [ 833.704466][ T13] ? blkg_put+0x22/0x240 [ 833.704529][ T13] __submit_merged_bio+0x27a/0x6a0 [ 833.704567][ T13] __submit_merged_write_cond+0x255/0x530 [ 833.704622][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 833.704707][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 833.704734][ T13] ? __local_bh_enable_ip+0x12d/0x1c0 [ 833.704784][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.704813][ T13] ? rcu_is_watching+0x15/0xb0 [ 833.704892][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.704952][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705000][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705058][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 833.705090][ T13] do_writepages+0x32e/0x550 [ 833.705133][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705161][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 833.705194][ T13] ? writeback_sb_inodes+0x372/0x1000 [ 833.705243][ T13] __writeback_single_inode+0x145/0xff0 [ 833.705277][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705306][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 833.705351][ T13] writeback_sb_inodes+0x6b5/0x1000 [ 833.705407][ T13] ? switch_ldt+0x10a/0x250 [ 833.705426][T19951] sony 0003:054C:024B.0048: unexpected long global item [ 833.705445][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705493][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 833.705591][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705619][ T13] ? rcu_is_watching+0x15/0xb0 [ 833.705649][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705692][ T13] wb_writeback+0x43b/0xaf0 [ 833.705738][ T13] ? queue_io+0x3b1/0x590 [ 833.705777][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 833.705824][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.705858][ T13] wb_workfn+0x409/0xef0 [ 833.705912][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 833.705947][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.705974][ T13] ? __lock_acquire+0xab9/0xd20 [ 833.706019][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.706052][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.706087][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.706111][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 833.706140][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 833.706174][ T13] process_scheduled_works+0xae1/0x17b0 [ 833.706252][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 833.706294][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.706337][ T13] worker_thread+0x8a0/0xda0 [ 833.706416][ T13] kthread+0x711/0x8a0 [ 833.706459][ T13] ? __pfx_worker_thread+0x10/0x10 [ 833.706489][ T13] ? __pfx_kthread+0x10/0x10 [ 833.706521][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.706556][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.706580][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.706608][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.706633][ T13] ? __pfx_kthread+0x10/0x10 [ 833.706672][ T13] ret_from_fork+0x3fc/0x770 [ 833.706705][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 833.706743][ T13] ? __switch_to_asm+0x39/0x70 [ 833.706776][ T13] ? __switch_to_asm+0x33/0x70 [ 833.706807][ T13] ? __pfx_kthread+0x10/0x10 [ 833.706845][ T13] ret_from_fork_asm+0x1a/0x30 [ 833.706906][ T13] [ 833.706916][ T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 833.739716][T19951] sony 0003:054C:024B.0048: parse failed [ 833.871059][T25032] loop2: detected capacity change from 0 to 32768 [ 833.988965][T19951] sony 0003:054C:024B.0048: probe with driver sony failed with error -22 [ 833.989170][ T5996] usbhid 10-1:1.0: can't add hid device: -71 [ 833.993699][T25032] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6899 (25032) [ 834.018891][ T5996] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 834.031070][T25032] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 834.045302][T25032] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 834.053068][ T5996] usb 10-1: USB disconnect, device number 22 [ 834.063273][T25032] BTRFS info (device loop2): using free-space-tree [ 834.122764][T19951] usb 5-1: USB disconnect, device number 25 [ 834.440492][ T30] audit: type=1800 audit(2000000554.459:334): pid=25032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6899" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 834.442769][T25057] 9pnet_fd: Insufficient options for proto=fd [ 834.696292][T23817] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 834.835250][T25063] block nbd1: server does not support multiple connections per device. [ 834.857947][T25063] block nbd1: shutting down sockets [ 835.460183][T25084] loop2: detected capacity change from 0 to 1024 [ 835.484036][T25084] EXT4-fs: Ignoring removed nobh option [ 835.532470][T25084] EXT4-fs: Ignoring removed bh option [ 835.558110][T25084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.665031][T25084] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.6906: inode #327696: comm syz.2.6906: iget: illegal inode # [ 835.686758][T25084] EXT4-fs (loop2): Remounting filesystem read-only [ 835.748281][T25084] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.2.6906: cleanup dec ref error -30 [ 835.794347][T25084] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #18: comm syz.2.6906: dec ref error=-30 [ 835.860933][T25068] loop6: detected capacity change from 0 to 40427 [ 835.903474][T25068] F2FS-fs (loop6): invalid crc value [ 835.926938][T23817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.162121][T25066] loop9: detected capacity change from 0 to 40427 [ 836.209423][T25066] F2FS-fs (loop9): build fault injection rate: 690 [ 836.236210][T25109] netlink: 'syz.0.6923': attribute type 83 has an invalid length. [ 836.245828][T25068] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 836.250291][T25066] F2FS-fs (loop9): invalid crc value [ 836.469401][T20255] syz-executor: attempt to access beyond end of device [ 836.469401][T20255] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 836.502415][T20255] CPU: 1 UID: 0 PID: 20255 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 836.502451][T20255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.502467][T20255] Call Trace: [ 836.502477][T20255] [ 836.502487][T20255] dump_stack_lvl+0x189/0x250 [ 836.502528][T20255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.502557][T20255] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 836.502585][T20255] ? __pfx_queue_work_on+0x10/0x10 [ 836.502618][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.502646][T20255] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 836.502671][T20255] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 836.502698][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.502727][T20255] ? f2fs_hw_is_readonly+0x39b/0x470 [ 836.502759][T20255] f2fs_handle_critical_error+0x37c/0x540 [ 836.502793][T20255] f2fs_write_end_io+0x495/0x810 [ 836.502823][T20255] ? blkg_put+0x22/0x240 [ 836.502880][T20255] __submit_merged_bio+0x27a/0x6a0 [ 836.502914][T20255] __submit_merged_write_cond+0x255/0x530 [ 836.502965][T20255] f2fs_write_data_pages+0x261d/0x3000 [ 836.502993][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.503060][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.503143][T20255] ? __mod_zone_page_state+0xd7/0x140 [ 836.503200][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503228][T20255] ? folios_put_refs+0x560/0x640 [ 836.503272][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503301][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.503336][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503364][T20255] ? do_raw_spin_lock+0x121/0x290 [ 836.503406][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503440][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503468][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.503505][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.503536][T20255] do_writepages+0x32e/0x550 [ 836.503577][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503611][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503639][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.503682][T20255] filemap_fdatawrite+0x191/0x230 [ 836.503719][T20255] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 836.503806][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.503841][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.503884][T20255] f2fs_sync_dirty_inodes+0x31f/0x830 [ 836.503936][T20255] f2fs_write_checkpoint+0x94a/0x1de0 [ 836.503998][T20255] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 836.504090][T20255] ? kill_f2fs_super+0x298/0x6c0 [ 836.504130][T20255] kill_f2fs_super+0x2c3/0x6c0 [ 836.504177][T20255] ? __pfx_kill_f2fs_super+0x10/0x10 [ 836.504206][T20255] ? radix_tree_delete_item+0x2b6/0x400 [ 836.504242][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.504271][T20255] ? shrinker_free+0x2ce/0x3e0 [ 836.504301][T20255] deactivate_locked_super+0xbc/0x130 [ 836.504335][T20255] cleanup_mnt+0x425/0x4c0 [ 836.504364][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.504393][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.504425][T20255] task_work_run+0x1d4/0x260 [ 836.504468][T20255] ? __pfx_task_work_run+0x10/0x10 [ 836.504504][T20255] ? __x64_sys_umount+0x122/0x160 [ 836.504546][T20255] ? exit_to_user_mode_loop+0x40/0x110 [ 836.504579][T20255] exit_to_user_mode_loop+0xec/0x110 [ 836.504606][T20255] do_syscall_64+0x2bd/0x3b0 [ 836.504635][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.504662][T20255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.504686][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.504714][T20255] ? exc_page_fault+0x9f/0xf0 [ 836.504744][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.504769][T20255] RIP: 0033:0x7f73b4d8fcd7 [ 836.504791][T20255] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 836.504813][T20255] RSP: 002b:00007ffc4aebc308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 836.504839][T20255] RAX: 0000000000000000 RBX: 00007f73b4e10b55 RCX: 00007f73b4d8fcd7 [ 836.504857][T20255] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4aebc3c0 [ 836.504874][T20255] RBP: 00007ffc4aebc3c0 R08: 0000000000000000 R09: 0000000000000000 [ 836.504890][T20255] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4aebd450 [ 836.504907][T20255] R13: 00007f73b4e10b55 R14: 00000000000cc106 R15: 00007ffc4aebd490 [ 836.504948][T20255] [ 836.504958][T20255] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 836.546635][T25118] loop4: detected capacity change from 0 to 4096 [ 836.722476][T20255] CPU: 1 UID: 0 PID: 20255 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 836.722511][T20255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.722527][T20255] Call Trace: [ 836.722537][T20255] [ 836.722547][T20255] dump_stack_lvl+0x189/0x250 [ 836.722588][T20255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.722616][T20255] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 836.722642][T20255] ? __pfx_queue_work_on+0x10/0x10 [ 836.722674][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.722703][T20255] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 836.722728][T20255] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 836.722754][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.722782][T20255] ? f2fs_hw_is_readonly+0x39b/0x470 [ 836.722818][T20255] f2fs_handle_critical_error+0x37c/0x540 [ 836.722853][T20255] f2fs_write_end_io+0x495/0x810 [ 836.722882][T20255] ? blkg_put+0x22/0x240 [ 836.722938][T20255] __submit_merged_bio+0x27a/0x6a0 [ 836.722972][T20255] __submit_merged_write_cond+0x255/0x530 [ 836.723022][T20255] f2fs_write_data_pages+0x261d/0x3000 [ 836.723050][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.723116][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.723206][T20255] ? __mod_zone_page_state+0xd7/0x140 [ 836.723251][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723279][T20255] ? folios_put_refs+0x560/0x640 [ 836.723321][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723349][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.723384][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723411][T20255] ? do_raw_spin_lock+0x121/0x290 [ 836.723454][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723487][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723515][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.723551][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.723583][T20255] do_writepages+0x32e/0x550 [ 836.723622][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723656][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723683][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.723725][T20255] filemap_fdatawrite+0x191/0x230 [ 836.723761][T20255] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 836.723846][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.723881][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.723922][T20255] f2fs_sync_dirty_inodes+0x31f/0x830 [ 836.723972][T20255] f2fs_write_checkpoint+0x94a/0x1de0 [ 836.724033][T20255] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 836.724124][T20255] ? kill_f2fs_super+0x298/0x6c0 [ 836.724170][T20255] kill_f2fs_super+0x2c3/0x6c0 [ 836.724211][T20255] ? __pfx_kill_f2fs_super+0x10/0x10 [ 836.724240][T20255] ? radix_tree_delete_item+0x2b6/0x400 [ 836.724277][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.724305][T20255] ? shrinker_free+0x2ce/0x3e0 [ 836.724336][T20255] deactivate_locked_super+0xbc/0x130 [ 836.724371][T20255] cleanup_mnt+0x425/0x4c0 [ 836.724399][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.724428][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.724460][T20255] task_work_run+0x1d4/0x260 [ 836.724503][T20255] ? __pfx_task_work_run+0x10/0x10 [ 836.724540][T20255] ? __x64_sys_umount+0x122/0x160 [ 836.724582][T20255] ? exit_to_user_mode_loop+0x40/0x110 [ 836.724614][T20255] exit_to_user_mode_loop+0xec/0x110 [ 836.724642][T20255] do_syscall_64+0x2bd/0x3b0 [ 836.724670][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.724697][T20255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.724721][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.724750][T20255] ? exc_page_fault+0x9f/0xf0 [ 836.724780][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.724804][T20255] RIP: 0033:0x7f73b4d8fcd7 [ 836.724826][T20255] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 836.724847][T20255] RSP: 002b:00007ffc4aebc308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 836.724873][T20255] RAX: 0000000000000000 RBX: 00007f73b4e10b55 RCX: 00007f73b4d8fcd7 [ 836.724890][T20255] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4aebc3c0 [ 836.724906][T20255] RBP: 00007ffc4aebc3c0 R08: 0000000000000000 R09: 0000000000000000 [ 836.724922][T20255] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4aebd450 [ 836.724938][T20255] R13: 00007f73b4e10b55 R14: 00000000000cc106 R15: 00007ffc4aebd490 [ 836.724978][T20255] [ 836.725705][T20255] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 836.775332][T25066] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 836.790207][T25118] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 836.811801][T20255] CPU: 0 UID: 0 PID: 20255 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 836.811835][T20255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.811851][T20255] Call Trace: [ 836.811861][T20255] [ 836.811872][T20255] dump_stack_lvl+0x189/0x250 [ 836.811912][T20255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.811940][T20255] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 836.811967][T20255] ? __pfx_queue_work_on+0x10/0x10 [ 836.811999][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812027][T20255] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 836.812053][T20255] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 836.812080][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812108][T20255] ? f2fs_hw_is_readonly+0x39b/0x470 [ 836.812140][T20255] f2fs_handle_critical_error+0x37c/0x540 [ 836.812175][T20255] f2fs_write_end_io+0x495/0x810 [ 836.812204][T20255] ? blkg_put+0x22/0x240 [ 836.812264][T20255] __submit_merged_bio+0x27a/0x6a0 [ 836.812298][T20255] __submit_merged_write_cond+0x255/0x530 [ 836.812348][T20255] f2fs_write_data_pages+0x261d/0x3000 [ 836.812376][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.812447][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.812530][T20255] ? __mod_zone_page_state+0xd7/0x140 [ 836.812575][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812603][T20255] ? folios_put_refs+0x560/0x640 [ 836.812645][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812673][T20255] ? __lock_acquire+0xab9/0xd20 [ 836.812709][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812736][T20255] ? do_raw_spin_lock+0x121/0x290 [ 836.812779][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812812][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812840][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.812877][T20255] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 836.812908][T20255] do_writepages+0x32e/0x550 [ 836.812947][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.812980][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.813007][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.813049][T20255] filemap_fdatawrite+0x191/0x230 [ 836.813085][T20255] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 836.813170][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.813205][T20255] ? do_raw_spin_unlock+0x122/0x240 [ 836.813247][T20255] f2fs_sync_dirty_inodes+0x31f/0x830 [ 836.813297][T20255] f2fs_write_checkpoint+0x94a/0x1de0 [ 836.813359][T20255] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 836.813454][T20255] ? kill_f2fs_super+0x298/0x6c0 [ 836.813492][T20255] kill_f2fs_super+0x2c3/0x6c0 [ 836.813532][T20255] ? __pfx_kill_f2fs_super+0x10/0x10 [ 836.813561][T20255] ? radix_tree_delete_item+0x2b6/0x400 [ 836.813597][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.813625][T20255] ? shrinker_free+0x2ce/0x3e0 [ 836.813655][T20255] deactivate_locked_super+0xbc/0x130 [ 836.813689][T20255] cleanup_mnt+0x425/0x4c0 [ 836.813718][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.813745][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.813777][T20255] task_work_run+0x1d4/0x260 [ 836.813820][T20255] ? __pfx_task_work_run+0x10/0x10 [ 836.813856][T20255] ? __x64_sys_umount+0x122/0x160 [ 836.813897][T20255] ? exit_to_user_mode_loop+0x40/0x110 [ 836.813929][T20255] exit_to_user_mode_loop+0xec/0x110 [ 836.813957][T20255] do_syscall_64+0x2bd/0x3b0 [ 836.813985][T20255] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.814012][T20255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.814036][T20255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 836.814064][T20255] ? exc_page_fault+0x9f/0xf0 [ 836.814093][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.814118][T20255] RIP: 0033:0x7f73b4d8fcd7 [ 836.814139][T20255] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 836.814160][T20255] RSP: 002b:00007ffc4aebc308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 836.814187][T20255] RAX: 0000000000000000 RBX: 00007f73b4e10b55 RCX: 00007f73b4d8fcd7 [ 836.814204][T20255] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4aebc3c0 [ 836.814220][T20255] RBP: 00007ffc4aebc3c0 R08: 0000000000000000 R09: 0000000000000000 [ 836.814236][T20255] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4aebd450 [ 836.814253][T20255] R13: 00007f73b4e10b55 R14: 00000000000cc106 R15: 00007ffc4aebd490 [ 836.814293][T20255] [ 836.817130][T20255] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 837.990076][T25134] loop2: detected capacity change from 0 to 512 [ 838.025021][T25134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 838.096557][T25134] EXT4-fs (loop2): 1 truncate cleaned up [ 838.159481][T25134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.343514][T25134] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 838.474626][T23817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.965883][T25148] loop5: detected capacity change from 0 to 4096 [ 838.985649][T25150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6941'. [ 838.998757][T25148] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 839.055686][T25150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6941'. [ 839.104275][T25154] loop9: detected capacity change from 0 to 1024 [ 839.124100][T25148] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 839.153426][T25148] ntfs3(loop5): ino=19, mi_enum_attr [ 839.181862][T25148] ntfs3(loop5): failed to convert "c46c" to euc-jp [ 839.198640][ T30] audit: type=1800 audit(2000000559.219:335): pid=25154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6932" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 839.220899][T25148] ntfs3(loop5): ino=20, mi_enum_attr [ 839.488416][T25162] support for the xor transformation has been removed. [ 839.839360][T25175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.869837][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6952'. [ 839.922638][T25174] loop2: detected capacity change from 0 to 2048 [ 839.971162][T25177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.003811][T20284] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 840.090412][T25177] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 840.122330][T25177] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 840.145373][T25183] loop6: detected capacity change from 0 to 128 [ 840.152655][T25177] Remounting filesystem read-only [ 840.162336][T23817] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 840.178715][T25183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 840.199982][T20284] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 840.213998][T20284] usb 10-1: config 0 has no interface number 0 [ 840.231877][T25183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 840.244670][T25152] loop4: detected capacity change from 0 to 40427 [ 840.245533][T20284] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 840.273044][T25152] F2FS-fs (loop4): heap/no_heap options were deprecated [ 840.278624][T25183] EXT4-fs (loop6): Test dummy encryption mode enabled [ 840.280082][T25152] F2FS-fs (loop4): build fault injection rate: 19 [ 840.290177][T20284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.324264][T20284] usb 10-1: Product: syz [ 840.328534][T20284] usb 10-1: Manufacturer: syz [ 840.332646][T25152] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 840.355652][T25183] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 840.373697][T25152] F2FS-fs (loop4): invalid crc value [ 840.382443][T20284] usb 10-1: SerialNumber: syz [ 840.419198][T20284] usb 10-1: config 0 descriptor?? [ 840.431372][T25183] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 840.456734][T25152] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 840.480968][T25183] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 840.600278][T20255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 840.685212][T25152] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 840.762485][T25152] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 840.873341][T25152] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 840.971205][ T30] audit: type=1800 audit(2000000560.979:336): pid=25152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6942" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 840.981424][T25152] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0 [ 841.109968][T25198] loop5: detected capacity change from 0 to 32768 [ 841.113314][T25213] netlink: 136 bytes leftover after parsing attributes in process `syz.6.6966'. [ 841.146933][T25198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6959 (25198) [ 841.212841][T25198] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 841.226319][T23811] syz-executor: attempt to access beyond end of device [ 841.226319][T23811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 841.252583][T25198] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 841.271678][T23811] CPU: 0 UID: 0 PID: 23811 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 841.271712][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.271729][T23811] Call Trace: [ 841.271739][T23811] [ 841.271749][T23811] dump_stack_lvl+0x189/0x250 [ 841.271790][T23811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.271818][T23811] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 841.271846][T23811] ? __pfx_queue_work_on+0x10/0x10 [ 841.271878][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.271907][T23811] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 841.271933][T23811] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 841.271960][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.271989][T23811] ? f2fs_hw_is_readonly+0x39b/0x470 [ 841.272022][T23811] f2fs_handle_critical_error+0x37c/0x540 [ 841.272057][T23811] f2fs_write_end_io+0x495/0x810 [ 841.272086][T23811] ? blkg_put+0x22/0x240 [ 841.272144][T23811] __submit_merged_bio+0x27a/0x6a0 [ 841.272178][T23811] __submit_merged_write_cond+0x255/0x530 [ 841.272229][T23811] f2fs_write_data_pages+0x261d/0x3000 [ 841.272304][T23811] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 841.272387][T23811] ? __mod_zone_page_state+0xd7/0x140 [ 841.272441][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272470][T23811] ? folios_put_refs+0x560/0x640 [ 841.272513][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272541][T23811] ? __lock_acquire+0xab9/0xd20 [ 841.272577][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272606][T23811] ? do_raw_spin_lock+0x121/0x290 [ 841.272649][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272683][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272711][T23811] ? do_raw_spin_unlock+0x122/0x240 [ 841.272748][T23811] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 841.272780][T23811] do_writepages+0x32e/0x550 [ 841.272821][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272856][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272885][T23811] ? do_raw_spin_unlock+0x122/0x240 [ 841.272927][T23811] filemap_fdatawrite+0x191/0x230 [ 841.272963][T23811] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 841.273048][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.273083][T23811] ? do_raw_spin_unlock+0x122/0x240 [ 841.273126][T23811] f2fs_sync_dirty_inodes+0x31f/0x830 [ 841.273177][T23811] f2fs_write_checkpoint+0x94a/0x1de0 [ 841.273238][T23811] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 841.273330][T23811] ? kill_f2fs_super+0x298/0x6c0 [ 841.273369][T23811] kill_f2fs_super+0x2c3/0x6c0 [ 841.273409][T23811] ? __pfx_kill_f2fs_super+0x10/0x10 [ 841.273444][T23811] ? radix_tree_delete_item+0x2b6/0x400 [ 841.273481][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.273511][T23811] ? shrinker_free+0x2ce/0x3e0 [ 841.273542][T23811] deactivate_locked_super+0xbc/0x130 [ 841.273577][T23811] cleanup_mnt+0x425/0x4c0 [ 841.273606][T23811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.273640][T23811] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.273672][T23811] task_work_run+0x1d4/0x260 [ 841.273717][T23811] ? __pfx_task_work_run+0x10/0x10 [ 841.273753][T23811] ? __x64_sys_umount+0x122/0x160 [ 841.273796][T23811] ? exit_to_user_mode_loop+0x40/0x110 [ 841.273830][T23811] exit_to_user_mode_loop+0xec/0x110 [ 841.273858][T23811] do_syscall_64+0x2bd/0x3b0 [ 841.273891][T23811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.273915][T23811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 841.273949][T23811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.273974][T23811] RIP: 0033:0x7f6f3a78fcd7 [ 841.274022][T23811] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 841.274044][T23811] RSP: 002b:00007fff7be1cd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 841.274070][T23811] RAX: 0000000000000000 RBX: 00007f6f3a810b55 RCX: 00007f6f3a78fcd7 [ 841.274089][T23811] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7be1cde0 [ 841.274105][T23811] RBP: 00007fff7be1cde0 R08: 0000000000000000 R09: 0000000000000000 [ 841.274123][T23811] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7be1de70 [ 841.274141][T23811] R13: 00007f6f3a810b55 R14: 00000000000cd370 R15: 00007fff7be1deb0 [ 841.274181][T23811] [ 841.681455][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.699449][T25198] BTRFS info (device loop5): using free-space-tree [ 841.719245][T20284] usb 10-1: Firmware version (0.0) predates our first public release. [ 841.748685][T20284] usb 10-1: Please update to version 0.2 or newer [ 841.755796][T23811] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 841.891049][T25227] sctp: [Deprecated]: syz.6.6969 (pid 25227) Use of int in maxseg socket option. [ 841.891049][T25227] Use struct sctp_assoc_value instead [ 841.933495][T20284] usb 10-1: USB disconnect, device number 23 [ 842.005223][T24145] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.006289][T25208] loop2: detected capacity change from 0 to 40427 [ 842.085377][T25208] F2FS-fs (loop2): invalid crc value [ 842.423415][T25208] F2FS-fs (loop2): Start checkpoint disabled! [ 842.451979][T25208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 842.633056][ T12] kworker/u8:0: attempt to access beyond end of device [ 842.633056][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 842.674031][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 842.674065][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 842.674082][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 842.674119][ T12] Call Trace: [ 842.674129][ T12] [ 842.674140][ T12] dump_stack_lvl+0x189/0x250 [ 842.674182][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.674210][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 842.674238][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 842.674273][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.674302][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 842.674329][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 842.674357][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.674386][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 842.674428][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 842.674466][ T12] f2fs_write_end_io+0x495/0x810 [ 842.674496][ T12] ? blkg_put+0x22/0x240 [ 842.674559][ T12] __submit_merged_bio+0x27a/0x6a0 [ 842.674596][ T12] __submit_merged_write_cond+0x255/0x530 [ 842.674651][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 842.674735][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 842.674763][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.674868][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.674929][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.674973][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675022][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675052][ T12] ? update_curr+0x78/0x8b0 [ 842.675084][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 842.675117][ T12] do_writepages+0x32e/0x550 [ 842.675159][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675188][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 842.675219][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 842.675268][ T12] __writeback_single_inode+0x145/0xff0 [ 842.675303][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675332][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 842.675377][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 842.675419][ T12] ? try_to_wake_up+0x7e5/0x1290 [ 842.675462][ T12] ? raise_softirq+0xa5/0x120 [ 842.675498][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675547][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 842.675647][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675676][ T12] ? rcu_is_watching+0x15/0xb0 [ 842.675707][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.675752][ T12] wb_writeback+0x43b/0xaf0 [ 842.675799][ T12] ? queue_io+0x3b1/0x590 [ 842.675840][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 842.675889][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.675924][ T12] wb_workfn+0x409/0xef0 [ 842.675978][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 842.676014][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676043][ T12] ? __lock_acquire+0xab9/0xd20 [ 842.676087][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676122][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676157][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.676182][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 842.676211][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 842.676245][ T12] process_scheduled_works+0xae1/0x17b0 [ 842.676322][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 842.676366][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676415][ T12] worker_thread+0x8a0/0xda0 [ 842.676490][ T12] kthread+0x711/0x8a0 [ 842.676533][ T12] ? __pfx_worker_thread+0x10/0x10 [ 842.676565][ T12] ? __pfx_kthread+0x10/0x10 [ 842.676599][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676635][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.676659][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 842.676688][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.676714][ T12] ? __pfx_kthread+0x10/0x10 [ 842.676755][ T12] ret_from_fork+0x3fc/0x770 [ 842.676789][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 842.676827][ T12] ? __switch_to_asm+0x39/0x70 [ 842.676860][ T12] ? __switch_to_asm+0x33/0x70 [ 842.676893][ T12] ? __pfx_kthread+0x10/0x10 [ 842.676933][ T12] ret_from_fork_asm+0x1a/0x30 [ 842.676994][ T12] [ 842.677005][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 843.452368][ T30] audit: type=1804 audit(2000000563.459:337): pid=25261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.6981" name="/" dev="pidfs" ino=25261 res=1 errno=0 [ 843.501326][T25263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6983'. [ 843.540522][T25265] binder: 25264:25265 ioctl c018620c 200000000580 returned -22 [ 843.606022][T25267] smc: net device bond0 erased user defined pnetid SYZ2 [ 844.426170][T25253] loop5: detected capacity change from 0 to 32768 [ 844.477135][T25253] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 844.512593][T25253] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 844.558092][T25269] loop9: detected capacity change from 0 to 32768 [ 844.586835][T25285] loop2: detected capacity change from 0 to 4096 [ 844.592554][T25269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6985 (25269) [ 844.609241][T25285] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 844.610908][T25253] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 844.679795][T25269] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 844.695144][T25285] ntfs3(loop2): ino=0, attr_set_size [ 844.721152][T25269] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 844.722238][T25285] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 844.742407][T25269] BTRFS info (device loop9): using free-space-tree [ 844.798381][T25253] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 844.843400][T25303] loop4: detected capacity change from 0 to 1024 [ 844.861423][T25303] EXT4-fs: Ignoring removed nobh option [ 844.867642][T25303] EXT4-fs: Ignoring removed bh option [ 844.901951][T25277] loop6: detected capacity change from 0 to 32768 [ 844.911990][T25285] ntfs3(loop2): ino=0, attr_set_size [ 844.934557][T25277] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 844.979839][T25303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.014824][T25277] (syz.6.6989,25277,0):ocfs2_double_lock:1189 ERROR: status = -2 [ 845.038265][T25277] (syz.6.6989,25277,1):ocfs2_rename:1298 ERROR: status = -2 [ 845.045757][T25277] (syz.6.6989,25277,1):ocfs2_rename:1699 ERROR: status = -2 [ 845.060325][T25303] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 845.155688][T20255] ocfs2: Unmounting device (7,6) on (node local) [ 845.305973][T13853] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 845.421611][T23811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.819877][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6995'. [ 846.458240][T25320] loop4: detected capacity change from 0 to 32768 [ 846.487582][T25320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6999 (25320) [ 846.525053][T25320] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 846.559610][T25320] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 846.568929][T25320] BTRFS info (device loop4): disk space caching is enabled [ 846.582372][T25320] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 846.761365][T25320] BTRFS info (device loop4): rebuilding free space tree [ 846.790178][T25361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7009'. [ 846.831997][T25320] BTRFS info (device loop4): disabling free space tree [ 846.840242][T25361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7009'. [ 846.849200][T25320] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 846.876194][T25320] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 847.155237][T23811] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 847.180021][T25368] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.192984][T25368] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.200224][T25368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.307277][T25373] loop6: detected capacity change from 0 to 128 [ 847.355678][T25373] EXT4-fs: Ignoring removed nobh option [ 847.437075][T25373] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 847.514120][T25373] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 847.717635][T20255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.783517][T25383] loop2: detected capacity change from 0 to 1024 [ 847.922989][T25388] netlink: 'syz.6.7021': attribute type 10 has an invalid length. [ 848.001626][T25383] hfsplus: request for non-existent node 16777216 in B*Tree [ 848.012454][T25383] hfsplus: request for non-existent node 16777216 in B*Tree [ 848.021125][T25383] hfsplus: request for non-existent node 16777216 in B*Tree [ 848.023861][T25388] bridge0: port 3(netdevsim0) entered blocking state [ 848.072453][T25388] bridge0: port 3(netdevsim0) entered disabled state [ 848.081317][T25388] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 848.125007][T25388] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 848.132579][T25383] hfsplus: request for non-existent node 16777216 in B*Tree [ 848.244551][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 848.279658][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 849.206490][T25381] loop5: detected capacity change from 0 to 40427 [ 849.279880][T25381] F2FS-fs (loop5): invalid crc value [ 849.509932][T25381] F2FS-fs (loop5): Start checkpoint disabled! [ 849.532728][T25381] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 849.650043][T25381] syz.5.7017: attempt to access beyond end of device [ 849.650043][T25381] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 849.673471][T20284] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 849.794337][T25437] loop9: detected capacity change from 0 to 512 [ 849.834093][T25437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.861025][ T59] kworker/u8:4: attempt to access beyond end of device [ 849.861025][ T59] loop5: rw=1, sector=45104, nr_sectors = 64 limit=40427 [ 849.875501][T20284] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 849.886957][T20284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.899967][T25437] ext4 filesystem being mounted at /735/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.911968][ T59] kworker/u8:4: attempt to access beyond end of device [ 849.911968][ T59] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 849.917675][T20284] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 849.941044][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 849.941081][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 849.941099][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 849.941134][ T59] Call Trace: [ 849.941154][ T59] [ 849.941166][ T59] dump_stack_lvl+0x189/0x250 [ 849.941207][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.941240][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 849.941270][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 849.941304][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.941335][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 849.941359][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 849.941386][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.941414][ T59] ? f2fs_hw_is_readonly+0x39b/0x470 [ 849.941452][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 849.941488][ T59] f2fs_write_end_io+0x495/0x810 [ 849.941518][ T59] ? blkg_put+0x22/0x240 [ 849.941581][ T59] __submit_merged_bio+0x27a/0x6a0 [ 849.941617][ T59] __submit_merged_write_cond+0x255/0x530 [ 849.941674][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 849.941756][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 849.941808][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 849.941898][ T59] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 849.941944][ T59] ? trace_f2fs_writepages+0x7f/0x200 [ 849.941980][ T59] ? f2fs_write_node_pages+0x478/0x6e0 [ 849.942040][ T59] ? sched_clock+0x3f/0x60 [ 849.942075][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942102][ T59] ? sched_clock_cpu+0x74/0x430 [ 849.942128][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942169][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 849.942200][ T59] do_writepages+0x32e/0x550 [ 849.942244][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942274][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 849.942305][ T59] ? writeback_sb_inodes+0x372/0x1000 [ 849.942357][ T59] __writeback_single_inode+0x145/0xff0 [ 849.942389][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942416][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 849.942465][ T59] writeback_sb_inodes+0x6b5/0x1000 [ 849.942498][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.942539][ T59] ? rcu_is_watching+0x15/0xb0 [ 849.942574][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942621][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 849.942724][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942753][ T59] ? rcu_is_watching+0x15/0xb0 [ 849.942782][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.942823][ T59] wb_writeback+0x43b/0xaf0 [ 849.942873][ T59] ? queue_io+0x3b1/0x590 [ 849.942912][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 849.942960][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 849.942994][ T59] wb_workfn+0x409/0xef0 [ 849.943046][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 849.943080][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943108][ T59] ? __lock_acquire+0xab9/0xd20 [ 849.943158][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943190][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943225][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 849.943248][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 849.943276][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 849.943312][ T59] process_scheduled_works+0xae1/0x17b0 [ 849.943390][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 849.943432][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943477][ T59] worker_thread+0x8a0/0xda0 [ 849.943550][ T59] kthread+0x711/0x8a0 [ 849.943595][ T59] ? __pfx_worker_thread+0x10/0x10 [ 849.943624][ T59] ? __pfx_kthread+0x10/0x10 [ 849.943656][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943690][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 849.943717][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.943744][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.943768][ T59] ? __pfx_kthread+0x10/0x10 [ 849.943807][ T59] ret_from_fork+0x3fc/0x770 [ 849.943839][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 849.943876][ T59] ? __switch_to_asm+0x39/0x70 [ 849.943908][ T59] ? __switch_to_asm+0x33/0x70 [ 849.943940][ T59] ? __pfx_kthread+0x10/0x10 [ 849.943978][ T59] ret_from_fork_asm+0x1a/0x30 [ 849.944038][ T59] [ 850.353440][T20284] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 850.361478][T20284] usb 3-1: Manufacturer: syz [ 850.369327][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 850.377282][T20284] usb 3-1: config 0 descriptor?? [ 850.456141][T20284] rc_core: IR keymap rc-hauppauge not found [ 850.462109][T20284] Registered IR keymap rc-empty [ 850.498524][T13853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.510014][T20284] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 850.596098][T20284] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 851.133944][T20284] usb 3-1: USB disconnect, device number 17 [ 851.268783][T25470] loop5: detected capacity change from 0 to 1024 [ 851.326658][T25470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.378214][T25470] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.626476][T25461] loop9: detected capacity change from 0 to 32768 [ 851.637917][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.642565][T25461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7054 (25461) [ 851.692734][T25461] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 851.723616][T25461] BTRFS info (device loop9): using sha256 (sha256-x86_64) checksum algorithm [ 851.757246][T25461] BTRFS info (device loop9): using free-space-tree [ 851.956013][ T30] audit: type=1800 audit(2000000571.979:338): pid=25461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7054" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 852.052511][T20284] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 852.143956][T13853] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 852.226470][T20284] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 852.252325][T20284] usb 6-1: config 0 has no interface number 0 [ 852.264414][T20284] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 852.292444][T20284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.300463][T20284] usb 6-1: Product: syz [ 852.332422][T20284] usb 6-1: Manufacturer: syz [ 852.337071][T20284] usb 6-1: SerialNumber: syz [ 852.360465][T20284] usb 6-1: config 0 descriptor?? [ 852.403971][T25479] loop4: detected capacity change from 0 to 32768 [ 852.450215][T25479] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7060 (25479) [ 852.482165][T25479] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 852.523240][T25479] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 852.572566][T25479] BTRFS info (device loop4): using free-space-tree [ 852.603400][T20284] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 852.643522][T20284] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.682788][T20284] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 852.695052][T20284] usb 6-1: media controller created [ 852.721601][T20284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.819878][T20284] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 852.875991][ T5844] Bluetooth: hci2: command tx timeout [ 852.926478][T20284] usb 6-1: USB disconnect, device number 14 [ 852.950953][T23811] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 853.657441][T25551] loop4: detected capacity change from 0 to 512 [ 853.723886][T25551] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.7075: inode #15: comm syz.4.7075: iget: illegal inode # [ 853.748656][T25551] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.7075: couldn't read orphan inode 15 (err -117) [ 853.784095][T25559] loop2: detected capacity change from 0 to 256 [ 853.798951][T25551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.831901][T25531] loop9: detected capacity change from 0 to 40427 [ 853.871798][T25559] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd103e44e, utbl_chksum : 0xe619d30d) [ 853.891287][T25551] EXT4-fs (loop4): shut down requested (2) [ 853.985210][T23811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.038078][T25568] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 854.230657][T25531] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 854.299411][ T30] audit: type=1800 audit(2000000574.319:339): pid=25531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7065" name="file2" dev="loop9" ino=10 res=0 errno=0 [ 854.445987][T13853] syz-executor: attempt to access beyond end of device [ 854.445987][T13853] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 854.470634][T13853] CPU: 1 UID: 0 PID: 13853 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 854.470669][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.470685][T13853] Call Trace: [ 854.470696][T13853] [ 854.470707][T13853] dump_stack_lvl+0x189/0x250 [ 854.470755][T13853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.470784][T13853] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 854.470812][T13853] ? __pfx_queue_work_on+0x10/0x10 [ 854.470846][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.470876][T13853] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 854.470902][T13853] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 854.470931][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.470960][T13853] ? f2fs_hw_is_readonly+0x39b/0x470 [ 854.470995][T13853] f2fs_handle_critical_error+0x37c/0x540 [ 854.471034][T13853] f2fs_write_end_io+0x495/0x810 [ 854.471064][T13853] ? blkg_put+0x22/0x240 [ 854.471129][T13853] __submit_merged_bio+0x27a/0x6a0 [ 854.471166][T13853] __submit_merged_write_cond+0x255/0x530 [ 854.471221][T13853] f2fs_write_data_pages+0x261d/0x3000 [ 854.471306][T13853] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 854.471403][T13853] ? __mod_zone_page_state+0xd7/0x140 [ 854.471463][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471493][T13853] ? folios_put_refs+0x560/0x640 [ 854.471539][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471568][T13853] ? __lock_acquire+0xab9/0xd20 [ 854.471609][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471637][T13853] ? do_raw_spin_lock+0x121/0x290 [ 854.471683][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471719][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471748][T13853] ? do_raw_spin_unlock+0x122/0x240 [ 854.471788][T13853] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 854.471821][T13853] do_writepages+0x32e/0x550 [ 854.471865][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471901][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.471930][T13853] ? do_raw_spin_unlock+0x122/0x240 [ 854.471976][T13853] filemap_fdatawrite+0x191/0x230 [ 854.472014][T13853] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 854.472116][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.472153][T13853] ? do_raw_spin_unlock+0x122/0x240 [ 854.472197][T13853] f2fs_sync_dirty_inodes+0x31f/0x830 [ 854.472257][T13853] f2fs_write_checkpoint+0x94a/0x1de0 [ 854.472329][T13853] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 854.472445][T13853] ? kill_f2fs_super+0x298/0x6c0 [ 854.472488][T13853] kill_f2fs_super+0x2c3/0x6c0 [ 854.472532][T13853] ? __pfx_kill_f2fs_super+0x10/0x10 [ 854.472562][T13853] ? radix_tree_delete_item+0x2b6/0x400 [ 854.472600][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.472630][T13853] ? shrinker_free+0x2ce/0x3e0 [ 854.472662][T13853] deactivate_locked_super+0xbc/0x130 [ 854.472698][T13853] cleanup_mnt+0x425/0x4c0 [ 854.472727][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.472756][T13853] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.472790][T13853] task_work_run+0x1d4/0x260 [ 854.472836][T13853] ? __pfx_task_work_run+0x10/0x10 [ 854.472873][T13853] ? __x64_sys_umount+0x122/0x160 [ 854.472918][T13853] ? exit_to_user_mode_loop+0x40/0x110 [ 854.472953][T13853] exit_to_user_mode_loop+0xec/0x110 [ 854.472982][T13853] do_syscall_64+0x2bd/0x3b0 [ 854.473011][T13853] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.473039][T13853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.473064][T13853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.473092][T13853] ? exc_page_fault+0x9f/0xf0 [ 854.473124][T13853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.473150][T13853] RIP: 0033:0x7efda538fcd7 [ 854.473172][T13853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 854.473194][T13853] RSP: 002b:00007ffc55ae0ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 854.473220][T13853] RAX: 0000000000000000 RBX: 00007efda5410b55 RCX: 00007efda538fcd7 [ 854.473237][T13853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55ae0fa0 [ 854.473254][T13853] RBP: 00007ffc55ae0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 854.473271][T13853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55ae2030 [ 854.473288][T13853] R13: 00007efda5410b55 R14: 00000000000d0725 R15: 00007ffc55ae2070 [ 854.473335][T13853] [ 854.932614][T13853] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 854.959420][T25586] loop4: detected capacity change from 0 to 512 [ 854.975460][T25582] netlink: 'syz.6.7091': attribute type 10 has an invalid length. [ 854.983624][T25582] netlink: 2 bytes leftover after parsing attributes in process `syz.6.7091'. [ 854.992757][T25582] team0: entered promiscuous mode [ 855.000473][T25582] bridge0: port 4(team0) entered blocking state [ 855.042050][ T30] audit: type=1326 audit(2000000575.039:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.072217][T25582] bridge0: port 4(team0) entered disabled state [ 855.079238][T25582] team0: entered allmulticast mode [ 855.108402][ T30] audit: type=1326 audit(2000000575.039:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.137598][ T30] audit: type=1326 audit(2000000575.039:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.163104][ T30] audit: type=1326 audit(2000000575.039:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.186540][ T30] audit: type=1326 audit(2000000575.039:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.202471][T25582] team_slave_0: entered allmulticast mode [ 855.210331][ T30] audit: type=1326 audit(2000000575.039:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.237343][ T30] audit: type=1326 audit(2000000575.039:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.244728][T25586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.260164][ T30] audit: type=1326 audit(2000000575.039:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25583 comm="syz.5.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc98e9a9 code=0x7ffc0000 [ 855.300603][T25582] team_slave_1: entered allmulticast mode [ 855.309784][T25582] bridge0: port 4(team0) entered blocking state [ 855.316275][T25582] bridge0: port 4(team0) entered forwarding state [ 855.364174][T25586] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.521982][T25598] loop6: detected capacity change from 0 to 512 [ 855.581145][T25601] block nbd1: Unsupported socket: shutdown callout must be supported. [ 855.581409][T25598] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 855.610210][T25598] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 855.619994][T25586] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7094: bg 0: block 248: padding at end of block bitmap is not set [ 855.621848][T25598] EXT4-fs (loop6): 1 truncate cleaned up [ 855.643267][T25598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.711937][T25586] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 855.769099][T20255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.927090][T23811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.976376][T25614] loop2: detected capacity change from 0 to 256 [ 856.028616][T25614] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 856.247352][T25618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.652374][ T5996] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 856.834612][ T5996] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 856.854320][ T5996] usb 10-1: config 0 has no interface number 0 [ 856.879395][ T5996] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 856.902304][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.930147][ T5996] usb 10-1: Product: syz [ 856.947161][ T5996] usb 10-1: Manufacturer: syz [ 856.972401][ T5996] usb 10-1: SerialNumber: syz [ 857.008587][ T5996] usb 10-1: config 0 descriptor?? [ 857.167353][T25620] loop4: detected capacity change from 0 to 32768 [ 857.207419][T25620] [ 857.207419][T25620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 857.207419][T25620] [ 857.252026][ T5996] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 857.286343][T25620] ERROR: (device loop4): diWrite: ixpxd invalid [ 857.286343][T25620] [ 857.295968][ T5996] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 857.347510][ T5996] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 857.355838][T25620] ERROR: (device loop4): remounting filesystem as read-only [ 857.363414][ T5996] usb 10-1: media controller created [ 857.372419][T25620] ERROR: (device loop4): txCommit: [ 857.372419][T25620] [ 857.431040][T25620] ERROR: (device loop4): dtSearch: stack overrun! [ 857.431040][T25620] [ 857.460001][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.468611][T25620] ERROR: (device loop4): remounting filesystem as read-only [ 857.502563][T25620] btstack dump: [ 857.507197][T25620] bn = 0, index = 0 [ 857.531734][T25652] loop6: detected capacity change from 0 to 1024 [ 857.542446][T25620] bn = 30, index = 0 [ 857.552357][T25620] bn = 0, index = 0 [ 857.567366][T25620] bn = 30, index = 0 [ 857.580028][T25652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.595871][ T5996] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 857.602347][T25620] bn = 0, index = 0 [ 857.606178][T25620] bn = 30, index = 0 [ 857.611202][T25620] bn = 0, index = 0 [ 857.622921][T25620] bn = 0, index = 0 [ 857.628501][T25620] jfs_lookup: dtSearch returned -5 [ 857.670850][ T5996] usb 10-1: USB disconnect, device number 24 [ 857.693028][T25652] EXT4-fs (loop6): shut down requested (1) [ 857.845380][T20255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.048025][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7124'. [ 858.263018][T25665] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7127'. [ 858.470062][T25657] loop2: detected capacity change from 0 to 32768 [ 858.550547][T25657] find_entry called with index >= next_index [ 858.562358][T25657] find_entry called with index >= next_index [ 858.573833][T25657] find_entry called with index >= next_index [ 858.612871][T25657] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 858.612871][T25657] [ 858.667755][T25657] ERROR: (device loop2): remounting filesystem as read-only [ 858.675579][T25657] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3 [ 858.675579][T25657] [ 858.687073][T25657] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 858.687073][T25657] [ 858.771060][T25675] loop9: detected capacity change from 0 to 512 [ 858.839587][T25675] journal_path: Lookup failure for './file0/../file0' [ 858.864400][T25678] loop4: detected capacity change from 0 to 4096 [ 858.871417][T25679] loop6: detected capacity change from 0 to 2048 [ 858.877973][T25675] EXT4-fs: error: could not find journal device path [ 858.916907][T25678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.955216][T25678] fs-verity: sha512 using implementation "sha512-avx2" [ 858.968660][T25678] fs-verity (loop4, inode 16): Unsupported log_blocksize: 13 [ 859.018026][T23811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.930283][T25694] loop5: detected capacity change from 0 to 32768 [ 859.943798][T25694] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7140 (25694) [ 859.986607][T25705] binder: 25704:25705 ioctl c0306201 200000000040 returned -14 [ 859.997735][T25694] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 860.008502][T25694] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 860.032429][T25694] BTRFS info (device loop5): using free-space-tree [ 860.230319][T25726] loop9: detected capacity change from 0 to 128 [ 860.278863][T25694] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 860.405634][T25698] loop2: detected capacity change from 0 to 32768 [ 860.413139][T25698] XFS: attr2 mount option is deprecated. [ 860.444381][T24145] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 860.465247][T25698] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 860.511478][T25698] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 860.664257][T25698] XFS (loop2): Ending clean mount [ 860.728720][T25698] XFS (loop2): Quotacheck needed: Please wait. [ 860.769136][T25698] XFS (loop2): Quotacheck: Done. [ 861.020308][T25746] loop9: detected capacity change from 0 to 2048 [ 861.066087][T23817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 861.144650][T25746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.284383][T25746] EXT4-fs (loop9): shut down requested (0) [ 861.439408][T25738] loop6: detected capacity change from 0 to 32768 [ 861.535374][T25738] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 861.565997][ T36] (kworker/u8:2,36,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 861.658569][T25762] tap0: tun_chr_ioctl cmd 2147767521 [ 861.717595][T25760] loop5: detected capacity change from 0 to 4096 [ 861.736112][T20255] ocfs2: Unmounting device (7,6) on (node local) [ 861.779161][T13853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.833190][T25760] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 861.843486][T25769] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 861.916455][T25760] NILFS (loop5): mounting fs with errors [ 862.608286][T25789] loop2: detected capacity change from 0 to 32768 [ 862.677529][T25789] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 862.939893][T25789] XFS (loop2): Ending clean mount [ 863.017309][T25815] loop4: detected capacity change from 0 to 1024 [ 863.069087][T25812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 863.085312][T23817] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 863.490270][T25829] loop9: detected capacity change from 0 to 64 [ 863.725717][T25832] loop4: detected capacity change from 0 to 1024 [ 863.791534][T25832] hfsplus: bad catalog entry type [ 863.855383][T12911] hfsplus: b-tree write err: -5, ino 4 [ 864.295383][T25845] lo speed is unknown, defaulting to 1000 [ 864.431221][T25853] loop5: detected capacity change from 0 to 512 [ 864.459465][T25853] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.7194: corrupted in-inode xattr: invalid ea_ino [ 864.491673][T25853] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7194: couldn't read orphan inode 15 (err -117) [ 864.528592][T25853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.685357][T25863] loop2: detected capacity change from 0 to 1024 [ 864.710846][T25863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 864.750929][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.800945][T25868] kernel read not supported for file /$  (pid: 25868 comm: syz.9.7200) [ 864.812015][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 864.812032][ T30] audit: type=1800 audit(2000000584.829:354): pid=25868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7200" name=24072001 dev="mqueue" ino=68306 res=0 errno=0 [ 864.880566][T25863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.077320][T23817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.096300][T25877] openvswitch: netlink: Message has 4 unknown bytes. [ 865.209795][T25880] netlink: 'syz.4.7205': attribute type 3 has an invalid length. [ 865.319880][T25887] loop2: detected capacity change from 0 to 47 [ 865.430176][T25891] loop9: detected capacity change from 0 to 128 [ 865.460308][T25891] affs: No valid root block on device loop9 [ 865.496994][T25893] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 866.201649][T25891] loop9: detected capacity change from 0 to 32768 [ 866.211637][T25891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7209 (25891) [ 866.267881][T25891] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 866.283088][T25891] BTRFS info (device loop9): using sha256 (sha256-x86_64) checksum algorithm [ 866.291918][T25891] BTRFS info (device loop9): using free-space-tree [ 866.365137][T25913] loop5: detected capacity change from 0 to 4096 [ 866.382993][T25891] BTRFS info (device loop9): device stats zeroed by syz.9.7209 (25891) [ 866.405055][T25913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.448798][T13853] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 866.449657][T25913] EXT4-fs (loop5): shut down requested (2) [ 866.590560][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.277673][T25951] loop9: detected capacity change from 0 to 512 [ 867.392155][T25951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.410664][T25951] ext4 filesystem being mounted at /762/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 867.659586][T13853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.895464][T25970] loop4: detected capacity change from 0 to 128 [ 867.917135][T25970] msdos: Bad value for 'fmask' [ 868.562682][T20284] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 868.755665][T20284] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.782626][T20284] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 868.817630][T20284] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 868.838592][T20284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.873538][T20284] usb 10-1: config 0 descriptor?? [ 869.311585][T20284] kovaplus 0003:1E7D:2D50.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 869.408611][T26023] loop5: detected capacity change from 0 to 512 [ 869.441367][T26023] EXT4-fs: Ignoring removed nobh option [ 869.517185][T26023] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.7262: iget: bad i_size value: 38620345925642 [ 869.576620][T26023] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7262: couldn't read orphan inode 15 (err -117) [ 869.606323][T26029] loop4: detected capacity change from 0 to 64 [ 869.638363][T26023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.705353][T20284] kovaplus 0003:1E7D:2D50.0049: couldn't init struct kovaplus_device [ 869.713845][T20284] kovaplus 0003:1E7D:2D50.0049: couldn't install mouse [ 869.733641][T20284] kovaplus 0003:1E7D:2D50.0049: probe with driver kovaplus failed with error -71 [ 869.760603][T20284] usb 10-1: USB disconnect, device number 25 [ 869.779406][T26023] EXT4-fs (loop5): shut down requested (2) [ 869.906780][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.928126][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.935383][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.261076][T26044] loop4: detected capacity change from 0 to 16 [ 870.306369][T26044] erofs (device loop4): mounted with root inode @ nid 36. [ 870.375518][T26044] erofs (device loop4): corrupted dir block 0 @ nid 46 [ 870.810231][T26061] loop4: detected capacity change from 0 to 128 [ 870.907643][T26042] loop5: detected capacity change from 0 to 32768 [ 871.195736][T26073] input: syz0 as /devices/virtual/input/input29 [ 871.331330][T26077] loop4: detected capacity change from 0 to 512 [ 871.384498][T26077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 871.462505][T26077] EXT4-fs (loop4): 1 truncate cleaned up [ 871.470101][T26077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.549823][T26091] loop5: detected capacity change from 0 to 128 [ 871.641154][T26091] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.697465][T26091] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 871.814796][T26091] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 871.839543][T23811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.112703][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7301'. [ 872.494581][T26119] lo speed is unknown, defaulting to 1000 [ 872.711441][T26132] loop4: detected capacity change from 0 to 8 [ 872.852374][ T975] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 872.876454][T26108] loop6: detected capacity change from 0 to 32768 [ 872.911464][T26108] [ 872.911464][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 872.911464][T26108] [ 872.987902][T26138] loop5: detected capacity change from 0 to 164 [ 873.005630][T26108] [ 873.005630][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.005630][T26108] [ 873.024792][ T975] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 873.054299][ T975] usb 10-1: config 0 has no interface number 0 [ 873.062531][T26108] [ 873.062531][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.062531][T26108] [ 873.081212][ T975] usb 10-1: config 0 interface 12 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 873.093481][T26108] [ 873.093481][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.093481][T26108] [ 873.127100][ T975] usb 10-1: config 0 interface 12 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.132450][T26108] [ 873.132450][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.132450][T26108] [ 873.143545][ T975] usb 10-1: config 0 interface 12 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 873.176012][ T975] usb 10-1: New USB device found, idVendor=0463, idProduct=0027, bcdDevice= 0.00 [ 873.204778][T26108] [ 873.204778][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.204778][T26108] [ 873.237944][T26108] [ 873.237944][T26108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.237944][T26108] [ 873.251068][ T975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.266846][ T975] usb 10-1: config 0 descriptor?? [ 873.289009][ T112] [ 873.289009][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.289009][ T112] [ 873.378912][T26144] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7318'. [ 873.406574][T26142] netlink: 'syz.5.7317': attribute type 10 has an invalid length. [ 873.422280][T26142] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7317'. [ 873.451589][ T36] [ 873.451589][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.451589][ T36] [ 873.476111][ T36] [ 873.476111][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.476111][ T36] [ 873.523919][T20255] [ 873.523919][T20255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.523919][T20255] [ 873.537346][T20255] [ 873.537346][T20255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.537346][T20255] [ 873.552516][ T112] [ 873.552516][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 873.552516][ T112] [ 873.581571][ T112] ================================================================== [ 873.589775][ T112] BUG: KASAN: slab-use-after-free in lmLogSync+0x930/0x9d0 [ 873.597000][ T112] Write of size 4 at addr ffff888027fe8a20 by task jfsCommit/112 [ 873.604723][ T112] [ 873.607056][ T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 873.607090][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.607107][ T112] Call Trace: [ 873.607117][ T112] [ 873.607128][ T112] dump_stack_lvl+0x189/0x250 [ 873.607168][ T112] ? __kasan_check_byte+0x12/0x40 [ 873.607207][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.607237][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.607268][ T112] ? lock_release+0x4b/0x3e0 [ 873.607298][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.607327][ T112] ? __virt_addr_valid+0x4a5/0x5c0 [ 873.607363][ T112] print_report+0xca/0x240 [ 873.607386][ T112] ? lmLogSync+0x930/0x9d0 [ 873.607417][ T112] kasan_report+0x118/0x150 [ 873.607452][ T112] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 873.607480][ T112] ? lmLogSync+0x930/0x9d0 [ 873.607519][ T112] lmLogSync+0x930/0x9d0 [ 873.607555][ T112] ? __pfx_lmLogSync+0x10/0x10 [ 873.607593][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.607629][ T112] jfs_syncpt+0x7b/0x90 [ 873.607663][ T112] txEnd+0x2e5/0x530 [ 873.607700][ T112] jfs_lazycommit+0x5ba/0xa90 [ 873.607743][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 873.607781][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 873.607809][ T112] ? __kthread_parkme+0x7b/0x200 [ 873.607840][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.607869][ T112] ? __kthread_parkme+0x1a1/0x200 [ 873.607905][ T112] kthread+0x711/0x8a0 [ 873.607943][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 873.607980][ T112] ? __pfx_kthread+0x10/0x10 [ 873.608014][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.608046][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.608070][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.608099][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.608126][ T112] ? __pfx_kthread+0x10/0x10 [ 873.608168][ T112] ret_from_fork+0x3fc/0x770 [ 873.608197][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 873.608228][ T112] ? __switch_to_asm+0x39/0x70 [ 873.608262][ T112] ? __switch_to_asm+0x33/0x70 [ 873.608294][ T112] ? __pfx_kthread+0x10/0x10 [ 873.608330][ T112] ret_from_fork_asm+0x1a/0x30 [ 873.608375][ T112] [ 873.608385][ T112] [ 873.823253][ T112] Allocated by task 26108: [ 873.827666][ T112] kasan_save_track+0x3e/0x80 [ 873.832390][ T112] __kasan_kmalloc+0x93/0xb0 [ 873.837008][ T112] __kmalloc_cache_noprof+0x230/0x3d0 [ 873.842396][ T112] lmLogOpen+0x2d1/0xfb0 [ 873.846641][ T112] jfs_mount_rw+0xe9/0x670 [ 873.851063][ T112] jfs_fill_super+0x754/0xd90 [ 873.855734][ T112] get_tree_bdev_flags+0x40e/0x4d0 [ 873.860852][ T112] vfs_get_tree+0x92/0x2b0 [ 873.865454][ T112] do_new_mount+0x24a/0xa40 [ 873.869965][ T112] __se_sys_mount+0x317/0x410 [ 873.874637][ T112] do_syscall_64+0xfa/0x3b0 [ 873.879146][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.885042][ T112] [ 873.887356][ T112] Freed by task 20255: [ 873.891442][ T112] kasan_save_track+0x3e/0x80 [ 873.896189][ T112] kasan_save_free_info+0x46/0x50 [ 873.901220][ T112] __kasan_slab_free+0x62/0x70 [ 873.905991][ T112] kfree+0x18e/0x440 [ 873.909891][ T112] lmLogClose+0x297/0x520 [ 873.914237][ T112] jfs_umount+0x2ef/0x3c0 [ 873.918593][ T112] jfs_put_super+0x8c/0x190 [ 873.923102][ T112] generic_shutdown_super+0x135/0x2c0 [ 873.928504][ T112] kill_block_super+0x44/0x90 [ 873.933209][ T112] deactivate_locked_super+0xbc/0x130 [ 873.938661][ T112] cleanup_mnt+0x425/0x4c0 [ 873.943104][ T112] task_work_run+0x1d4/0x260 [ 873.947714][ T112] exit_to_user_mode_loop+0xec/0x110 [ 873.953006][ T112] do_syscall_64+0x2bd/0x3b0 [ 873.957608][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.963502][ T112] [ 873.965822][ T112] The buggy address belongs to the object at ffff888027fe8800 [ 873.965822][ T112] which belongs to the cache kmalloc-1k of size 1024 [ 873.979876][ T112] The buggy address is located 544 bytes inside of [ 873.979876][ T112] freed 1024-byte region [ffff888027fe8800, ffff888027fe8c00) [ 873.993769][ T112] [ 873.996094][ T112] The buggy address belongs to the physical page: [ 874.002502][ T112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27fe8 [ 874.011267][ T112] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 874.019812][ T112] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 874.027803][ T112] page_type: f5(slab) [ 874.031792][ T112] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 874.040375][ T112] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 874.048961][ T112] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 874.057631][ T112] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 874.066303][ T112] head: 00fff00000000003 ffffea00009ffa01 00000000ffffffff 00000000ffffffff [ 874.074973][ T112] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 874.083634][ T112] page dumped because: kasan: bad access detected [ 874.090045][ T112] page_owner tracks the page as allocated [ 874.095751][ T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u8:3), ts 102967418152, free_ts 102886522749 [ 874.114966][ T112] post_alloc_hook+0x240/0x2a0 [ 874.119746][ T112] get_page_from_freelist+0x21e4/0x22c0 [ 874.125290][ T112] __alloc_frozen_pages_noprof+0x181/0x370 [ 874.131096][ T112] alloc_pages_mpol+0x232/0x4a0 [ 874.135954][ T112] allocate_slab+0x8a/0x3b0 [ 874.140472][ T112] ___slab_alloc+0xbfc/0x1480 [ 874.145142][ T112] __kmalloc_noprof+0x305/0x4f0 [ 874.149999][ T112] ieee802_11_parse_elems_full+0x152/0x2aa0 [ 874.155922][ T112] ieee80211_inform_bss+0x10c/0x10a0 [ 874.161207][ T112] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 874.167449][ T112] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 874.173089][ T112] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 874.179245][ T112] ieee80211_bss_info_update+0x746/0x9e0 [ 874.184881][ T112] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 874.190942][ T112] ieee80211_iface_work+0x806/0xfe0 [ 874.196147][ T112] cfg80211_wiphy_work+0x2df/0x460 [ 874.201286][ T112] page last free pid 49 tgid 49 stack trace: [ 874.207259][ T112] __free_frozen_pages+0xc71/0xe70 [ 874.212384][ T112] __slab_free+0x326/0x400 [ 874.216808][ T112] qlist_free_all+0x97/0x140 [ 874.221399][ T112] kasan_quarantine_reduce+0x148/0x160 [ 874.226865][ T112] __kasan_slab_alloc+0x22/0x80 [ 874.231722][ T112] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 874.237624][ T112] __alloc_skb+0x112/0x2d0 [ 874.242051][ T112] mld_newpack+0x13c/0xc40 [ 874.246473][ T112] add_grhead+0x5a/0x2a0 [ 874.250831][ T112] add_grec+0x13b2/0x1670 [ 874.255172][ T112] mld_send_initial_cr+0x22d/0x4c0 [ 874.260291][ T112] ipv6_mc_dad_complete+0x88/0x4b0 [ 874.265407][ T112] addrconf_dad_completed+0x6d5/0xd60 [ 874.270794][ T112] addrconf_dad_work+0xc36/0x14b0 [ 874.275820][ T112] process_scheduled_works+0xae1/0x17b0 [ 874.281370][ T112] worker_thread+0x8a0/0xda0 [ 874.285972][ T112] [ 874.288288][ T112] Memory state around the buggy address: [ 874.293911][ T112] ffff888027fe8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.301969][ T112] ffff888027fe8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.310044][ T112] >ffff888027fe8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.318110][ T112] ^ [ 874.323226][ T112] ffff888027fe8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.331294][ T112] ffff888027fe8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.339358][ T112] ================================================================== [ 874.347485][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.458610][ T112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 874.465857][ T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 874.477691][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.487759][ T112] Call Trace: [ 874.491068][ T112] [ 874.494004][ T112] dump_stack_lvl+0x99/0x250 [ 874.498604][ T112] ? __asan_memcpy+0x40/0x70 [ 874.503206][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.508427][ T112] ? __pfx__printk+0x10/0x10 [ 874.513037][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.518718][ T112] panic+0x2db/0x790 [ 874.522627][ T112] ? __pfx_panic+0x10/0x10 [ 874.527045][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.532684][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.538322][ T112] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 874.544220][ T112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 874.550545][ T112] ? print_memory_metadata+0x314/0x400 [ 874.556006][ T112] ? lmLogSync+0x930/0x9d0 [ 874.560429][ T112] check_panic_on_warn+0x89/0xb0 [ 874.565378][ T112] ? lmLogSync+0x930/0x9d0 [ 874.569808][ T112] end_report+0x78/0x160 [ 874.574059][ T112] kasan_report+0x129/0x150 [ 874.578565][ T112] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 874.584459][ T112] ? lmLogSync+0x930/0x9d0 [ 874.588890][ T112] lmLogSync+0x930/0x9d0 [ 874.593144][ T112] ? __pfx_lmLogSync+0x10/0x10 [ 874.597917][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.603563][ T112] jfs_syncpt+0x7b/0x90 [ 874.607730][ T112] txEnd+0x2e5/0x530 [ 874.611640][ T112] jfs_lazycommit+0x5ba/0xa90 [ 874.616333][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 874.621546][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 874.627359][ T112] ? __kthread_parkme+0x7b/0x200 [ 874.632305][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.637950][ T112] ? __kthread_parkme+0x1a1/0x200 [ 874.643023][ T112] kthread+0x711/0x8a0 [ 874.647117][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 874.652333][ T112] ? __pfx_kthread+0x10/0x10 [ 874.656934][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.662576][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 874.667778][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.673424][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.678634][ T112] ? __pfx_kthread+0x10/0x10 [ 874.683242][ T112] ret_from_fork+0x3fc/0x770 [ 874.687886][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 874.693018][ T112] ? __switch_to_asm+0x39/0x70 [ 874.697797][ T112] ? __switch_to_asm+0x33/0x70 [ 874.702575][ T112] ? __pfx_kthread+0x10/0x10 [ 874.707178][ T112] ret_from_fork_asm+0x1a/0x30 [ 874.711960][ T112] [ 874.715352][ T112] Kernel Offset: disabled [ 874.719677][ T112] Rebooting in 86400 seconds..