last executing test programs: 4m31.83387279s ago: executing program 3 (id=138): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x1, 0x108) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m29.156401243s ago: executing program 3 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x810) socket(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) 4m27.755047058s ago: executing program 3 (id=144): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000180)='./file0/file0\x00', 0x10800, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC], 0x1, 0x191, &(0x7f0000000280)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x8, 0x3464e8e30a90fe9b}, &(0x7f00000001c0)=0xc) 4m25.877276409s ago: executing program 3 (id=148): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m22.546755531s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ustat(0x90000000000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, 0x0) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f0000002340)={[{@nobarrier}, {@nodiscard}, {@max_inline={'max_inline', 0x3d, [0x4c, 0x35, 0x65]}}, {@rescue={'rescue', 0x3d, 'all'}}, {@commit={'commit', 0x3d, 0x4}}, {@noflushoncommit}, {@nodiscard}, {@compress_force}, {}, {@datasum}, {@ssd_spread}]}, 0x9, 0x55dc, &(0x7f0000009740)="$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") 4m19.266782628s ago: executing program 3 (id=154): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x6}}}, 0x3a) 4m2.859997398s ago: executing program 32 (id=154): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x6}}}, 0x3a) 2m33.205561825s ago: executing program 0 (id=280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a000", @ANYRES32=0x0, @ANYRES32], 0x100}}, 0x0) 2m31.793127631s ago: executing program 0 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x1f5, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 2m30.419491022s ago: executing program 0 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x2000}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000100)=0x4, 0x8112) 2m26.476888948s ago: executing program 0 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m24.593124547s ago: executing program 0 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = fsopen(0x0, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 2m22.509275496s ago: executing program 0 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x64) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 2m6.363102343s ago: executing program 33 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x64) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 31.022725109s ago: executing program 1 (id=439): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000140)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000008c0)="7a7fa22c", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 24.875302238s ago: executing program 4 (id=444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) listns(&(0x7f0000000040)={0x20, 0x0, 0x0, 0x2000000}, 0x0, 0x16, 0x0) 23.750573319s ago: executing program 4 (id=445): socket$packet(0x11, 0x4, 0x300) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000021, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r4 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) 23.708496392s ago: executing program 1 (id=446): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c600001400"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x50ab414e71f8e31f, 0xdd9f83, 0x5, 0x2f, 0x2, 0x22, 0xc, 0x722, 0x6, 0x40, 0x7d, 0x27, 0x1c, {0x10000001, 0x6fd8e849}, 0x8, 0x9}}) 21.90056202s ago: executing program 4 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = memfd_secret(0x80000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="16", 0x1, 0x20040850, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@pspoll={{}, @random=0x8, @from_mac=@device_b, @broadcast}, 0x10) 19.627013741s ago: executing program 1 (id=452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, 0x0) read$msr(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3ff, 0x7, 0x0, 0xfffd, 0x0, 0x6f0a, 0x1, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xffff, 0x80, 0xbc0, 0x5, 0x6}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x1, 0x22, 0x0) 18.543062402s ago: executing program 5 (id=455): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000210001000400f700000000007f000001000000000000000000000000ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r3) r5 = semget$private(0x0, 0x5, 0x132) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000500)=""/125) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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") socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 18.288437079s ago: executing program 1 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x316) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x4, 0x4) r4 = socket$inet(0x2, 0x802, 0x1) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r4, &(0x7f0000000080)="08008edf773c8000", 0xfd) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 17.497544929s ago: executing program 5 (id=457): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) setresgid(0xee00, 0xee01, 0x0) 15.821689261s ago: executing program 1 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1f410, 0x0, 0x19c}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r6, 0x73}}, 0x48) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13.776000089s ago: executing program 4 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) 13.233720855s ago: executing program 5 (id=462): epoll_create1(0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000240)={0x3, 0x1000000}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x800) ioctl$BLKRRPART(r2, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) 12.570301969s ago: executing program 2 (id=463): r0 = syz_open_dev$evdev(0x0, 0x8c, 0x600) ioctl$EVIOCGMASK(r0, 0x80104592, 0xfffffffffffffffe) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000}) socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x2000000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdff8, 0x2, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.099461257s ago: executing program 2 (id=464): r0 = socket$key(0xf, 0x3, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9084edf4, 0xcd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0x50) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000180), 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x12, 0x6, 0x1, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) 10.032171294s ago: executing program 4 (id=465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x141700, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 7.46557514s ago: executing program 1 (id=466): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680), 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000740)={0x8001, r4}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)}, {&(0x7f0000000140)="530000008404", 0x6}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.464271208s ago: executing program 5 (id=467): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x83, &(0x7f0000000080)={0x10, 0x3, 0x0, 0x9, 0x5, 0x8, 0x7ff, 0xf959}, &(0x7f0000000100)=0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000000)={0x6, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000200)={@mcast2}, &(0x7f0000000280)=0x14) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.919879328s ago: executing program 4 (id=468): mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x90) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2818000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@fat=@check_strict}, {@shortname_winnt}, {@fat=@debug}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@fat=@flush}, {@utf8no}]}, 0x1, 0x34a, &(0x7f0000001740)="$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") openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 5.907056143s ago: executing program 2 (id=469): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/161, 0xa1, 0xe0) 5.603380139s ago: executing program 5 (id=470): r0 = socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r7 = fanotify_init(0xef0, 0x2) fanotify_mark(r7, 0x105, 0x40009965, r6, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r0) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) 3.277242651s ago: executing program 2 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {0x0}, &(0x7f0000000380), 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.3842291s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 1.113751594s ago: executing program 2 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 0s ago: executing program 2 (id=474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@debug}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@bsdgroups}, {@nomblk_io_submit}]}, 0x43, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x4054) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35093, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000002000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ridge_slave_0: entered allmulticast mode [ 95.674564][ T5624] bridge_slave_0: entered promiscuous mode [ 95.698985][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.699584][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.699860][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.700216][ T5630] bridge_slave_0: entered allmulticast mode [ 95.710627][ T5630] bridge_slave_0: entered promiscuous mode [ 95.728777][ T5631] team0: Port device team_slave_1 added [ 95.749782][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.750176][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.750579][ T5624] bridge_slave_1: entered allmulticast mode [ 95.757041][ T5624] bridge_slave_1: entered promiscuous mode [ 95.785967][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.786472][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.786754][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.787101][ T5630] bridge_slave_1: entered allmulticast mode [ 95.793057][ T5630] bridge_slave_1: entered promiscuous mode [ 95.830378][ T5625] team0: Port device team_slave_0 added [ 95.882001][ T5625] team0: Port device team_slave_1 added [ 95.901339][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.933567][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.933613][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.933641][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.985830][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.993199][ T5626] team0: Port device team_slave_0 added [ 95.995610][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.995685][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.995759][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.050614][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.061864][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.061906][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.061949][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.111836][ T5626] team0: Port device team_slave_1 added [ 96.119097][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.126192][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.126250][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.126337][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.240134][ T5624] team0: Port device team_slave_0 added [ 96.258215][ T5630] team0: Port device team_slave_0 added [ 96.281488][ T5631] hsr_slave_0: entered promiscuous mode [ 96.284494][ T5631] hsr_slave_1: entered promiscuous mode [ 96.294387][ T5624] team0: Port device team_slave_1 added [ 96.298856][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.298901][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.298978][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.309692][ T5630] team0: Port device team_slave_1 added [ 96.368312][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.368362][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.368406][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.435556][ T5625] hsr_slave_0: entered promiscuous mode [ 96.438542][ T5625] hsr_slave_1: entered promiscuous mode [ 96.440995][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 96.441266][ T5625] Cannot create hsr debugfs directory [ 96.515248][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.515469][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.515578][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.523974][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.524033][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.524116][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.611482][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.611671][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.611782][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.617536][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.617581][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.617656][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.806303][ T5626] hsr_slave_0: entered promiscuous mode [ 96.810266][ T5626] hsr_slave_1: entered promiscuous mode [ 96.812056][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 96.812076][ T5626] Cannot create hsr debugfs directory [ 96.914484][ T5630] hsr_slave_0: entered promiscuous mode [ 96.919848][ T5630] hsr_slave_1: entered promiscuous mode [ 96.921136][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 96.921197][ T5630] Cannot create hsr debugfs directory [ 96.968925][ T5624] hsr_slave_0: entered promiscuous mode [ 96.971627][ T5624] hsr_slave_1: entered promiscuous mode [ 96.973888][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 96.973958][ T5624] Cannot create hsr debugfs directory [ 97.305025][ T5635] Bluetooth: hci0: command tx timeout [ 97.305553][ T5628] Bluetooth: hci2: command tx timeout [ 97.305676][ T5628] Bluetooth: hci4: command tx timeout [ 97.369730][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.384151][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.385146][ T5632] Bluetooth: hci3: command tx timeout [ 97.385250][ T5635] Bluetooth: hci1: command tx timeout [ 97.428607][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.438650][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.441316][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.453961][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.463267][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.474251][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.582493][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.593726][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.607644][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.619155][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.632486][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.642815][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.662623][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.672681][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.766042][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.778347][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.780958][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.793125][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.802270][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.812592][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.820495][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.830647][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.942480][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.960611][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.974931][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.987541][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.989754][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.004643][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.023430][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.036907][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.079653][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.178270][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.190375][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.202292][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.206611][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.218180][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.233254][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.233774][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.250026][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.261425][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.274607][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.286441][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.299472][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.335392][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.335533][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.419841][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.453042][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.453321][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.470359][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.470570][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.491404][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.563812][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.593320][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.624291][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.624556][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.660521][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.660749][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.732474][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.779694][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.779954][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.796009][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.796136][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.930843][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.008794][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.071719][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.071958][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.160866][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.161133][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.370801][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.384958][ T5635] Bluetooth: hci0: command tx timeout [ 99.385515][ T5632] Bluetooth: hci4: command tx timeout [ 99.385565][ T5632] Bluetooth: hci2: command tx timeout [ 99.465000][ T5628] Bluetooth: hci3: command tx timeout [ 99.465147][ T5635] Bluetooth: hci1: command tx timeout [ 99.748330][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.991620][ T5631] veth0_vlan: entered promiscuous mode [ 100.038371][ T5631] veth1_vlan: entered promiscuous mode [ 100.149415][ T5631] veth0_macvtap: entered promiscuous mode [ 100.176991][ T5631] veth1_macvtap: entered promiscuous mode [ 100.230313][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.265287][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.338587][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.376212][ T113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378168][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378891][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.469309][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.674608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.674659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.725608][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.751560][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.753104][ T5625] veth0_vlan: entered promiscuous mode [ 100.837967][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.838017][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.858657][ T5625] veth1_vlan: entered promiscuous mode [ 100.911956][ T5626] veth0_vlan: entered promiscuous mode [ 100.924580][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.973989][ T5626] veth1_vlan: entered promiscuous mode [ 100.999750][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.062554][ T5625] veth0_macvtap: entered promiscuous mode [ 101.121265][ T5625] veth1_macvtap: entered promiscuous mode [ 101.211159][ T5626] veth0_macvtap: entered promiscuous mode [ 101.235892][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.410623][ T5624] veth0_vlan: entered promiscuous mode [ 101.438462][ T5626] veth1_macvtap: entered promiscuous mode [ 101.465435][ T5628] Bluetooth: hci2: command tx timeout [ 101.465540][ T5628] Bluetooth: hci4: command tx timeout [ 101.465629][ T5635] Bluetooth: hci0: command tx timeout [ 101.471465][ T5624] veth1_vlan: entered promiscuous mode [ 101.522149][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.545429][ T5632] Bluetooth: hci3: command tx timeout [ 101.545495][ T5635] Bluetooth: hci1: command tx timeout [ 101.710317][ T5624] veth0_macvtap: entered promiscuous mode [ 101.800385][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.878675][ T5624] veth1_macvtap: entered promiscuous mode [ 102.295006][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.295174][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.295239][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.349108][ T5630] veth0_vlan: entered promiscuous mode [ 102.366686][ T5630] veth1_vlan: entered promiscuous mode [ 102.430592][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.441199][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.529230][ T5630] veth0_macvtap: entered promiscuous mode [ 102.547067][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.553075][ T5630] veth1_macvtap: entered promiscuous mode [ 102.610931][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.981284][ T5817] loop3: detected capacity change from 0 to 2048 [ 102.990680][ T5817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.101631][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.118769][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.130082][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.130216][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.130371][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.130476][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.244112][ T5817] EXT4-fs (loop3): failed to initialize system zone (-117) [ 103.244915][ T5817] EXT4-fs (loop3): mount failed [ 103.492166][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.501490][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.509383][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.571212][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.644295][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.644339][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.761138][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.770990][ T3375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.775490][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.601333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.163074][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.172361][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.254150][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.254190][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.346419][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.346463][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.358660][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.358819][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.366521][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.366672][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.366771][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.723776][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.731884][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.788215][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.796281][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.910594][ T5830] loop1: detected capacity change from 0 to 2048 [ 107.673059][ T5834] Bluetooth: MGMT ver 1.23 [ 108.777189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 109.211247][ T5843] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5'. [ 109.770440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.990113][ T5851] loop0: detected capacity change from 0 to 256 [ 112.015258][ T5851] exfat: Deprecated parameter 'utf8' [ 112.015451][ T5851] exfat: Deprecated parameter 'namecase' [ 113.673580][ T5851] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 116.057196][ T5875] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 116.096269][ T5875] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 118.289322][ T5893] futex_wake_op: syz.3.21 tries to shift op by 144; fix this program [ 119.172856][ T5897] loop0: detected capacity change from 0 to 256 [ 119.175556][ T5897] ======================================================= [ 119.175556][ T5897] WARNING: The mand mount option has been deprecated and [ 119.175556][ T5897] and is ignored by this kernel. Remove the mand [ 119.175556][ T5897] option from the mount to silence this warning. [ 119.175556][ T5897] ======================================================= [ 120.684869][ T5909] loop2: detected capacity change from 0 to 256 [ 122.281104][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 122.281153][ T5919] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11'. [ 122.281192][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 122.281212][ T5919] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11'. [ 122.281328][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 124.347762][ T5945] loop2: detected capacity change from 0 to 512 [ 124.430533][ T5945] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.442071][ T5942] loop4: detected capacity change from 0 to 32768 [ 124.455098][ T5942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.31 (5942) [ 124.482983][ T5942] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.483059][ T5942] BTRFS info (device loop4): using sha256 checksum algorithm [ 124.667132][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.850032][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'. [ 124.915463][ T5942] BTRFS info (device loop4): enabling ssd optimizations [ 124.915595][ T5942] BTRFS info (device loop4): turning on sync discard [ 124.915678][ T5942] BTRFS info (device loop4): enabling free space tree [ 124.915828][ T5942] BTRFS info (device loop4): use zlib compression, level 3 [ 125.507608][ T5945] EXT4-fs (loop2): 1 orphan inode deleted [ 125.685107][ T3394] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.725673][ T3394] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 1 [ 125.782020][ T3394] loop2: lost filesystem error report for type 5 error -117 [ 126.030225][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.114394][ T5945] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.072259][ T5630] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.212741][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.410999][ T5905] udevd[5905]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 127.425257][ T5611] udevd[5611]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 128.463429][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 128.920640][ T5990] loop0: detected capacity change from 0 to 16 [ 129.062463][ T5990] erofs (device loop0): mounted with root inode @ nid 36. [ 129.983978][ T5995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.667596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.968318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.462637][ T6001] syz.0.38: attempt to access beyond end of device [ 131.462637][ T6001] loop0: rw=8388608, sector=1936876908, nr_sectors = 1 limit=16 [ 131.465644][ T6001] syz.0.38: attempt to access beyond end of device [ 131.465644][ T6001] loop0: rw=8388608, sector=3955228672, nr_sectors = 1 limit=16 [ 133.404101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.842279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.140513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 136.480078][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.480167][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.912105][ T6018] o2cb: This node has not been configured. [ 136.912460][ T6018] o2cb: Cluster check failed. Fix errors before retrying. [ 136.912706][ T6018] (syz.2.45,6018,0):user_dlm_register:674 ERROR: status = -22 [ 136.912780][ T6018] (syz.2.45,6018,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 137.920948][ T6024] loop4: detected capacity change from 0 to 1024 [ 141.993545][ T6046] loop0: detected capacity change from 0 to 40427 [ 142.059960][ T6046] F2FS-fs (loop0): invalid crc value [ 142.143887][ T6046] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 142.155105][ T6046] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 142.155164][ T6046] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 142.155823][ T6046] F2FS-fs (loop0): Start checkpoint disabled! [ 142.213066][ T6046] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 142.221330][ T6046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 142.466592][ T6050] syz.0.54: attempt to access beyond end of device [ 142.466592][ T6050] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 143.044338][ T1106] kworker/u8:8: attempt to access beyond end of device [ 143.044338][ T1106] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.114306][ T1106] CPU: 0 UID: 0 PID: 1106 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 143.114343][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.114358][ T1106] Workqueue: writeback wb_workfn (flush-7:0) [ 143.114426][ T1106] Call Trace: [ 143.114440][ T1106] [ 143.114449][ T1106] dump_stack_lvl+0xe8/0x150 [ 143.114486][ T1106] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 143.114520][ T1106] f2fs_write_end_io+0x1215/0x16f0 [ 143.114555][ T1106] ? blkg_put+0x22/0x240 [ 143.114599][ T1106] __submit_merged_bio+0x258/0x6a0 [ 143.114637][ T1106] ? rcu_is_watching+0x15/0xb0 [ 143.114669][ T1106] __submit_merged_write_cond+0x3c9/0x4e0 [ 143.114714][ T1106] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 143.114768][ T1106] f2fs_write_data_pages+0x2a27/0x36f0 [ 143.114857][ T1106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.114905][ T1106] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 143.114974][ T1106] ? __lock_acquire+0x6df/0x2e50 [ 143.115010][ T1106] ? __asan_memset+0x22/0x50 [ 143.115049][ T1106] ? lock_acquire+0x115/0x350 [ 143.115098][ T1106] ? __lock_acquire+0x6df/0x2e50 [ 143.115134][ T1106] ? unwind_next_frame+0x8f/0x2550 [ 143.115160][ T1106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.115193][ T1106] do_writepages+0x338/0x560 [ 143.115227][ T1106] ? reacquire_held_locks+0x117/0x1a0 [ 143.115252][ T1106] ? writeback_sb_inodes+0x450/0x1b00 [ 143.115290][ T1106] __writeback_single_inode+0x136/0x1220 [ 143.115327][ T1106] ? do_raw_spin_unlock+0xf5/0x210 [ 143.115362][ T1106] writeback_sb_inodes+0x9de/0x1b00 [ 143.115393][ T1106] ? __lock_acquire+0x6df/0x2e50 [ 143.115454][ T1106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 143.115533][ T1106] ? rcu_is_watching+0x15/0xb0 [ 143.115559][ T1106] ? queue_io+0x2d3/0x470 [ 143.115595][ T1106] wb_writeback+0x41c/0xad0 [ 143.115630][ T1106] ? queue_io+0x2a1/0x470 [ 143.115668][ T1106] ? __pfx_wb_writeback+0x10/0x10 [ 143.115698][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.115744][ T1106] wb_workfn+0x431/0x10f0 [ 143.115792][ T1106] ? __pfx_wb_workfn+0x10/0x10 [ 143.115822][ T1106] ? lapic_next_event+0x11/0x20 [ 143.115856][ T1106] ? clockevents_program_event+0x491/0x630 [ 143.115892][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.115930][ T1106] ? lock_acquire+0x115/0x350 [ 143.115973][ T1106] ? rcu_is_watching+0x15/0xb0 [ 143.116000][ T1106] ? process_scheduled_works+0x97e/0x1630 [ 143.116028][ T1106] process_scheduled_works+0xc4e/0x1630 [ 143.116092][ T1106] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.116127][ T1106] ? assign_work+0x3cf/0x5d0 [ 143.116161][ T1106] worker_thread+0xa47/0xfb0 [ 143.116220][ T1106] kthread+0x388/0x470 [ 143.116242][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 143.116268][ T1106] ? __pfx_kthread+0x10/0x10 [ 143.116291][ T1106] ret_from_fork+0x514/0xb70 [ 143.116336][ T1106] ? __pfx_ret_from_fork+0x10/0x10 [ 143.116455][ T1106] ? __switch_to+0xc89/0x1420 [ 143.116489][ T1106] ? __pfx_kthread+0x10/0x10 [ 143.116512][ T1106] ret_from_fork_asm+0x1a/0x30 [ 143.116565][ T1106] [ 143.383363][ T1106] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 144.879201][ T6057] netlink: 144 bytes leftover after parsing attributes in process `syz.2.55'. [ 146.776048][ T6063] loop3: detected capacity change from 0 to 16 [ 146.818064][ T6063] erofs (device loop3): mounted with root inode @ nid 36. [ 149.822861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 150.433145][ T6084] loop1: detected capacity change from 0 to 128 [ 150.542275][ T6084] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.563024][ T6084] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.559131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 153.129348][ T5625] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.766188][ T6104] trusted_key: encrypted_key: key user:syz not found [ 154.873734][ T6114] capability: warning: `syz.2.69' uses deprecated v2 capabilities in a way that may be insecure [ 154.935414][ T6116] ubi16: attaching mtd0 [ 154.958211][ T6116] ubi16: scanning is finished [ 154.958290][ T6116] ubi16: empty MTD device detected [ 155.593748][ T6116] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 158.262995][ T6128] loop4: detected capacity change from 0 to 512 [ 159.007326][ T6128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.253527][ T6126] binder: 6124:6126 ioctl c0306201 0 returned -14 [ 159.257245][ T6126] binder: 6124:6126 ioctl c0306201 0 returned -14 [ 159.393787][ T6128] EXT4-fs (loop4): 1 truncate cleaned up [ 160.313261][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.327188][ T6147] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2846: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 161.893042][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.151127][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 166.634011][ T6172] loop2: detected capacity change from 0 to 40427 [ 166.646261][ T6172] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 166.646306][ T6172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 166.757272][ T6172] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.870154][ T6172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 166.870192][ T6172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.157581][ T6193] loop0: detected capacity change from 0 to 512 [ 169.559887][ T6193] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.86: invalid block [ 169.561036][ T6193] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.574971][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 169.574999][ C1] EXT4-fs (loop0): initial error at time 1786051898: ext4_get_branch:178: inode 11: block 4294967295 [ 169.575042][ C1] EXT4-fs (loop0): last error at time 1786051898: ext4_get_branch:178: inode 11: block 4294967295 [ 169.622473][ T6193] EXT4-fs (loop0): Remounting filesystem read-only [ 169.623101][ T6193] EXT4-fs (loop0): 2 truncates cleaned up [ 169.630685][ T6193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.342909][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.680521][ T6202] binder: 6198:6202 ioctl c0306201 0 returned -14 [ 178.689637][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.97'. [ 180.512475][ T6229] loop3: detected capacity change from 0 to 256 [ 181.512346][ T6234] loop2: detected capacity change from 0 to 256 [ 184.191010][ T6244] kvm [6243]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf6 [ 184.226674][ T6244] kvm [6243]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xf6 [ 184.253974][ T6244] kvm_intel: kvm [6243]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf6 [ 186.053623][ T6256] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 186.277127][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 186.352145][ T6261] loop4: detected capacity change from 0 to 512 [ 186.384870][ T6261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.437879][ T6261] EXT4-fs (loop4): 1 truncate cleaned up [ 186.469792][ T6261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.524689][ T6258] bond1: (slave geneve2): making interface the new active one [ 186.541710][ T6258] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 186.548893][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.552670][ T147] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.552888][ T3394] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.552943][ T3394] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.610847][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.907663][ T6268] random: crng reseeded on system resumption [ 186.932266][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 187.827071][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.161539][ T6279] Zero length message leads to an empty skb [ 189.296641][ T6281] loop4: detected capacity change from 0 to 512 [ 189.324320][ T6281] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.360870][ T6281] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #17: comm syz.4.109: inode has both inline data and extents flags [ 189.360934][ T6281] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 189.364153][ C0] EXT4-fs (loop4): initial error at time 1786051916: ext4_orphan_get:1399: inode 17 [ 189.364266][ C0] EXT4-fs (loop4): last error at time 1786051916: ext4_orphan_get:1399: inode 17 [ 189.396755][ T6281] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.109: couldn't read orphan inode 17 (err -117) [ 189.396854][ T6281] loop4: lost filesystem error report for type 5 error -117 [ 189.441526][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.350028][ T6279] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.109: bg 0: block 65: padding at end of block bitmap is not set [ 191.403307][ T6279] Quota error (device loop4): write_blk: dquota write failed [ 191.435292][ T6279] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 191.435402][ T6279] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.109: Failed to acquire dquot type 0 [ 191.593653][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.794289][ T6306] loop4: detected capacity change from 0 to 512 [ 192.802184][ T6306] EXT4-fs: Ignoring removed orlov option [ 192.814689][ T6306] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.833884][ T6306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 192.846954][ T6306] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.113: corrupted in-inode xattr: e_value size too large [ 192.847009][ T6306] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.861266][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 192.861292][ C0] EXT4-fs (loop4): initial error at time 1786051920: ext4_iget_extra_inode:5210: inode 15 [ 192.861324][ C0] EXT4-fs (loop4): last error at time 1786051920: ext4_iget_extra_inode:5210: inode 15 [ 192.910625][ T6306] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.113: couldn't read orphan inode 15 (err -117) [ 192.910682][ T6306] loop4: lost filesystem error report for type 5 error -117 [ 192.940238][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.150961][ T6310] loop1: detected capacity change from 0 to 32768 [ 193.232546][ T6310] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 193.494865][ T6315] EXT4-fs (loop4): shut down requested (1) [ 194.130302][ T6319] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.140667][ T6319] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 194.151534][ T6319] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.151577][ T6319] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 195.669527][ T5625] ocfs2: Unmounting device (7,1) on (node local) [ 195.671370][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.259388][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 197.664953][ T6339] loop4: detected capacity change from 0 to 1024 [ 198.878819][ T5632] Bluetooth: hci2: unexpected event for opcode 0x6b2f [ 200.742660][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.742764][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.017039][ T6367] virtio-fs: tag not found [ 207.362364][ T6382] process 'syz.4.134' launched './file0' with NULL argv: empty string added [ 209.800021][ T5745] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 209.982054][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 210.619688][ T5745] usb 4-1: device descriptor read/all, error -71 [ 216.004322][ T6425] loop3: detected capacity change from 0 to 8 [ 216.459232][ T6428] loop4: detected capacity change from 0 to 512 [ 216.541919][ T6428] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.145: iget: bad i_size value: 38620345925642 [ 216.542016][ T6428] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.544874][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 216.544907][ C0] EXT4-fs (loop4): initial error at time 1786051942: ext4_orphan_get:1399: inode 15 [ 216.544969][ C0] EXT4-fs (loop4): last error at time 1786051942: ext4_orphan_get:1399: inode 15 [ 216.550931][ T6428] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.145: couldn't read orphan inode 15 (err -117) [ 216.551026][ T6428] loop4: lost filesystem error report for type 5 error -117 [ 216.578381][ T6428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.169684][ T6428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.145: bg 0: block 5: invalid block bitmap [ 217.185354][ T6428] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 217.185391][ T6428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.185391][ T6428] [ 217.185407][ T6428] EXT4-fs (loop4): Total free blocks count 0 [ 217.185420][ T6428] EXT4-fs (loop4): Free/Dirty block details [ 217.185457][ T6428] EXT4-fs (loop4): free_blocks=0 [ 217.185488][ T6428] EXT4-fs (loop4): dirty_blocks=3204 [ 217.185503][ T6428] EXT4-fs (loop4): Block reservation details [ 217.185517][ T6428] EXT4-fs (loop4): i_reserved_data_blocks=3204 [ 218.829167][ T6441] loop1: detected capacity change from 0 to 32768 [ 218.837660][ T6441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.147 (6441) [ 218.856730][ T6441] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.856782][ T6441] BTRFS info (device loop1): using sha256 checksum algorithm [ 218.968670][ T6441] BTRFS info (device loop1): enabling ssd optimizations [ 218.968722][ T6441] BTRFS info (device loop1): turning on sync discard [ 218.968755][ T6441] BTRFS info (device loop1): enabling free space tree [ 219.235544][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.543066][ T31] audit: type=1800 audit(1786051945.023:2): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 220.414589][ T6462] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.150'. [ 220.426213][ T6462] veth0_to_bond: default FDB implementation only supports local addresses [ 222.009945][ T6469] loop3: detected capacity change from 0 to 32768 [ 222.378265][ T6469] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.152 (6469) [ 222.408307][ T6469] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.408383][ T6469] BTRFS info (device loop3 state S): using blake2b checksum algorithm [ 222.421513][ T5625] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.527027][ T156] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xbd4b976cd9fa1814a05461e3a8d6527e6af0699630a7a870b913a48450669c6b level 0, ignored [ 222.564996][ T6469] BTRFS warning (device loop3 state ES): devid 0 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 222.574829][ T156] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xdcb7575773209a357189e5b2f3b8fd71b0d15f18ca4e677a36d2538f2b7693d1 level 0, ignored [ 222.577161][ T3375] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x401afd31dc190f42243ccb8f3c46dd862cf2884305920dd2d03d401e95eb4ccd level 0, ignored [ 222.593530][ T12] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored [ 222.594211][ T12] BTRFS error (device loop3 state ECS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1 [ 222.659415][ T156] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x03f37032b0b529a92cc2d9b40919dda221d62f8bc175d07bdd8abd18d59851fb level 0, ignored [ 222.665008][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 222.941148][ T5977] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xc8acb2220dd26cbeaf7e61def41ecb1d135feabf0cb66d6d38ec8a1356a8465c level 0, ignored [ 222.941517][ T6469] BTRFS info (device loop3 state ECS): allowing degraded mounts [ 222.941555][ T6469] BTRFS info (device loop3 state ECS): enabling ssd optimizations [ 222.941579][ T6469] BTRFS info (device loop3 state ECS): using spread ssd allocation scheme [ 222.941601][ T6469] BTRFS info (device loop3 state ECS): turning off barriers [ 222.941622][ T6469] BTRFS info (device loop3 state ECS): disabling log replay at mount time [ 222.941644][ T6469] BTRFS info (device loop3 state ECS): enabling free space tree [ 222.941667][ T6469] BTRFS info (device loop3 state ECS): trying to use backup root at mount time [ 222.941689][ T6469] BTRFS info (device loop3 state ECS): ignoring bad roots [ 222.941710][ T6469] BTRFS info (device loop3 state ECS): ignoring data csums [ 222.941731][ T6469] BTRFS info (device loop3 state ECS): ignoring meta csums [ 222.941753][ T6469] BTRFS info (device loop3 state ECS): ignoring unknown super block flags [ 222.941775][ T6469] BTRFS info (device loop3 state ECS): force zlib compression, level 3 [ 222.941800][ T6469] BTRFS info (device loop3 state ECS): max_inline set to 0 [ 223.687301][ T5631] BTRFS info (device loop3 state ECS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 224.299376][ T6499] loop4: detected capacity change from 0 to 256 [ 225.037278][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 225.045928][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 225.046035][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 225.052281][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 225.058490][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 232.318439][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e25c00: rx timeout, send abort [ 232.327402][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029e25c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.331453][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032229400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.350353][ T6537] loop0: detected capacity change from 0 to 1024 [ 233.688684][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032229000: rx timeout, send abort [ 233.690702][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032229000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.691461][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803222a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.892321][ T6554] loop0: detected capacity change from 0 to 512 [ 235.902220][ T6554] EXT4-fs: Ignoring removed orlov option [ 235.959724][ T6554] EXT4-fs (loop0): Test dummy encryption mode enabled [ 235.967588][ T6554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.198347][ T6554] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.168: bad orphan inode 16 [ 236.198450][ T6554] loop0: lost filesystem error report for type 5 error -117 [ 236.211987][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 236.212012][ C1] EXT4-fs (loop0): initial error at time 1786051960: ext4_orphan_get:1425 [ 236.212038][ C1] EXT4-fs (loop0): last error at time 1786051960: ext4_orphan_get:1425 [ 236.321167][ T6554] ext4_test_bit(bit=15, block=4) = 0 [ 236.321271][ T6554] EXT4-fs (loop0): 1 orphan inode deleted [ 236.358387][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.443646][ T6554] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 236.446562][ T6554] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.168: reserved inode found cleared - inode=9 [ 236.928896][ T6553] loop2: detected capacity change from 0 to 2048 [ 237.186401][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.269913][ T6560] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.018313][ T6553] syz.2.170: attempt to access beyond end of device [ 239.018313][ T6553] loop2: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048 [ 239.036588][ T6553] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 240.333709][ T6575] loop4: detected capacity change from 0 to 512 [ 240.387335][ T6575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 240.461870][ T6575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.489325][ T6575] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.543681][ T6581] misc userio: Invalid payload size [ 241.376213][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.466935][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.482618][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.491413][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.503238][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.511994][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.310828][ T5718] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 244.168383][ T6604] 9pnet_fd: p9_fd_create_tcp (6604): problem connecting socket to 127.0.0.1 [ 244.537990][ T5628] Bluetooth: hci5: command tx timeout [ 246.098292][ T5718] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 246.180201][ T5718] usb 5-1: unable to read config index 0 descriptor/all [ 246.180275][ T5718] usb 5-1: can't read configurations, error -71 [ 246.465739][ T6615] loop0: detected capacity change from 0 to 8 [ 246.745874][ T5628] Bluetooth: hci5: command tx timeout [ 246.996539][ T6617] loop4: detected capacity change from 0 to 512 [ 247.012305][ T6617] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.013070][ T6617] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 247.176087][ T6617] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 247.189220][ T6617] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 247.189527][ T6617] System zones: 0-2, 18-18, 34-35 [ 247.204943][ T6617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.221901][ T6617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.503426][ T6612] input: syz1 as /devices/virtual/input/input5 [ 249.164864][ T5628] Bluetooth: hci5: command tx timeout [ 250.542738][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.326025][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.363329][ T5628] Bluetooth: hci5: command tx timeout [ 251.436733][ T6642] loop4: detected capacity change from 0 to 128 [ 251.822280][ T6647] loop0: detected capacity change from 0 to 40427 [ 251.840043][ T6647] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 251.840090][ T6647] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 251.859831][ T6647] F2FS-fs (loop0): invalid crc value [ 251.955081][ T6641] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 251.955117][ T6641] FAT-fs (loop4): Filesystem has been set read-only [ 251.974518][ T6647] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.991334][ T6649] syz.1.182 uses obsolete (PF_INET,SOCK_PACKET) [ 251.998759][ T6647] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 251.998790][ T6647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.191041][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.818137][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.066176][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.326935][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 254.382683][ T6664] netlink: 92 bytes leftover after parsing attributes in process `syz.1.191'. [ 254.393311][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 255.307124][ T6672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.194'. [ 259.167929][ T13] bridge_slave_1: left allmulticast mode [ 259.168072][ T13] bridge_slave_1: left promiscuous mode [ 259.174811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.951786][ T13] bridge_slave_0: left allmulticast mode [ 259.980926][ T13] bridge_slave_0: left promiscuous mode [ 259.987275][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.984746][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.198848][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 261.216082][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.538464][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.538524][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.568544][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.568600][ T10] usb 5-1: Product: syz [ 261.568616][ T10] usb 5-1: Manufacturer: syz [ 261.568631][ T10] usb 5-1: SerialNumber: syz [ 262.475623][ T10] usb 5-1: 0:2 : does not exist [ 262.485952][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 264.693403][ T10] usb 5-1: USB disconnect, device number 4 [ 265.773031][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.836470][ T6735] loop2: detected capacity change from 0 to 512 [ 265.853051][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.888465][ T13] bond0 (unregistering): Released all slaves [ 265.955970][ T6735] EXT4-fs error (device loop2): __ext4_fill_super:5621: inode #2: comm syz.2.207: inode has both inline data and extents flags [ 266.005103][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.022780][ T6735] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 266.025262][ T6735] EXT4-fs (loop2): get root inode failed [ 266.025302][ T6735] EXT4-fs (loop2): mount failed [ 266.025633][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 266.025654][ C0] EXT4-fs (loop2): initial error at time 1786051988: __ext4_fill_super:5621: inode 2 [ 266.025691][ C0] EXT4-fs (loop2): last error at time 1786051988: __ext4_fill_super:5621: inode 2 [ 266.092753][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 266.419025][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.427043][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.852747][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.853020][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.854855][ T6586] bridge_slave_0: entered allmulticast mode [ 267.868218][ T6586] bridge_slave_0: entered promiscuous mode [ 267.889061][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.890058][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.893256][ T6586] bridge_slave_1: entered allmulticast mode [ 267.924878][ T6586] bridge_slave_1: entered promiscuous mode [ 268.024738][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.129687][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.133376][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.048005][ T6586] team0: Port device team_slave_0 added [ 269.124084][ T6586] team0: Port device team_slave_1 added [ 269.312590][ T6757] loop2: detected capacity change from 0 to 4096 [ 271.346426][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 271.764794][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.764834][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.764862][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.826230][ T6762] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 271.833699][ T6762] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 271.833787][ T6762] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 271.855239][ T6757] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 271.897238][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.897308][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.897353][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.198143][ T6757] ntfs3(loop2): Failed to load $Extend (-22). [ 272.198201][ T6757] ntfs3(loop2): Failed to initialize $Extend. [ 272.461733][ T6782] loop1: detected capacity change from 0 to 1024 [ 272.562706][ T6586] hsr_slave_0: entered promiscuous mode [ 272.601238][ T6778] loop0: detected capacity change from 0 to 32768 [ 272.609240][ T6778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.213 (6778) [ 272.624689][ T6586] hsr_slave_1: entered promiscuous mode [ 272.625845][ T6586] debugfs: 'hsr0' already exists in 'hsr' [ 272.625908][ T6586] Cannot create hsr debugfs directory [ 272.647675][ T6778] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.647730][ T6778] BTRFS info (device loop0): using sha256 checksum algorithm [ 272.820101][ T6778] BTRFS info (device loop0): enabling ssd optimizations [ 272.820149][ T6778] BTRFS info (device loop0): turning on sync discard [ 272.820181][ T6778] BTRFS info (device loop0): enabling free space tree [ 273.460956][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 273.602647][ T5626] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.806206][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 273.807029][ T5820] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 273.814176][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.814589][ T5820] usb 3-1: Product: syz [ 273.814785][ T5820] usb 3-1: Manufacturer: syz [ 273.814807][ T5820] usb 3-1: SerialNumber: syz [ 273.825286][ T5820] usb 3-1: config 0 descriptor?? [ 273.833331][ T5820] usb 3-1: selecting invalid altsetting 1 [ 273.833362][ T5820] technisat-usb2: could not set alternate setting to 0 [ 274.653216][ T5820] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 274.666646][ T5820] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 274.678607][ T5820] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 275.591146][ T13] hsr_slave_0: left promiscuous mode [ 275.619659][ T13] hsr_slave_1: left promiscuous mode [ 275.626814][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.626875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.654658][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.654708][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.226000][ T6827] loop4: detected capacity change from 0 to 40427 [ 276.540071][ T6827] F2FS-fs (loop4): invalid crc value [ 276.815155][ T13] veth1_macvtap: left promiscuous mode [ 276.815253][ T13] veth0_macvtap: left promiscuous mode [ 276.815397][ T13] veth1_vlan: left promiscuous mode [ 276.815562][ T13] veth0_vlan: left promiscuous mode [ 277.088573][ T6827] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 277.091490][ T6827] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 277.091511][ T6827] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 277.091530][ T6827] F2FS-fs (loop4): Start checkpoint disabled! [ 277.164399][ T6827] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 277.172555][ T6827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 277.622451][ T6846] syz.4.220: attempt to access beyond end of device [ 277.622451][ T6846] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 279.750690][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 280.395033][ T1119] kworker/u8:9: attempt to access beyond end of device [ 280.395033][ T1119] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.410058][ T1119] CPU: 1 UID: 0 PID: 1119 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 280.410090][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.410105][ T1119] Workqueue: writeback wb_workfn (flush-7:4) [ 280.410152][ T1119] Call Trace: [ 280.410161][ T1119] [ 280.410170][ T1119] dump_stack_lvl+0xe8/0x150 [ 280.410206][ T1119] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 280.410240][ T1119] f2fs_write_end_io+0x1215/0x16f0 [ 280.410279][ T1119] ? blkg_put+0x22/0x240 [ 280.410324][ T1119] __submit_merged_bio+0x258/0x6a0 [ 280.410351][ T1119] ? rcu_is_watching+0x15/0xb0 [ 280.410387][ T1119] __submit_merged_write_cond+0x3c9/0x4e0 [ 280.410424][ T1119] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 280.410478][ T1119] f2fs_write_data_pages+0x2a27/0x36f0 [ 280.410549][ T1119] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 280.410595][ T1119] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 280.410672][ T1119] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 280.410721][ T1119] ? __lock_acquire+0x6df/0x2e50 [ 280.410773][ T1119] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 280.410797][ T1119] ? f2fs_update_inode+0x1394/0x25c0 [ 280.410821][ T1119] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 280.410862][ T1119] do_writepages+0x338/0x560 [ 280.410891][ T1119] ? __lock_acquire+0x6df/0x2e50 [ 280.410935][ T1119] ? reacquire_held_locks+0x117/0x1a0 [ 280.410958][ T1119] ? writeback_sb_inodes+0x450/0x1b00 [ 280.410997][ T1119] __writeback_single_inode+0x136/0x1220 [ 280.411033][ T1119] ? do_raw_spin_unlock+0xf5/0x210 [ 280.411068][ T1119] writeback_sb_inodes+0x9de/0x1b00 [ 280.411098][ T1119] ? __lock_acquire+0x6df/0x2e50 [ 280.411138][ T1119] ? __lock_acquire+0x6df/0x2e50 [ 280.411179][ T1119] ? __lock_acquire+0x6df/0x2e50 [ 280.411221][ T1119] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 280.411300][ T1119] ? rcu_is_watching+0x15/0xb0 [ 280.411325][ T1119] ? queue_io+0x2d3/0x470 [ 280.411362][ T1119] wb_writeback+0x41c/0xad0 [ 280.411397][ T1119] ? queue_io+0x2a1/0x470 [ 280.411435][ T1119] ? __pfx_wb_writeback+0x10/0x10 [ 280.411464][ T1119] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.411511][ T1119] wb_workfn+0x431/0x10f0 [ 280.411559][ T1119] ? __pfx_wb_workfn+0x10/0x10 [ 280.411587][ T1119] ? rcu_is_watching+0x15/0xb0 [ 280.411612][ T1119] ? trace_hrtimer_start+0x82/0x200 [ 280.411649][ T1119] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.411688][ T1119] ? lock_acquire+0x115/0x350 [ 280.411731][ T1119] ? rcu_is_watching+0x15/0xb0 [ 280.411757][ T1119] ? process_scheduled_works+0x97e/0x1630 [ 280.411786][ T1119] process_scheduled_works+0xc4e/0x1630 [ 280.411856][ T1119] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.411892][ T1119] ? assign_work+0x3cf/0x5d0 [ 280.411925][ T1119] worker_thread+0xa47/0xfb0 [ 280.411985][ T1119] kthread+0x388/0x470 [ 280.412006][ T1119] ? __pfx_worker_thread+0x10/0x10 [ 280.412032][ T1119] ? __pfx_kthread+0x10/0x10 [ 280.412054][ T1119] ret_from_fork+0x514/0xb70 [ 280.412092][ T1119] ? __pfx_ret_from_fork+0x10/0x10 [ 280.412126][ T1119] ? __switch_to+0xc89/0x1420 [ 280.412160][ T1119] ? __pfx_kthread+0x10/0x10 [ 280.412182][ T1119] ret_from_fork_asm+0x1a/0x30 [ 280.412234][ T1119] [ 280.583910][ T1119] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 283.129053][ T13] team0 (unregistering): Port device team_slave_1 removed [ 283.196482][ T13] team0 (unregistering): Port device team_slave_0 removed [ 283.566780][ T6868] loop4: detected capacity change from 0 to 8 [ 285.291293][ T6875] loop2: detected capacity change from 0 to 32768 [ 285.347535][ T6875] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 286.414523][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 286.556875][ T5624] ocfs2: Unmounting device (7,2) on (node local) [ 288.522320][ T5628] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 289.253874][ T6894] loop1: detected capacity change from 0 to 1024 [ 289.350308][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.252389][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.741595][ T6586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.806038][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.814076][ T6586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.872791][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.906891][ T6586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.060163][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.276394][ T6586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.306253][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.602546][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 298.257836][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.389367][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.486346][ T6968] loop0: detected capacity change from 0 to 512 [ 298.513765][ T6968] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 298.515263][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.554083][ T6968] EXT4-fs (loop0): 1 truncate cleaned up [ 298.563039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.563193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.587184][ T6968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.651041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.651181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.208507][ T6586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.656053][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 299.666365][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.366677][ T6991] loop0: detected capacity change from 0 to 256 [ 300.556677][ T6991] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 303.989812][ T7009] loop2: detected capacity change from 0 to 40427 [ 304.039247][ T7009] F2FS-fs (loop2): invalid crc value [ 304.120688][ T7009] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 304.135078][ T7009] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 304.135124][ T7009] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 304.135152][ T7009] F2FS-fs (loop2): Start checkpoint disabled! [ 304.167564][ T7009] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 304.176776][ T7009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 304.583175][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.246'. [ 304.583290][ T7023] netlink: 43 bytes leftover after parsing attributes in process `syz.1.246'. [ 304.583371][ T7023] netlink: 'syz.1.246': attribute type 6 has an invalid length. [ 304.583435][ T7023] netlink: 'syz.1.246': attribute type 5 has an invalid length. [ 304.584704][ T7023] netlink: 43 bytes leftover after parsing attributes in process `syz.1.246'. [ 305.509971][ T3338] kworker/u8:10: attempt to access beyond end of device [ 305.509971][ T3338] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 305.510129][ T3338] CPU: 1 UID: 0 PID: 3338 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 305.510195][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.510247][ T3338] Workqueue: writeback wb_workfn (flush-7:2) [ 305.510405][ T3338] Call Trace: [ 305.510427][ T3338] [ 305.510444][ T3338] dump_stack_lvl+0xe8/0x150 [ 305.510541][ T3338] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 305.510635][ T3338] f2fs_write_end_io+0x1215/0x16f0 [ 305.510778][ T3338] ? blkg_put+0x22/0x240 [ 305.510903][ T3338] __submit_merged_bio+0x258/0x6a0 [ 305.510975][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.511060][ T3338] __submit_merged_write_cond+0x3c9/0x4e0 [ 305.511151][ T3338] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 305.511280][ T3338] f2fs_write_data_pages+0x2a27/0x36f0 [ 305.511485][ T3338] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 305.511617][ T3338] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 305.511911][ T3338] ? __lock_acquire+0x6df/0x2e50 [ 305.512068][ T3338] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 305.512148][ T3338] do_writepages+0x338/0x560 [ 305.512221][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.512316][ T3338] ? reacquire_held_locks+0x117/0x1a0 [ 305.512381][ T3338] ? writeback_sb_inodes+0x450/0x1b00 [ 305.512487][ T3338] __writeback_single_inode+0x136/0x1220 [ 305.512584][ T3338] ? do_raw_spin_unlock+0xf5/0x210 [ 305.512682][ T3338] writeback_sb_inodes+0x9de/0x1b00 [ 305.512818][ T3338] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 305.513066][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.513138][ T3338] ? queue_io+0x2d3/0x470 [ 305.513244][ T3338] wb_writeback+0x41c/0xad0 [ 305.513338][ T3338] ? queue_io+0x2a1/0x470 [ 305.513443][ T3338] ? __pfx_wb_writeback+0x10/0x10 [ 305.513537][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.513675][ T3338] wb_workfn+0x431/0x10f0 [ 305.513809][ T3338] ? __pfx_wb_workfn+0x10/0x10 [ 305.513886][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.513952][ T3338] ? trace_hrtimer_start+0x82/0x200 [ 305.514055][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.514164][ T3338] ? lock_acquire+0x115/0x350 [ 305.514287][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.514361][ T3338] ? process_scheduled_works+0x97e/0x1630 [ 305.514455][ T3338] process_scheduled_works+0xc4e/0x1630 [ 305.514632][ T3338] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.514735][ T3338] ? assign_work+0x3cf/0x5d0 [ 305.514829][ T3338] worker_thread+0xa47/0xfb0 [ 305.514997][ T3338] kthread+0x388/0x470 [ 305.515052][ T3338] ? __pfx_worker_thread+0x10/0x10 [ 305.515123][ T3338] ? __pfx_kthread+0x10/0x10 [ 305.515180][ T3338] ret_from_fork+0x514/0xb70 [ 305.515277][ T3338] ? __pfx_ret_from_fork+0x10/0x10 [ 305.515372][ T3338] ? __switch_to+0xc89/0x1420 [ 305.515460][ T3338] ? __pfx_kthread+0x10/0x10 [ 305.515524][ T3338] ret_from_fork_asm+0x1a/0x30 [ 305.515681][ T3338] [ 305.554955][ T3338] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 305.555808][ T3338] CPU: 1 UID: 0 PID: 3338 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 305.555906][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.555947][ T3338] Workqueue: writeback wb_workfn (flush-7:2) [ 305.556044][ T3338] Call Trace: [ 305.556066][ T3338] [ 305.556088][ T3338] dump_stack_lvl+0xe8/0x150 [ 305.556174][ T3338] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 305.556265][ T3338] f2fs_write_end_io+0x1215/0x16f0 [ 305.556412][ T3338] __submit_merged_bio+0x258/0x6a0 [ 305.556477][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.556560][ T3338] __submit_merged_write_cond+0x3c9/0x4e0 [ 305.556665][ T3338] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 305.556805][ T3338] f2fs_write_data_pages+0x2a27/0x36f0 [ 305.556985][ T3338] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 305.557101][ T3338] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 305.557379][ T3338] ? __lock_acquire+0x6df/0x2e50 [ 305.557524][ T3338] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 305.557606][ T3338] do_writepages+0x338/0x560 [ 305.557690][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.557777][ T3338] ? reacquire_held_locks+0x117/0x1a0 [ 305.557834][ T3338] ? writeback_sb_inodes+0x450/0x1b00 [ 305.557937][ T3338] __writeback_single_inode+0x136/0x1220 [ 305.558030][ T3338] ? do_raw_spin_unlock+0xf5/0x210 [ 305.558121][ T3338] writeback_sb_inodes+0x9de/0x1b00 [ 305.558280][ T3338] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 305.558479][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.558541][ T3338] ? queue_io+0x2d3/0x470 [ 305.558634][ T3338] wb_writeback+0x41c/0xad0 [ 305.558693][ T3338] ? queue_io+0x2a1/0x470 [ 305.558731][ T3338] ? __pfx_wb_writeback+0x10/0x10 [ 305.558759][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.558803][ T3338] wb_workfn+0x431/0x10f0 [ 305.558867][ T3338] ? __pfx_wb_workfn+0x10/0x10 [ 305.558966][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.559032][ T3338] ? trace_hrtimer_start+0x82/0x200 [ 305.559135][ T3338] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.559226][ T3338] ? lock_acquire+0x115/0x350 [ 305.559343][ T3338] ? rcu_is_watching+0x15/0xb0 [ 305.559415][ T3338] ? process_scheduled_works+0x97e/0x1630 [ 305.559490][ T3338] process_scheduled_works+0xc4e/0x1630 [ 305.559658][ T3338] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.559749][ T3338] ? assign_work+0x3cf/0x5d0 [ 305.559834][ T3338] worker_thread+0xa47/0xfb0 [ 305.559984][ T3338] kthread+0x388/0x470 [ 305.560037][ T3338] ? __pfx_worker_thread+0x10/0x10 [ 305.560111][ T3338] ? __pfx_kthread+0x10/0x10 [ 305.560170][ T3338] ret_from_fork+0x514/0xb70 [ 305.560270][ T3338] ? __pfx_ret_from_fork+0x10/0x10 [ 305.560373][ T3338] ? __switch_to+0xc89/0x1420 [ 305.560509][ T3338] ? __pfx_kthread+0x10/0x10 [ 305.560571][ T3338] ret_from_fork_asm+0x1a/0x30 [ 305.560711][ T3338] [ 305.635710][ T3338] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 305.852049][ T5806] loop2: lost filesystem error report for type 5 error -108 [ 306.478907][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.494044][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.504469][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.521212][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.530620][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.074988][ T7039] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 307.912870][ T7041] loop2: detected capacity change from 0 to 32768 [ 307.920525][ T7041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.254 (7041) [ 307.945294][ T7041] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.945430][ T7041] BTRFS info (device loop2): using sha256 checksum algorithm [ 308.105750][ T7041] BTRFS info (device loop2): enabling ssd optimizations [ 308.105803][ T7041] BTRFS info (device loop2): turning on sync discard [ 308.105854][ T7041] BTRFS info (device loop2): enabling free space tree [ 310.108404][ T5628] Bluetooth: hci4: command tx timeout [ 311.725555][ T5624] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.814394][ T7075] loop4: detected capacity change from 0 to 128 [ 311.844878][ T7075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 311.943978][ T7075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.639915][ T5628] Bluetooth: hci4: command tx timeout [ 316.448732][ T5628] Bluetooth: hci4: command tx timeout [ 318.670385][ T5632] Bluetooth: hci4: command tx timeout [ 319.667684][ T7113] loop4: detected capacity change from 0 to 32768 [ 319.744997][ T7113] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 320.902603][ T5630] ocfs2: Unmounting device (7,4) on (node local) [ 321.102664][ T3338] bridge_slave_1: left allmulticast mode [ 321.108584][ T3338] bridge_slave_1: left promiscuous mode [ 321.115118][ T3338] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.160259][ T3338] bridge_slave_0: left allmulticast mode [ 321.173459][ T3338] bridge_slave_0: left promiscuous mode [ 321.177824][ T3338] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.435380][ T7144] loop0: detected capacity change from 0 to 128 [ 321.999966][ T31] audit: type=1804 audit(1786052041.017:3): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.269" name="/newroot/60/file1/file0" dev="loop0" ino=1048612 res=1 errno=0 [ 322.095701][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 322.747402][ T3338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.793891][ T3338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.826812][ T3338] bond0 (unregistering): Released all slaves [ 324.738868][ T3338] hsr_slave_0: left promiscuous mode [ 324.748720][ T3338] hsr_slave_1: left promiscuous mode [ 324.758936][ T3338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.767100][ T3338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.805545][ T1119] kworker/u8:9: attempt to access beyond end of device [ 325.805545][ T1119] loop0: rw=1, sector=490, nr_sectors = 127 limit=128 [ 328.082874][ T3338] team0 (unregistering): Port device team_slave_1 removed [ 328.202796][ T3338] team0 (unregistering): Port device team_slave_0 removed [ 330.084026][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.097932][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.098136][ T7030] bridge_slave_0: entered allmulticast mode [ 330.139349][ T7030] bridge_slave_0: entered promiscuous mode [ 330.195640][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.196060][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.196537][ T7030] bridge_slave_1: entered allmulticast mode [ 330.222158][ T7030] bridge_slave_1: entered promiscuous mode [ 330.417865][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 330.902694][ T7030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.938891][ T7030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.165851][ T7030] team0: Port device team_slave_0 added [ 331.188585][ T7030] team0: Port device team_slave_1 added [ 331.503857][ T7205] syz.1.273 (7205): drop_caches: 2 [ 331.540544][ T7216] loop0: detected capacity change from 0 to 16 [ 331.590973][ T7216] erofs (device loop0): mounted with root inode @ nid 36. [ 331.878614][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.878679][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.878706][ T7030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.088166][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.088258][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.110914][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.111002][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.111031][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.769386][ T7030] hsr_slave_0: entered promiscuous mode [ 333.776692][ T7030] hsr_slave_1: entered promiscuous mode [ 338.872774][ T7258] loop2: detected capacity change from 0 to 2048 [ 339.392642][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 339.528896][ T7258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.865711][ T7251] loop0: detected capacity change from 0 to 128 [ 340.154186][ T7251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.162047][ T7251] ext4 filesystem being mounted at /67/file1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.544089][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.757337][ T5745] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 340.806237][ T7277] loop4: detected capacity change from 0 to 512 [ 340.813689][ T7277] EXT4-fs: Ignoring removed orlov option [ 340.901170][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.901406][ T7277] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.930550][ T5745] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 340.965750][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.965808][ T5745] usb 2-1: Product: syz [ 340.965824][ T5745] usb 2-1: Manufacturer: syz [ 340.965840][ T5745] usb 2-1: SerialNumber: syz [ 341.876182][ T7271] loop1: detected capacity change from 0 to 256 [ 342.008939][ T7271] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 342.008997][ T7271] FAT-fs (loop1): Filesystem has been set read-only [ 342.036057][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.049404][ T5745] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 342.378714][ T7030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.418400][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.420075][ T7030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.439513][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.442618][ T7030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.460715][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.465243][ T7030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.568797][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.222672][ T5820] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 343.241338][ T5820] usb 3-1: USB disconnect, device number 2 [ 343.538274][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.614341][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.720083][ T7317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.914301][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.914464][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.342599][ T5639] usb 2-1: USB disconnect, device number 2 [ 344.436088][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.436334][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.475598][ T5639] usblp0: removed [ 344.528070][ T5820] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 344.701156][ T5820] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.744337][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.744412][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.769691][ T5820] usb 3-1: config 0 descriptor?? [ 344.809507][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 346.175118][ T5820] pwc: send_video_command error -71 [ 346.175245][ T5820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 346.180478][ T5820] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 346.228918][ T5820] usb 3-1: USB disconnect, device number 3 [ 346.735043][ T7344] netlink: 260 bytes leftover after parsing attributes in process `syz.2.299'. [ 347.647234][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 348.564943][ T7030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.116308][ T7381] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 349.491346][ T7030] veth0_vlan: entered promiscuous mode [ 349.525964][ T7030] veth1_vlan: entered promiscuous mode [ 349.700237][ T7030] veth0_macvtap: entered promiscuous mode [ 349.757216][ T7030] veth1_macvtap: entered promiscuous mode [ 349.870150][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.122607][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.472074][ T3375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.515921][ T1106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.516110][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.529661][ T1119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.185987][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.186027][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.547531][ T7407] loop2: detected capacity change from 0 to 512 [ 352.619919][ T7407] EXT4-fs (loop2): orphan cleanup on readonly fs [ 352.628546][ T7407] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1033: inode #11: comm syz.2.311: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 352.630455][ T7407] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 352.641322][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 352.641366][ C1] EXT4-fs (loop2): initial error at time 1786052069: ext4_xattr_inode_update_ref:1033: inode 11 [ 352.641412][ C1] EXT4-fs (loop2): last error at time 1786052069: ext4_xattr_inode_update_ref:1033: inode 11 [ 352.682308][ T7407] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1220: inode #11: comm syz.2.311: ea_inode dec ref err=-117 [ 352.718917][ T7407] EXT4-fs (loop2): 1 orphan inode deleted [ 352.784143][ T7407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 352.905067][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 353.114918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.114969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.313828][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 353.876293][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.669239][ T7429] loop2: detected capacity change from 0 to 256 [ 355.751564][ T5718] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 355.923985][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 356.014378][ T5718] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.248113][ T5718] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.261498][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 356.261707][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.388560][ T1106] IPVS: starting estimator thread 0... [ 356.446197][ T5718] usb 6-1: config 0 descriptor?? [ 356.619536][ T7437] IPVS: using max 27 ests per chain, 64800 per kthread [ 358.064566][ T7427] openvswitch: netlink: Tunnel attr 169 out of range max 16 [ 358.987319][ T7427] input: syz1 as /devices/virtual/input/input6 [ 359.387798][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.393435][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.394767][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.395939][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.397207][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.813285][ T5632] Bluetooth: hci5: command tx timeout [ 362.306117][ T5718] usbhid 6-1:0.0: can't add hid device: -32 [ 362.306283][ T5718] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 362.556839][ T5745] usb 6-1: USB disconnect, device number 2 [ 362.873664][ T7466] syz.5.325 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 362.893208][ T7466] ubi31: attaching mtd0 [ 362.897098][ T7466] ubi31: scanning is finished [ 363.677792][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 364.191221][ T5632] Bluetooth: hci5: command tx timeout [ 364.352455][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.352513][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 364.530945][ T7466] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 366.202690][ T7489] loop5: detected capacity change from 0 to 40427 [ 366.269476][ T7489] F2FS-fs (loop5): invalid crc value [ 366.405772][ T5632] Bluetooth: hci5: command tx timeout [ 366.520309][ T7489] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 366.538044][ T7489] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 366.538123][ T7489] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 366.538190][ T7489] F2FS-fs (loop5): Start checkpoint disabled! [ 366.701043][ T7489] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 366.725896][ T7489] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 366.799513][ T7496] loop2: detected capacity change from 0 to 128 [ 367.157511][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.157576][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.538880][ T7493] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 367.538915][ T7493] FAT-fs (loop2): Filesystem has been set read-only [ 368.186729][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.198896][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.294608][ T147] kworker/u8:6: attempt to access beyond end of device [ 368.294608][ T147] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 368.294888][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 368.295016][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.295059][ T147] Workqueue: writeback wb_workfn (flush-7:5) [ 368.295168][ T147] Call Trace: [ 368.295200][ T147] [ 368.295224][ T147] dump_stack_lvl+0xe8/0x150 [ 368.295317][ T147] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 368.295483][ T147] f2fs_write_end_io+0x1215/0x16f0 [ 368.295624][ T147] ? blkg_put+0x22/0x240 [ 368.295779][ T147] __submit_merged_bio+0x258/0x6a0 [ 368.295853][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.295938][ T147] __submit_merged_write_cond+0x3c9/0x4e0 [ 368.296042][ T147] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 368.296187][ T147] f2fs_write_data_pages+0x2a27/0x36f0 [ 368.296414][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.296549][ T147] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 368.296848][ T147] ? __lock_acquire+0x6df/0x2e50 [ 368.297014][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.297092][ T147] do_writepages+0x338/0x560 [ 368.297166][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.297262][ T147] ? reacquire_held_locks+0x117/0x1a0 [ 368.297326][ T147] ? writeback_sb_inodes+0x450/0x1b00 [ 368.297431][ T147] __writeback_single_inode+0x136/0x1220 [ 368.297536][ T147] ? do_raw_spin_unlock+0xf5/0x210 [ 368.297638][ T147] writeback_sb_inodes+0x9de/0x1b00 [ 368.297822][ T147] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 368.298050][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.298115][ T147] ? queue_io+0x2d3/0x470 [ 368.298212][ T147] wb_writeback+0x41c/0xad0 [ 368.298303][ T147] ? queue_io+0x2a1/0x470 [ 368.298409][ T147] ? __pfx_wb_writeback+0x10/0x10 [ 368.298493][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.298620][ T147] wb_workfn+0x431/0x10f0 [ 368.298751][ T147] ? __pfx_wb_workfn+0x10/0x10 [ 368.298828][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.298893][ T147] ? trace_hrtimer_start+0x82/0x200 [ 368.298993][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.299122][ T147] ? lock_acquire+0x115/0x350 [ 368.299240][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.299308][ T147] ? process_scheduled_works+0x97e/0x1630 [ 368.299382][ T147] process_scheduled_works+0xc4e/0x1630 [ 368.299557][ T147] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.299652][ T147] ? assign_work+0x3cf/0x5d0 [ 368.299739][ T147] worker_thread+0xa47/0xfb0 [ 368.299903][ T147] kthread+0x388/0x470 [ 368.299963][ T147] ? __pfx_worker_thread+0x10/0x10 [ 368.300038][ T147] ? __pfx_kthread+0x10/0x10 [ 368.300093][ T147] ret_from_fork+0x514/0xb70 [ 368.300199][ T147] ? __pfx_ret_from_fork+0x10/0x10 [ 368.300335][ T147] ? __switch_to+0xc89/0x1420 [ 368.300436][ T147] ? __pfx_kthread+0x10/0x10 [ 368.300517][ T147] ret_from_fork_asm+0x1a/0x30 [ 368.300659][ T147] [ 368.379011][ T147] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 368.379277][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 368.379405][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.379459][ T147] Workqueue: writeback wb_workfn (flush-7:5) [ 368.379567][ T147] Call Trace: [ 368.379590][ T147] [ 368.379619][ T147] dump_stack_lvl+0xe8/0x150 [ 368.379716][ T147] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 368.379811][ T147] f2fs_write_end_io+0x1215/0x16f0 [ 368.379978][ T147] __submit_merged_bio+0x258/0x6a0 [ 368.380052][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.380130][ T147] __submit_merged_write_cond+0x3c9/0x4e0 [ 368.380234][ T147] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 368.380399][ T147] f2fs_write_data_pages+0x2a27/0x36f0 [ 368.380618][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.380751][ T147] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 368.381014][ T147] ? __lock_acquire+0x6df/0x2e50 [ 368.381174][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.381262][ T147] do_writepages+0x338/0x560 [ 368.381337][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.381426][ T147] ? reacquire_held_locks+0x117/0x1a0 [ 368.381516][ T147] ? writeback_sb_inodes+0x450/0x1b00 [ 368.381621][ T147] __writeback_single_inode+0x136/0x1220 [ 368.381717][ T147] ? do_raw_spin_unlock+0xf5/0x210 [ 368.381819][ T147] writeback_sb_inodes+0x9de/0x1b00 [ 368.382006][ T147] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 368.382223][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.382295][ T147] ? queue_io+0x2d3/0x470 [ 368.382391][ T147] wb_writeback+0x41c/0xad0 [ 368.382489][ T147] ? queue_io+0x2a1/0x470 [ 368.382587][ T147] ? __pfx_wb_writeback+0x10/0x10 [ 368.382662][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.382797][ T147] wb_workfn+0x431/0x10f0 [ 368.382937][ T147] ? __pfx_wb_workfn+0x10/0x10 [ 368.383014][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.383080][ T147] ? trace_hrtimer_start+0x82/0x200 [ 368.383187][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.383310][ T147] ? lock_acquire+0x115/0x350 [ 368.383446][ T147] ? rcu_is_watching+0x15/0xb0 [ 368.383515][ T147] ? process_scheduled_works+0x97e/0x1630 [ 368.383599][ T147] process_scheduled_works+0xc4e/0x1630 [ 368.383772][ T147] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.383869][ T147] ? assign_work+0x3cf/0x5d0 [ 368.383965][ T147] worker_thread+0xa47/0xfb0 [ 368.384135][ T147] kthread+0x388/0x470 [ 368.384189][ T147] ? __pfx_worker_thread+0x10/0x10 [ 368.384254][ T147] ? __pfx_kthread+0x10/0x10 [ 368.384309][ T147] ret_from_fork+0x514/0xb70 [ 368.384413][ T147] ? __pfx_ret_from_fork+0x10/0x10 [ 368.384507][ T147] ? __switch_to+0xc89/0x1420 [ 368.384600][ T147] ? __pfx_kthread+0x10/0x10 [ 368.384662][ T147] ret_from_fork_asm+0x1a/0x30 [ 368.384817][ T147] [ 368.454769][ T147] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 368.604468][ T5632] Bluetooth: hci5: command tx timeout [ 368.951931][ T7504] loop2: detected capacity change from 0 to 1024 [ 368.964566][ T7506] loop4: detected capacity change from 0 to 4096 [ 368.979184][ T7504] EXT4-fs: Ignoring removed nobh option [ 368.979259][ T7504] EXT4-fs: Ignoring removed orlov option [ 368.998771][ T7504] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 369.090053][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.090121][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.094665][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.209963][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.614316][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.802751][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.296882][ T7538] loop1: detected capacity change from 0 to 256 [ 375.189231][ T7551] binder: 7546:7551 ioctl c0306201 200000000040 returned -14 [ 378.739286][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 378.892390][ T7541] syz.4.339 (7541): drop_caches: 2 [ 378.924157][ T13] bridge_slave_1: left allmulticast mode [ 378.924207][ T13] bridge_slave_1: left promiscuous mode [ 378.924458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.948513][ T5820] usb 6-1: device descriptor read/64, error -71 [ 378.983726][ T13] bridge_slave_0: left allmulticast mode [ 378.989172][ T13] bridge_slave_0: left promiscuous mode [ 378.989959][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.314032][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 379.429328][ T5632] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 379.864516][ T7587] loop4: detected capacity change from 0 to 128 [ 380.174749][ T7587] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 380.220850][ T7587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.421767][ T7600] loop5: detected capacity change from 0 to 764 [ 381.514865][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 382.257355][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.468075][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.483148][ T13] bond0 (unregistering): Released all slaves [ 382.593653][ T13] bond1 (unregistering): Released all slaves [ 384.122649][ T7614] loop1: detected capacity change from 0 to 128 [ 384.964270][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 384.990245][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.990370][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.990554][ T7449] bridge_slave_0: entered allmulticast mode [ 385.043070][ T7449] bridge_slave_0: entered promiscuous mode [ 385.101971][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.102116][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.112760][ T7449] bridge_slave_1: entered allmulticast mode [ 385.129160][ T7449] bridge_slave_1: entered promiscuous mode [ 386.141632][ T12] IPVS: starting estimator thread 0... [ 386.153594][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.177366][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.269977][ T7620] IPVS: using max 26 ests per chain, 62400 per kthread [ 386.352824][ T7611] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 386.352861][ T7611] FAT-fs (loop1): Filesystem has been set read-only [ 386.421728][ T7449] team0: Port device team_slave_0 added [ 386.431118][ T7449] team0: Port device team_slave_1 added [ 386.480912][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.480979][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.554183][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.588658][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.588723][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.588770][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.890627][ T7449] hsr_slave_0: entered promiscuous mode [ 387.891784][ T7449] hsr_slave_1: entered promiscuous mode [ 387.907194][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 387.907243][ T7449] Cannot create hsr debugfs directory [ 389.662264][ T7646] binder: 7642:7646 ioctl c0306201 200000000040 returned -14 [ 393.618195][ T7676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.917627][ T7679] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 394.572814][ T5632] Bluetooth: hci3: Unable to find connection for big 0x00 [ 395.009501][ T13] hsr_slave_0: left promiscuous mode [ 395.044797][ T13] hsr_slave_1: left promiscuous mode [ 395.045831][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.045886][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.071443][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.079209][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.131569][ T13] veth1_macvtap: left promiscuous mode [ 395.139546][ T13] veth0_macvtap: left promiscuous mode [ 395.151010][ T13] veth1_vlan: left promiscuous mode [ 395.156532][ T13] veth0_vlan: left promiscuous mode [ 395.178539][ T7684] loop1: detected capacity change from 0 to 2048 [ 395.263497][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.336858][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.844302][ T7704] futex_wake_op: syz.1.370 tries to shift op by 144; fix this program [ 398.003017][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.003106][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.183863][ T5632] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 402.126778][ T13] team0 (unregistering): Port device team_slave_1 removed [ 402.868012][ T7723] loop4: detected capacity change from 0 to 512 [ 403.083617][ T7723] EXT4-fs error (device loop4): __ext4_fill_super:5621: inode #2: comm syz.4.377: inode has both inline data and extents flags [ 403.083683][ T7723] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 403.093915][ T7723] EXT4-fs (loop4): get root inode failed [ 403.093989][ T7723] EXT4-fs (loop4): mount failed [ 403.101254][ T13] team0 (unregistering): Port device team_slave_0 removed [ 403.135941][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 403.136001][ C0] EXT4-fs (loop4): initial error at time 2000000019: __ext4_fill_super:5621: inode 2 [ 403.136038][ C0] EXT4-fs (loop4): last error at time 2000000019: __ext4_fill_super:5621: inode 2 [ 403.849577][ T7731] loop5: detected capacity change from 0 to 40427 [ 403.897599][ T7731] F2FS-fs (loop5): invalid crc value [ 404.062754][ T7731] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 404.076360][ T7731] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 404.076388][ T7731] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 404.076411][ T7731] F2FS-fs (loop5): Start checkpoint disabled! [ 404.139678][ T7731] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 404.147299][ T7731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 404.288491][ T59] kworker/u8:4: attempt to access beyond end of device [ 404.288491][ T59] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 404.302837][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 404.302869][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.302885][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 404.302924][ T59] Call Trace: [ 404.302932][ T59] [ 404.302942][ T59] dump_stack_lvl+0xe8/0x150 [ 404.302976][ T59] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 404.303009][ T59] f2fs_write_end_io+0x1215/0x16f0 [ 404.303045][ T59] ? blkg_put+0x22/0x240 [ 404.303089][ T59] __submit_merged_bio+0x258/0x6a0 [ 404.303116][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.303147][ T59] __submit_merged_write_cond+0x3c9/0x4e0 [ 404.303184][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 404.303245][ T59] f2fs_write_data_pages+0x2a27/0x36f0 [ 404.303316][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.303361][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 404.303457][ T59] ? __lock_acquire+0x6df/0x2e50 [ 404.303514][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.303546][ T59] do_writepages+0x338/0x560 [ 404.303574][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.303607][ T59] ? reacquire_held_locks+0x117/0x1a0 [ 404.303631][ T59] ? writeback_sb_inodes+0x450/0x1b00 [ 404.303670][ T59] __writeback_single_inode+0x136/0x1220 [ 404.303706][ T59] ? do_raw_spin_unlock+0xf5/0x210 [ 404.303741][ T59] writeback_sb_inodes+0x9de/0x1b00 [ 404.303802][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 404.303881][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.303906][ T59] ? queue_io+0x2d3/0x470 [ 404.303942][ T59] wb_writeback+0x41c/0xad0 [ 404.303977][ T59] ? queue_io+0x2a1/0x470 [ 404.304014][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 404.304044][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.304094][ T59] wb_workfn+0x431/0x10f0 [ 404.304142][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 404.304184][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.304229][ T59] ? lock_acquire+0x115/0x350 [ 404.304272][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.304298][ T59] ? process_scheduled_works+0x97e/0x1630 [ 404.304327][ T59] process_scheduled_works+0xc4e/0x1630 [ 404.304390][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 404.304425][ T59] ? assign_work+0x3cf/0x5d0 [ 404.304458][ T59] worker_thread+0xa47/0xfb0 [ 404.304502][ T59] ? __kthread_parkme+0x71/0x1f0 [ 404.304544][ T59] kthread+0x388/0x470 [ 404.304565][ T59] ? __pfx_worker_thread+0x10/0x10 [ 404.304590][ T59] ? __pfx_kthread+0x10/0x10 [ 404.304631][ T59] ret_from_fork+0x514/0xb70 [ 404.304670][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 404.304704][ T59] ? __switch_to+0xc89/0x1420 [ 404.304735][ T59] ? __pfx_kthread+0x10/0x10 [ 404.304757][ T59] ret_from_fork_asm+0x1a/0x30 [ 404.304809][ T59] [ 404.419933][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 404.420031][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 404.420055][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.420070][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 404.420109][ T59] Call Trace: [ 404.420118][ T59] [ 404.420127][ T59] dump_stack_lvl+0xe8/0x150 [ 404.420162][ T59] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 404.420196][ T59] f2fs_write_end_io+0x1215/0x16f0 [ 404.420257][ T59] __submit_merged_bio+0x258/0x6a0 [ 404.420283][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.420315][ T59] __submit_merged_write_cond+0x3c9/0x4e0 [ 404.420356][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 404.420415][ T59] f2fs_write_data_pages+0x2a27/0x36f0 [ 404.420494][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.420542][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 404.420648][ T59] ? __lock_acquire+0x6df/0x2e50 [ 404.420719][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.420752][ T59] do_writepages+0x338/0x560 [ 404.420780][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.420815][ T59] ? reacquire_held_locks+0x117/0x1a0 [ 404.420840][ T59] ? writeback_sb_inodes+0x450/0x1b00 [ 404.420880][ T59] __writeback_single_inode+0x136/0x1220 [ 404.420917][ T59] ? do_raw_spin_unlock+0xf5/0x210 [ 404.420952][ T59] writeback_sb_inodes+0x9de/0x1b00 [ 404.421018][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 404.421107][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.421133][ T59] ? queue_io+0x2d3/0x470 [ 404.421171][ T59] wb_writeback+0x41c/0xad0 [ 404.421206][ T59] ? queue_io+0x2a1/0x470 [ 404.421247][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 404.421277][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.421328][ T59] wb_workfn+0x431/0x10f0 [ 404.421383][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 404.421429][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.421470][ T59] ? lock_acquire+0x115/0x350 [ 404.421516][ T59] ? rcu_is_watching+0x15/0xb0 [ 404.421543][ T59] ? process_scheduled_works+0x97e/0x1630 [ 404.421573][ T59] process_scheduled_works+0xc4e/0x1630 [ 404.421643][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 404.421680][ T59] ? assign_work+0x3cf/0x5d0 [ 404.421722][ T59] worker_thread+0xa47/0xfb0 [ 404.421771][ T59] ? __kthread_parkme+0x71/0x1f0 [ 404.421815][ T59] kthread+0x388/0x470 [ 404.421836][ T59] ? __pfx_worker_thread+0x10/0x10 [ 404.421862][ T59] ? __pfx_kthread+0x10/0x10 [ 404.421883][ T59] ret_from_fork+0x514/0xb70 [ 404.421921][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 404.421956][ T59] ? __switch_to+0xc89/0x1420 [ 404.421990][ T59] ? __pfx_kthread+0x10/0x10 [ 404.422013][ T59] ret_from_fork_asm+0x1a/0x30 [ 404.422069][ T59] [ 404.456279][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 405.658899][ T7742] loop4: detected capacity change from 0 to 4096 [ 405.715851][ T7742] ntfs3(loop4): Failed to initialize $Secure::$SDH (-22). [ 405.719103][ T7742] ntfs3(loop4): Failed to initialize $Secure (-22). [ 406.031199][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 408.126164][ T7764] ubi16: attaching mtd0 [ 408.138768][ T7764] ubi16: scanning is finished [ 408.342828][ T7762] trusted_key: encrypted_key: insufficient parameters specified [ 408.787710][ T7766] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.790142][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.791777][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.234876][ T5632] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 409.539702][ T7764] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 410.116371][ T7780] loop1: detected capacity change from 0 to 256 [ 410.135702][ T7449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 410.775565][ T7780] vfat: Unknown parameter 'uU 鎰#M Di 9!;lN9A\>{CJdV0' [ 410.793028][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.930589][ T7449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 410.959526][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.962385][ T7449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.186317][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.197720][ T7449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.054751][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.777379][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.893403][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.931183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.931314][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.988804][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.989050][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.623535][ T7837] loop4: detected capacity change from 0 to 8 [ 420.317330][ T7836] loop1: detected capacity change from 0 to 32768 [ 420.364514][ T7836] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.396 (7836) [ 420.386322][ T7836] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 420.386485][ T7836] BTRFS info (device loop1): using sha256 checksum algorithm [ 420.982014][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 421.008776][ T7836] BTRFS info (device loop1): enabling ssd optimizations [ 421.008856][ T7836] BTRFS info (device loop1): turning on sync discard [ 421.008876][ T7836] BTRFS info (device loop1): enabling free space tree [ 423.852297][ T7881] loop2: detected capacity change from 0 to 512 [ 424.459489][ T7881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.587549][ T5625] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.641907][ T7881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.642048][ T7881] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.546937][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 425.607095][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.621232][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.639568][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.660359][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.679719][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.705550][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.113756][ T5632] Bluetooth: hci3: unexpected event for opcode 0x6b2f [ 428.032280][ T5632] Bluetooth: hci2: command tx timeout [ 430.347615][ T5632] Bluetooth: hci2: command tx timeout [ 430.580187][ T7940] loop2: detected capacity change from 0 to 4096 [ 430.954195][ T7944] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 430.963195][ T7944] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 430.963283][ T7944] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 431.604608][ T7940] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 432.571237][ T5632] Bluetooth: hci2: command tx timeout [ 433.490982][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 433.531111][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.416'. [ 434.653671][ T7911] syz.1.408 (7911): drop_caches: 2 [ 434.794622][ T5632] Bluetooth: hci2: command tx timeout [ 435.093634][ T7970] loop1: detected capacity change from 0 to 512 [ 435.138043][ T7970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 435.166299][ T7970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 435.166589][ T7970] System zones: 1-12 [ 435.247857][ T7970] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.420: bad orphan inode 16 [ 435.247915][ T7970] loop1: lost filesystem error report for type 5 error -117 [ 435.264879][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 435.264938][ C0] EXT4-fs (loop1): initial error at time 2000000050: ext4_orphan_get:1425 [ 435.264980][ C0] EXT4-fs (loop1): last error at time 2000000050: ext4_orphan_get:1425 [ 435.279029][ T7970] ext4_test_bit(bit=15, block=4) = 0 [ 435.279054][ T7970] EXT4-fs (loop1): 1 orphan inode deleted [ 435.319715][ T7970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.751171][ T5632] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 436.974792][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.852622][ T7996] netlink: zone id is out of range [ 437.852705][ T7996] netlink: zone id is out of range [ 438.676453][ T5632] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 439.334241][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 439.360665][ T8003] loop2: detected capacity change from 0 to 128 [ 439.373385][ T8003] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.389569][ T8003] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.800645][ T6665] bridge_slave_1: left allmulticast mode [ 439.800683][ T6665] bridge_slave_1: left promiscuous mode [ 439.800917][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.838652][ T6665] bridge_slave_0: left allmulticast mode [ 439.846818][ T6665] bridge_slave_0: left promiscuous mode [ 439.853592][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.700588][ T8028] input: syz0 as /devices/virtual/input/input7 [ 444.762410][ T8030] loop5: detected capacity change from 0 to 16 [ 444.769536][ T8030] erofs: Unknown parameter '' [ 445.803126][ T6665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.854360][ T6665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.880298][ T6665] bond0 (unregistering): Released all slaves [ 447.536337][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.539563][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.539758][ T7892] bridge_slave_0: entered allmulticast mode [ 448.578016][ T7892] bridge_slave_0: entered promiscuous mode [ 449.623941][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.624206][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.624762][ T7892] bridge_slave_1: entered allmulticast mode [ 449.697470][ T7892] bridge_slave_1: entered promiscuous mode [ 449.835656][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.913151][ T6665] hsr_slave_0: left promiscuous mode [ 450.077798][ T6665] hsr_slave_1: left promiscuous mode [ 450.114594][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.141515][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.068359][ T6665] team0 (unregistering): Port device team_slave_1 removed [ 454.097807][ T6665] team0 (unregistering): Port device team_slave_0 removed [ 454.358980][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.373859][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 454.390489][ T191] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 454.559607][ T191] usb 3-1: Using ep0 maxpacket: 16 [ 456.544990][ T7892] team0: Port device team_slave_0 added [ 456.658524][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 457.043887][ T7892] team0: Port device team_slave_1 added [ 457.246173][ T8096] loop1: detected capacity change from 0 to 256 [ 457.296493][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.304889][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.337227][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.350708][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.358198][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.386289][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.451230][ T7892] hsr_slave_0: entered promiscuous mode [ 457.460051][ T7892] hsr_slave_1: entered promiscuous mode [ 457.466797][ T7892] debugfs: 'hsr0' already exists in 'hsr' [ 457.472768][ T7892] Cannot create hsr debugfs directory [ 457.492761][ T8096] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 457.715750][ T8097] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 458.230326][ T191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.230416][ T191] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 458.230488][ T191] usb 3-1: no configurations [ 458.230506][ T191] usb 3-1: can't read configurations, error -22 [ 458.506350][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 461.539207][ T8118] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.447'. [ 462.207907][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.443'. [ 462.767976][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.443'. [ 462.878343][ T8127] veth0: entered promiscuous mode [ 462.963061][ T8127] macvtap1: entered promiscuous mode [ 462.963736][ T8127] macvtap1: entered allmulticast mode [ 462.963791][ T8127] veth0: entered allmulticast mode [ 463.006431][ T8132] veth0: left allmulticast mode [ 463.013364][ T8132] veth0: left promiscuous mode [ 463.020985][ T8132] macvtap1: left promiscuous mode [ 463.028243][ T8132] macvtap1: left allmulticast mode [ 463.447621][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.454143][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.800255][ T8157] netlink: 108 bytes leftover after parsing attributes in process `syz.5.455'. [ 464.811630][ T8157] loop5: detected capacity change from 0 to 8 [ 467.669407][ T8171] loop4: detected capacity change from 0 to 32768 [ 467.886289][ T8171] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 467.994593][ T8171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.196864][ T7892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.233155][ T7892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.242596][ T7892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.263480][ T7892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.366454][ T7892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.070791][ T7892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.084844][ T7892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.168981][ T7892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.555658][ T5630] ocfs2: Unmounting device (7,4) on (node local) [ 469.995306][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.070556][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.113979][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.114117][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.253256][ T8195] binder: 8193:8195 ioctl c018620c 200000000240 returned -22 [ 470.356234][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.356501][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.263701][ T8233] loop2: detected capacity change from 0 to 512 [ 477.313333][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.953139][ T8240] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.469: Unimplemented hash flags: 0x0001 [ 477.953232][ T8240] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.469: Corrupt directory, running e2fsck is recommended [ 480.340786][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.180926][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 482.349050][ T5632] Bluetooth: hci0: unexpected event for opcode 0x2000 [ 482.743550][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.229967][ T8272] loop2: detected capacity change from 0 to 1024 [ 483.237132][ T8272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.284385][ T8272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c01c, mo2=0002] [ 483.332066][ T8272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.513348][ T8279] loop4: detected capacity change from 0 to 512 [ 483.535975][ T8279] ------------[ cut here ]------------ [ 483.536003][ T8279] EA inode 11 i_nlink=0 [ 483.536048][ T8279] WARNING: fs/ext4/xattr.c:1055 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#0: syz.4.468/8279 [ 483.565262][ T8279] Modules linked in: [ 483.569224][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.4.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.581367][ T8279] Tainted: [L]=SOFTLOCKUP [ 483.585752][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.597427][ T8279] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 483.604191][ T8279] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80 [ 483.624315][ T8279] RSP: 0018:ffffc90004467340 EFLAGS: 00010246 [ 483.630737][ T8279] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000 [ 483.638861][ T8279] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0 [ 483.647242][ T8279] RBP: ffffc90004467430 R08: ffff88807754439f R09: 1ffff1100eea8873 [ 483.655804][ T8279] R10: dffffc0000000000 R11: ffffed100eea8874 R12: 000000000000000b [ 483.664083][ T8279] R13: ffff8880775441f8 R14: 0000000000000000 R15: 1ffff1100eea883f [ 483.672262][ T8279] FS: 00007fe58cd9e6c0(0000) GS:ffff888124f18000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 483.681265][ T8279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.689036][ T8279] CR2: 00007f6748fdca34 CR3: 000000005fd6c000 CR4: 00000000003526f0 [ 483.699532][ T8279] Call Trace: [ 483.703296][ T8279] [ 483.706361][ T8279] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 483.712235][ T8279] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 483.718796][ T8279] ? ext4_xattr_inode_iget+0x3eb/0x600 [ 483.724321][ T8279] ext4_xattr_inode_dec_ref_all+0x606/0xb50 [ 483.730422][ T8279] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 483.737071][ T8279] ? _raw_spin_unlock+0x28/0x50 [ 483.742055][ T8279] ? ext4_get_inode_loc+0xc5/0xf0 [ 483.747216][ T8279] ext4_xattr_delete_inode+0xb7c/0xd60 [ 483.753008][ T8279] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 483.759119][ T8279] ? __ext4_mark_inode_dirty+0x554/0x7b0 [ 483.765082][ T8279] ext4_evict_inode+0xb53/0xfe0 [ 483.770041][ T8279] ? __pfx_ext4_evict_inode+0x10/0x10 [ 483.775473][ T8279] evict+0x624/0xb50 [ 483.779468][ T8279] ? __pfx_evict+0x10/0x10 [ 483.783929][ T8279] ? do_raw_spin_unlock+0xf5/0x210 [ 483.789117][ T8279] ? _raw_spin_unlock+0x28/0x50 [ 483.795152][ T8279] ? iput+0xb84/0xf00 [ 483.799333][ T8279] ext4_orphan_cleanup+0xc7a/0x14c0 [ 483.804639][ T8279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 483.810994][ T8279] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 483.816689][ T8279] ? ext4_register_li_request+0x259/0x720 [ 483.822506][ T8279] ? errseq_check_and_advance+0x66/0x120 [ 483.828268][ T8279] ext4_fill_super+0x5cde/0x6600 [ 483.833353][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 483.838774][ T8279] ? snprintf+0xe8/0x140 [ 483.843248][ T8279] ? __pfx_snprintf+0x10/0x10 [ 483.848066][ T8279] ? set_blocksize+0x1c9/0x440 [ 483.853074][ T8279] ? sb_set_blocksize+0x155/0x240 [ 483.858258][ T8279] ? setup_bdev_super+0x586/0x680 [ 483.863403][ T8279] get_tree_bdev_flags+0x430/0x4f0 [ 483.868658][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 483.873999][ T8279] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 483.879821][ T8279] vfs_get_tree+0x92/0x2a0 [ 483.884300][ T8279] do_new_mount+0x319/0xdc0 [ 483.888944][ T8279] ? __pfx_do_new_mount+0x10/0x10 [ 483.894040][ T8279] ? ns_capable+0x89/0xe0 [ 483.898474][ T8279] ? path_mount+0x647/0x1050 [ 483.904141][ T8279] ? user_path_at+0xd4/0x160 [ 483.908859][ T8279] __se_sys_mount+0x31d/0x420 [ 483.913600][ T8279] ? __pfx___se_sys_mount+0x10/0x10 [ 483.918943][ T8279] ? __x64_sys_mount+0x20/0xc0 [ 483.923777][ T8279] do_syscall_64+0x166/0x510 [ 483.928530][ T8279] ? trace_irq_disable+0x3b/0x140 [ 483.933622][ T8279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.939805][ T8279] ? clear_bhb_loop+0x40/0x90 [ 483.944538][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.950541][ T8279] RIP: 0033:0x7fe58bf9f34a [ 483.955045][ T8279] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.975723][ T8279] RSP: 002b:00007fe58cd9de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 483.984262][ T8279] RAX: ffffffffffffffda RBX: 00007fe58cd9dee0 RCX: 00007fe58bf9f34a [ 483.992290][ T8279] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fe58cd9dea0 [ 484.000593][ T8279] RBP: 0000200000000180 R08: 00007fe58cd9dee0 R09: 0000000000000000 [ 484.008696][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 484.017922][ T8279] R13: 00007fe58cd9dea0 R14: 000000000000048d R15: 000000000000002c [ 484.026090][ T8279] [ 484.029191][ T8279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 484.036511][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.4.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.047342][ T8279] Tainted: [L]=SOFTLOCKUP [ 484.051704][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.062684][ T8279] Call Trace: [ 484.066018][ T8279] [ 484.068986][ T8279] vpanic+0x56c/0xa60 [ 484.073037][ T8279] ? __pfx__printk+0x10/0x10 [ 484.077695][ T8279] ? __pfx_vpanic+0x10/0x10 [ 484.082269][ T8279] ? is_bpf_text_address+0x292/0x2b0 [ 484.087599][ T8279] ? is_bpf_text_address+0x26/0x2b0 [ 484.092845][ T8279] panic+0xc5/0xd0 [ 484.096614][ T8279] ? __pfx_panic+0x10/0x10 [ 484.101098][ T8279] __warn+0x315/0x4c0 [ 484.105123][ T8279] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 484.111147][ T8279] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 484.117296][ T8279] __report_bug+0x276/0x570 [ 484.121942][ T8279] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 484.128164][ T8279] ? __pfx___report_bug+0x10/0x10 [ 484.133259][ T8279] ? __ext4_get_inode_loc+0x6b4/0xf40 [ 484.138720][ T8279] ? set_normalized_timespec64+0xf0/0x1a0 [ 484.144489][ T8279] report_bug_entry+0x19a/0x290 [ 484.149394][ T8279] ? ext4_xattr_inode_update_ref+0x50c/0x590 [ 484.155415][ T8279] ? ext4_xattr_inode_update_ref+0x511/0x590 [ 484.161441][ T8279] handle_bug+0xce/0x200 [ 484.165737][ T8279] exc_invalid_op+0x1a/0x50 [ 484.170287][ T8279] asm_exc_invalid_op+0x1a/0x20 [ 484.175181][ T8279] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 484.181811][ T8279] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80 [ 484.201454][ T8279] RSP: 0018:ffffc90004467340 EFLAGS: 00010246 [ 484.207994][ T8279] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000 [ 484.216026][ T8279] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0 [ 484.224208][ T8279] RBP: ffffc90004467430 R08: ffff88807754439f R09: 1ffff1100eea8873 [ 484.232220][ T8279] R10: dffffc0000000000 R11: ffffed100eea8874 R12: 000000000000000b [ 484.240491][ T8279] R13: ffff8880775441f8 R14: 0000000000000000 R15: 1ffff1100eea883f [ 484.248616][ T8279] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 484.254563][ T8279] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 484.260975][ T8279] ? ext4_xattr_inode_iget+0x3eb/0x600 [ 484.266497][ T8279] ext4_xattr_inode_dec_ref_all+0x606/0xb50 [ 484.272456][ T8279] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 484.279007][ T8279] ? _raw_spin_unlock+0x28/0x50 [ 484.283939][ T8279] ? ext4_get_inode_loc+0xc5/0xf0 [ 484.289054][ T8279] ext4_xattr_delete_inode+0xb7c/0xd60 [ 484.294570][ T8279] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 484.300599][ T8279] ? __ext4_mark_inode_dirty+0x554/0x7b0 [ 484.306295][ T8279] ext4_evict_inode+0xb53/0xfe0 [ 484.311203][ T8279] ? __pfx_ext4_evict_inode+0x10/0x10 [ 484.316624][ T8279] evict+0x624/0xb50 [ 484.320575][ T8279] ? __pfx_evict+0x10/0x10 [ 484.325033][ T8279] ? do_raw_spin_unlock+0xf5/0x210 [ 484.330193][ T8279] ? _raw_spin_unlock+0x28/0x50 [ 484.335078][ T8279] ? iput+0xb84/0xf00 [ 484.339128][ T8279] ext4_orphan_cleanup+0xc7a/0x14c0 [ 484.344393][ T8279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.350437][ T8279] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 484.356121][ T8279] ? ext4_register_li_request+0x259/0x720 [ 484.361879][ T8279] ? errseq_check_and_advance+0x66/0x120 [ 484.367559][ T8279] ext4_fill_super+0x5cde/0x6600 [ 484.372563][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 484.377897][ T8279] ? snprintf+0xe8/0x140 [ 484.382222][ T8279] ? __pfx_snprintf+0x10/0x10 [ 484.386967][ T8279] ? set_blocksize+0x1c9/0x440 [ 484.391808][ T8279] ? sb_set_blocksize+0x155/0x240 [ 484.396896][ T8279] ? setup_bdev_super+0x586/0x680 [ 484.401966][ T8279] get_tree_bdev_flags+0x430/0x4f0 [ 484.407117][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 484.412440][ T8279] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 484.418124][ T8279] vfs_get_tree+0x92/0x2a0 [ 484.422586][ T8279] do_new_mount+0x319/0xdc0 [ 484.427157][ T8279] ? __pfx_do_new_mount+0x10/0x10 [ 484.432230][ T8279] ? ns_capable+0x89/0xe0 [ 484.436612][ T8279] ? path_mount+0x647/0x1050 [ 484.441255][ T8279] ? user_path_at+0xd4/0x160 [ 484.445897][ T8279] __se_sys_mount+0x31d/0x420 [ 484.450654][ T8279] ? __pfx___se_sys_mount+0x10/0x10 [ 484.456103][ T8279] ? __x64_sys_mount+0x20/0xc0 [ 484.460952][ T8279] do_syscall_64+0x166/0x510 [ 484.465615][ T8279] ? trace_irq_disable+0x3b/0x140 [ 484.470705][ T8279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.476826][ T8279] ? clear_bhb_loop+0x40/0x90 [ 484.481572][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.487518][ T8279] RIP: 0033:0x7fe58bf9f34a [ 484.491985][ T8279] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.511644][ T8279] RSP: 002b:00007fe58cd9de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.520127][ T8279] RAX: ffffffffffffffda RBX: 00007fe58cd9dee0 RCX: 00007fe58bf9f34a [ 484.528152][ T8279] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fe58cd9dea0 [ 484.536180][ T8279] RBP: 0000200000000180 R08: 00007fe58cd9dee0 R09: 0000000000000000 [ 484.544198][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 484.552229][ T8279] R13: 00007fe58cd9dea0 R14: 000000000000048d R15: 000000000000002c [ 484.560273][ T8279] [ 484.563949][ T8279] Kernel Offset: disabled [ 484.568301][ T8279] Rebooting in 86400 seconds..