last executing test programs: 9m23.069700129s ago: executing program 32 (id=771): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) clock_nanosleep(0x2, 0x2000000, &(0x7f0000000040)={0x77359400}, 0x0) 8m28.137113306s ago: executing program 33 (id=891): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000110007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 7m59.596002117s ago: executing program 1 (id=948): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x83104008}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x84, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x12}]}, @NL80211_ATTR_SSID={0x14, 0x34, @random="4782e972ba589114b5e80b941051c718"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000808}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020ffef00000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 7m58.672739026s ago: executing program 1 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000480)="66b9900d00000f32baf80c66b890efe88e66efbafc0cec0f01d1360fc07f000f01c90f20c06635000000400f22c0650f01f7f2abb800008ee80f009b3400", 0x3e}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xa6, 0x7ff, 0x80000000, 0x1, 0x5}) 7m57.953592686s ago: executing program 1 (id=951): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed40) sendto$inet6(r0, &(0x7f0000000040)="3a49dca8886434f7eeeb78e5157e8dc50d15ca787217e89eb49f6fa07f9c3075985c9fbb4cb9fe98a60d9fb31e697860ee0a715f60343b79a8053667fe5ec4c481db39d569eb589b0628fb160db6a67977a06c086ec5fdef212091a4885d7a16c15e838b34408496c502cfeea864ddd5e4d7d7cf29ed2039ac11d107d569931e0efaa9214f967f6c248997a6f696197ebf1898f91dd33b774c116a6c089581a9846a9844d0dcd3d83b7212f5eca76fa2a207b323c35016705e40f4132f0f00e1886af08ab28a490f886543f10979b749036dbca29bcc8793fa137acdc7beec2bc309350cb0d33c8d", 0xe8, 0x4004845, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @private0, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 7m55.483700861s ago: executing program 1 (id=954): capset(&(0x7f00000004c0)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff, 0xd}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000100)={0x7, 0xe2, 0x7, 0x5, 0x3ff, 0x81}) r1 = socket$kcm(0x10, 0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@empty}]}]}}, @timestamp}}}}, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x3, 0x4, 0x1, 0xc, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x80, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 7m53.243632174s ago: executing program 1 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000001f0100fef7ffffffb702000008000000b703000064000003620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) 7m52.536227187s ago: executing program 1 (id=959): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x83104008}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x84, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x12}]}, @NL80211_ATTR_SSID={0x14, 0x34, @random="4782e972ba589114b5e80b941051c718"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000808}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020ffef00000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 7m49.140416777s ago: executing program 34 (id=959): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x83104008}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x84, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x12}]}, @NL80211_ATTR_SSID={0x14, 0x34, @random="4782e972ba589114b5e80b941051c718"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000808}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020ffef00000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 7m23.743595188s ago: executing program 5 (id=996): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x8482, 0x30) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x3, 0xa9, 0x2, 0x6}, {0x8, 0x7, 0x1, 0x8}]}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x1, 0x4000000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, 0xfffffffffffffffe) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa}, 0x80, 0x0}, 0x0) r6 = syz_io_uring_setup(0xfe1, &(0x7f0000000140)={0x0, 0x226c, 0x8, 0x2, 0x25e, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000200)) r7 = io_uring_setup(0x3c71, &(0x7f00000003c0)={0x0, 0x9ecc, 0x80, 0x0, 0x8a}) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000080)=0x1) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ff9000/0x4000)=nil) io_uring_enter(r6, 0x310f, 0x57c1, 0x40, &(0x7f0000000240)={[0x8000000000000000]}, 0x8) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0008000000000000feff0000000000000000ef0000000000000000000000003b4400"]) 7m22.755849063s ago: executing program 5 (id=1000): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='%\x00\x00\x00\a\x00\x00\x00', @ANYRESHEX=r0], 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0x6, 0x99, {0xc, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x10048840) r5 = socket(0x28, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) splice(r6, &(0x7f0000000200)=0x3, r7, 0x0, 0x9, 0x5) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x8) 7m21.56022593s ago: executing program 5 (id=1002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 7m18.462996156s ago: executing program 5 (id=1008): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@init_itable_val}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r0, 0x8918, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x4, 0x2, 0x3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd25, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x800) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7m16.364073725s ago: executing program 5 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220700000083d9550093487e314d5bc8644509a881cbfb0b9d87f85797561ef5a7919815318f8828d71b691c49cd85559c9d2108379f608b7a6508a865aac7a002b182a9ac6f02fd4148b34367b745537636939a517d977e7f1a89df4b2009fbd5e58465d9115e06c1170cfa59dc05ceec7437689bcc1b706923e0"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7m14.924612598s ago: executing program 5 (id=1019): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000001c0)=ANY=[@ANYBLOB='sys_immutable,nonumtail=0,rodir,iocharset=cp950,shortname=mixed,uni_xlate=0,flush,codepage=949,uni_xlate=1,ro\x00\x00\x00\x00shortname=lower,utf8=0,\x00'], 0x3, 0x35c, &(0x7f00000004c0)="$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") sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 7m11.442561967s ago: executing program 35 (id=1019): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000001c0)=ANY=[@ANYBLOB='sys_immutable,nonumtail=0,rodir,iocharset=cp950,shortname=mixed,uni_xlate=0,flush,codepage=949,uni_xlate=1,ro\x00\x00\x00\x00shortname=lower,utf8=0,\x00'], 0x3, 0x35c, &(0x7f00000004c0)="$eJzs3U9om/UbAPAne9OkHezXHn4wFIRXb4KWteJBTy2jg2EuKsE/BzG4TqWpgwaD3aFZvYhHwaOevHnQg4edRVDEmwevTpCpeNDdBg5fSd6kedMkXSd2s/j5HMKT5/s8+37f5aV5+4Z8+/JKbFyYiYs3blyP2dlSlFfOrsTNUixEEgNXYlxlQg4AOB5uZln8nuUO2VI64iUBAEes9/7/6qlC5u0vD6rPvPsDwLHX//1/Ln+WTKyZndZ86ciWBQAcobH7/w+NDFdGP+ovT7lCAACOk2dfePGp1VrEM2k6G7H5TrverseTw/HVi/F6NGM9zsR83IrILxS6D6Xe47nztbUzaZp24qeFqHc72vWIzU67nl8prCa9/mosxXws9Pv7VxtZliXnPqutLaVpmvY+V7jS6c0fm6V2fSZO9uf//mSsx3Kk8f+x/ojztbXlNBf1zUF/J2J3eN+iu/7FmI9vX4lL0YwL0e0dXNbU1naW0vRsVhvpb9ervbrc1DsgAAAAAAAAAAAAAAAAAAAAAADwtyymexb29r/Jhvv3LC5OGO/tj5P39/cH2s33B8qqWWTZb289Wn83iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+NdobVei0Wyub7W2L28Ug85Wa/tERHQzb3z9yRdzMV5zm6Dcn6MwlPZTlzcaWTIozpK8Zm6kPelOPsh8fHVvxcWa6t5RTFxGdfpQs3nqwR8/GGYeSAb/8p/DmiQmH2CybxnFYPN/+ZLu5D9qL1i+Tc21LMumte+8NN4VpYjynb9wBwdZN/jq+mv3PdY6/Xgv83mWe/iR+eeuvf/RLxuNZnfm6L2Cla3WrWyj0X8++WSbHiSF86cUeVAqngnlg9p3RzON5Ltfn7//vW8ON3tWzLw5oSbJD+fT/UOVPOguc9/Q3KS5ZqJ88Gn8zwSnP1xpXN354efDdhV+SNioAwAAAAAAAAAAAAAAAAAA7orCd8X7+l/2nTmo64mnj35lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcuMB9XYn/mjE+PF1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//76aaas=") sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6m17.087672217s ago: executing program 7 (id=1142): gettid() timer_create(0x0, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x700000000000000, 0x0, 0x80}, 0x4804) 6m16.152001463s ago: executing program 7 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220700000083d9550093487e314d5bc8644509a881cbfb0b9d87f85797561ef5a7919815318f8828d71b691c49cd85559c9d2108379f608b7a6508a865aac7a002b182a9ac6f02fd4148b34367b745537636939a517d977e7f1a89df4b2009fbd5e58465d9115e06c1170cfa59dc05ceec7437689bcc1b706923e0"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6m14.340497728s ago: executing program 7 (id=1153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000) 6m12.429909896s ago: executing program 7 (id=1161): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x120c416, &(0x7f00000000c0)={[{@dots}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}, {@dots}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x1a5}}, {@fat=@check_strict}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@debug}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@dots}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0x0, 0x40000000000000, {0x400, 0x8, 0x0, {0x0, 0xffffffffffffff31, 0x80000000, 0x8e1, 0x5, 0xffffffffffffffff, 0x1, 0x4, 0xfffffc01, 0x1000, 0xffffffff, r2, r3, 0xfffffffb, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x43028, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) 6m11.108719686s ago: executing program 7 (id=1166): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000c40)="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", 0x586}, {&(0x7f00000000c0)="924c7c18e709b52c12046e7084278515c67c54facb0c69", 0x17}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000000860500000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140fffffffff000000002400000000000000000000000700000001"], 0x48}, 0x4) 6m9.421375339s ago: executing program 7 (id=1170): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 6m5.251858052s ago: executing program 36 (id=1170): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 2m52.934781802s ago: executing program 3 (id=1689): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) socket(0x2b, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000003c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m48.013202896s ago: executing program 3 (id=1697): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 2m46.943230367s ago: executing program 3 (id=1701): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d, 0x3ff}}, {@gid}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@namecase}, {@gid}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2}}, {@utf8}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 2m45.491827525s ago: executing program 3 (id=1703): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xffffffffffffffff}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0xfffffffd, &(0x7f0000006680)) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x3) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010000", 0x7) io_setup(0x8, &(0x7f0000000540)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000080)="01000000", 0x4, 0x2a25}]) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800009, 0x28011, r3, 0x40000) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) membarrier(0x10, 0x0) r10 = memfd_create(&(0x7f0000000740)='[\v\xfbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91z||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99A\xe1\xe2\x95B\\\x03\xf9\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\x01q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x91\xf7?\xd4&\x81\xe9\xc6J\x8a\x13/hm\xf0\xa7\x00\xef\vO\xac\n\xac\xd8\xb3R\xb8Q\xa30\x12\t\x14\xb50m\xfd\xbb\xf0I\xb2`aYi\xeb\x90\x0e\xe9D\x80mv\x13\xc0}s8\xb4\x85e\xac\xd3\x04#\xe3\xe8\xc9\xa3x{{\xc03Y\xeaL\x8c\xbd\"\xd54rwl\xeb\xde)U:\xe8\x9fJ#\xa7\xfa\xbd+\xca\xd0\x01P\x0ef\x9a\x86W\xc57p\xa85\xffuS\xa9%X\x14B\x92.Y\xaa\xb04\x039C\x81X(\xceE\x11A\xbe\x91\x1e\xd9\xd1\xe1\xe3M\xc3\x0e\v\xe6\xf8tu\x86s\xf2\xc7\x99M\x1dz\xab\x92z\a\x84\xe7x\xe4\xa7\x98\x99`6\x7f\xd9\xfa\xe8\xcf\x948\x06o\xfbaK8\xdb(S{S\xcd\xae\a\xa5R]\xd5\xcb\xab\x19\xd5#E', 0x1) r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r11, &(0x7f0000000380)={'#! ', './file0', [{}], 0xa, "f7d31e4be132e35a4922005cf4dceac05f17ee8e86d70fb8f85e838a62f9042466"}, 0x2d) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000080)) pwritev(r0, &(0x7f0000001080)=[{&(0x7f0000000200)="1f0e6f6c58a51b1614f9ba4067604c3fe1ac3095f02d3353b0144102969a4e27de75f3cc04699d14e5864c62f1a7c69e95bc33c1940d2c76e4c58cc35681c47837225ae2059ddca3e557fbc4ba8dbad9b18bf8e7d5a52cd623b08161ae14ae8c6c2a4ae20865a4fe7057dc10d6086f0a9ae16fdfd59b53514b4868d6f1c0d52be1", 0x81}, {&(0x7f0000001100)="724a2894ce546c06f4c2bcb080e87733141662cc9fa0769be7cff6e55d4e143fd51167f6e0332176cab0e76c506b080da4d8ed691ccd5cee16d363ce3f6add08ae2ba465382219d95cde79a6027efee794004574d50a12908159cd5454e637d42cb2f53c375ce6f75a7b15e86f4533aaf4fa9d4525b8a1d70b68c26f5ba431981219", 0x82}, {&(0x7f0000000600)="f04f1869025a4d8291821e78c27af5e1ff25f52f8ef569c44d3c274af13c96422a43805e5a24d1ea2e30b3c0c171b82d145f5e9fa9d41493e86c7ed4c317042d7636df5e724f7ac9e113eee929b7693cce3412d4107f1a047fa0973b4b02835a61c319d19631d9a9d3dde4873a2070e7eabadecdb7a18673617bf91a3cd7e7ee27592f1cb1c2b57793e89948a52383aa5f9476b584c8d89442e6c4a755e0665ab90ba07f7aecc931cc80df41f5d9009ea588877b32be33edce35d540e53e6c2e543eb79b1546ddcb22d6f36cf8e6378c7754ed75744899bd", 0xd8}, {&(0x7f00000002c0)="7188feb305e3a10a7ea359404ad49f3d69d4f4379a16042e20e17e3312aa3edd4194bd1d6884df09308650e1d273fea79f9905206bdefe508da019b5f85d8cd71a0ae89e99a3bf7383ce79165abe30268b4d47da5d95d0267bc2", 0x5a}, {&(0x7f00000004c0)="8d4947850be0f655be2935c40a97e4c57b89e6bda57fb6cff555ae843cf36f89394e6b94053fcb62f70f9c73214f60c6341591c56f9eb2989c645ab320bd0f4f9d9fe14e244f05f6344cac8594553643a6", 0x51}, {&(0x7f0000000100)="46b3bcad7aea", 0x6}, {&(0x7f0000000f80)="2afad7d175ed37254908daa5234e04705e79638d2abb69d42c0417db1bbab42e0759f47baf8944e5f34a587bb65e8fea3d59155cae0b71933789b5972b2f77714028b3c3a5483e948db58bf87e48af3224c8823418ba71d4559d537c7e89d97589b78e5f14754fd1cad46abc8dcede084ece9e1ab8e2b62efdd9eac472f6dc93558f4caf7bacd243fe3e4384b85a2f06461b34f64420d7607fbea8ab3340cc5123cefc91935dd9818a7f36438c2ba290abfbb285383e42225106aef796359e8679f389f7139cff499f58a61e0dbeb0de8976010b57c72e0efa21cb88ed3e2a698a", 0xe1}], 0x7, 0x8, 0x6) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r12 = getpgid(0xffffffffffffffff) prlimit64(r12, 0x1, &(0x7f00000003c0)={0x100000000000000, 0x2}, 0x0) 2m41.190127939s ago: executing program 3 (id=1715): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x4000010, r0, 0x0) 2m40.003440744s ago: executing program 3 (id=1717): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x21, 0x25f, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x6, 0x5, 0x0, 0x0, @msi={0x81, 0x9, 0x8, 0x5}}, {0x4, 0x3, 0x1, 0x0, @irqchip={0x30, 0xff}}]}) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 2m24.731381029s ago: executing program 37 (id=1717): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x21, 0x25f, &(0x7f0000000b00)="$eJzs3U1oHGUYB/Bn9oOYZJGoF0FQQUQkEOJN8BIvCgEJ4kFQISLiRUkETfC268mLF88iOXkJpbemPZZeQi8thZ7SNof00tKGHhoK/YAp+xXSdttsupuZNvP7wWZmknfmeQfm/74T2GECKKyJiJiJiHJETEZENSKSvQ3ebX8mOpsro+vzEWn61a2k1a693dbdbzwiGhHxcUScKSXxcyViee3brTsbn3/w91L1/f/XvhnN9CQ7trc2v9j5b+6vE7MfLZ+/eGMuiZmoPXJew5f0+F0liXj9MIq9IJJK3j2gH1/+cfxSM/dvRMR7rfzfTdsiHuyu9ZLW/7l54a2s+wsMV5pWm3NgIwUKpxQRtc5Nams9SqWpqfY9/OXyWOmXxd9+n/xpcWnhx7xHKmBYahGbn50aOTneWk9KU538Xyu38w8cVfXOcvVK8+dOOd/eAMO0f6Cb8//k9/UPQ/6hcA6U/1ey6ROQjU7+W8l+LP/X8+oTkI0Dzf9P+xoA8FLy/z8U1zPzX82nT0A2zP9QXPIPxSX/UFzyD8W1N/8AQLGkI30+KNzo7gAcFTkPPwAAAAAAAAAAAAAAAAAAQA8ro+vz3U9WNc/+G7H9aURUetUvt95H3H352NjtpNlsV9LebSDfvTPgAQZ0LOenr1+9mm/9c2/nW7++ENH4MyKmK5Unr7+kc/09v9f2+Xv1hwELDOiTrw/ryLW+Wt1fPaz6/ZndiDjdHH+me40/pXiztew9/tSG8JqEX+8NeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy8zAAAP//JS12Fg==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x6, 0x5, 0x0, 0x0, @msi={0x81, 0x9, 0x8, 0x5}}, {0x4, 0x3, 0x1, 0x0, @irqchip={0x30, 0xff}}]}) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 1m42.286571s ago: executing program 4 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='oom_adj\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./bus\x00', 0xa00c40, &(0x7f0000000080)={[{@lazytime}, {@nolargeio}, {@inode64}, {@nogrpid}, {@bsdgroups}, {@nolazytime}, {@filestreams}]}, 0x1, 0x96dc, &(0x7f0000009680)="$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") 1m39.104582763s ago: executing program 4 (id=1870): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {0x95, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1m38.4057972s ago: executing program 4 (id=1872): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x2}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) ioctl(r1, 0x8b29, &(0x7f0000000040)) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000c00168008000100"/43], 0x30}, 0x7ffffffe, 0x0, 0x0, 0x20000040}, 0x800) syz_init_net_socket$rose(0xb, 0x5, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './cgroup.net/devices.allow\x00'}) r5 = openat(r4, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x4082, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000380)={[{@name={'name', 0x3d, 'G\xd9\x10\xd9\xd0\xf5\x80`\xee\x8dh5\xe2\xed$\xd4\xf2x?\v\xbf\x19\xc6\xb5\x91O8\x87\x8c\x8aF\xce\xc1\xdc\x17b\x84\x84\x93\xd7\xd6M\xc2C\"~\xfe?F\xbfD\xf0\xacn\x12\xe8z\xd1m\xb9\xc8\xa0%\x06\xb6\bH\x04\x14\xc9w\xb1\x9f)\xe12K\ra\xd0B\x9e\x1f\xc40\xb0\n0o&N\xb0\x8f\xd9\xaf'}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r9, 0x9000aecf, &(0x7f0000ffc000/0x2000)=nil) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* r'], 0x9) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000280)=0x6) 1m37.418087481s ago: executing program 4 (id=1876): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0xc, "56579902999843f13bba6bff"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000f40)={0x40, 0xc, 0x28, "5023efdf029d0563e4addd55c707a5edae0e838249c1daf2bf918cef716596dd00c3ce5fa08dbcee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x5, 0x89, "894e663fb75470c33f16f6dd971949bab6ebb01d40091bc6309ed495832b71657749eab3d9909f76421530e17a3729e6625726b98439a1c08d194b2522b3f39a32a743c1dbe18f07a943aa4c03a0dbde4eaf96e042f4d4b4e8520ea66b1d06e10359f49da93fe8e32f4879849a37ca4d72615cbaec96fb1c5908558cd7478feaa7ddf3bba9edda8659"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x2a, {0x28, "8962513f046910a2cc405e4c56bdb6056cc46e7cca334e24dc4666b36154142a7b7f861a98cb3f41"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x89}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x100, 0x6dd, 0x0, 0x0, 0x2, 0x801, 0xffffff6f, 0x9, 0x0, 0x8, &(0x7f0000000000)=[0x1, 0x1000], 0x2, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000540)={0x20, 0x10, 0xc2, {0xc2, 0x8, "c29a3858231db4722d820d7b2ae3f5ab5055be36d310da414efde0da825c1133c2f2c951ca90e7cc317b2b25c6caf541ce58b220c7ffa20ae6628fbf87f74dab7ab2cfa06a27234c45d7f4bca51ebc18ed6310c4dc7cdec665cb28f0b97aa6fbb5096bf2bbd27f79d88cbb1d115029abdafc0033334f46c5520de210d2467ef16403526fd0686e65de49cffe5f67ffcd7348c468208bf9ab9f7204a58c977a0c93a3ac96645a626c0b4de3ff65355c8c28f956512dd3a2526f6fc6cb913755a0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x7, "606454e0"}, @local=@item_4={0x3, 0x2, 0x9, "f73516cb"}, @global=@item_4={0x3, 0x1, 0x8, "e0ab53f8"}, @main=@item_4={0x3, 0x0, 0x9, "ce6b1dd1"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x50d}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x20, 0x9, 0xbb, "b91e782ee7a24785da195eb9556cb855b8624ed35b6572708ae928246f56a953afca67483a772ac204997118c3f81cf64ee4f92b35e05ce247a879b06403060f4012bd00a75f57ae41935b4675706df4208c35f0d72e24f68e64522ba9cf88a496a9bceb0eb3e9860d029e19c6bc44f9ebbd3456705a007f18aebba590b904263f030e8d190534f9572caa5cbdc5a2d0503cb295ca76907e8d7e5bc84932f5429d2b476017885e69c7e4bdb9cdf0bb4b7e22bd61505a48ac53d625"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x1, 0x6c, "719436777560d86a036d0cf12cdab7b48c4dcad0ba78b838adf6d938df97910e80f4f5c82cc6f650e6af1cafac9ac3c77f1a6485437acb948d60a80dcce7bf9e20e8de785389ef0e3a149aae833b08e2f2a13aa1f3437b7f651acbadab7356486b8875705829e273cf4edfb9"}, &(0x7f0000000440)={0x20, 0x3, 0x1}}) 1m33.364148113s ago: executing program 4 (id=1888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) connect$pppl2tp(r2, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r5) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") ioctl$TUNSETOWNER(r5, 0xff07, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002000", @ANYRES32=0x0, @ANYRESHEX], 0x38}}, 0x4080) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m31.712060701s ago: executing program 4 (id=1895): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1m16.429520495s ago: executing program 38 (id=1895): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 14.748620198s ago: executing program 6 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000030000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xffc, &(0x7f0000000240)=""/4092}, 0x94) 12.811098215s ago: executing program 6 (id=2127): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001840)) sendmmsg$inet(r0, 0x0, 0x0, 0x200400c0) r1 = open$dir(&(0x7f0000001b40)='./file0\x00', 0x4001, 0x1a6) fchmodat(r1, &(0x7f0000001b80)='./file0\x00', 0x12) mknodat(r1, &(0x7f0000001bc0)='./file0\x00', 0x8000, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000001c40)={0x1f, @none, 0x4}, 0xa) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000001c80)={0xf000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d00)={&(0x7f0000001cc0)='xen_cpu_load_idt\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001d40)={0x0, 'bond0\x00', {0x2}, 0x2}) 12.15295067s ago: executing program 6 (id=2131): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4001, &(0x7f0000000240), 0x1, 0x2c3, &(0x7f0000000700)="$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") open(&(0x7f0000000000)='./file0\x00', 0x88a40, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.847430169s ago: executing program 6 (id=2134): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0x200002, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000c1", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10.674109709s ago: executing program 9 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020ffef00000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 10.109977482s ago: executing program 9 (id=2138): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 9.416004601s ago: executing program 9 (id=2141): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001840)) sendmmsg$inet(r0, &(0x7f0000001a80), 0x0, 0x200400c0) r1 = open$dir(&(0x7f0000001b40)='./file0\x00', 0x4001, 0x1a6) fchmodat(r1, &(0x7f0000001b80)='./file0\x00', 0x12) mknodat(r1, &(0x7f0000001bc0)='./file0\x00', 0x8000, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000001c40)={0x1f, @none, 0x4}, 0xa) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000001c80)={0xf000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d00)={&(0x7f0000001cc0)='xen_cpu_load_idt\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001d40)={0x0, 'bond0\x00', {0x2}, 0x2}) 8.779731312s ago: executing program 9 (id=2145): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) unshare(0x20040400) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000036c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18}], 0x1, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYBLOB="350e05002102000014005299ad33f1d932358b6400000000040002800a0001"], 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000815) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x4) r4 = semget$private(0x0, 0x1, 0x1a0) semctl$SETVAL(r4, 0x3, 0x10, 0x0) syz_usb_connect(0x3, 0x45, &(0x7f00000001c0)=ANY=[@ANYRES32=r4], 0x0) 8.036191594s ago: executing program 6 (id=2147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) 6.96579212s ago: executing program 8 (id=2150): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) unshare(0x2040400) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 6.511325059s ago: executing program 8 (id=2153): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea4}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) 6.350635986s ago: executing program 0 (id=2154): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x290) 5.920451784s ago: executing program 0 (id=2155): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001840)) sendmmsg$inet(r0, &(0x7f0000001a80), 0x0, 0x200400c0) r1 = open$dir(&(0x7f0000001b40)='./file0\x00', 0x4001, 0x1a6) fchmodat(r1, &(0x7f0000001b80)='./file0\x00', 0x12) mknodat(r1, &(0x7f0000001bc0)='./file0\x00', 0x8000, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000001c40)={0x1f, @none, 0x4}, 0xa) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000001c80)={0xf000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d00)={&(0x7f0000001cc0)='xen_cpu_load_idt\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001d40)={0x0, 'bond0\x00', {0x2}, 0x2}) 5.811255012s ago: executing program 2 (id=2156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x4000, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @private1, 0x9}, 0x1c) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe800000000000000000000000000040ff010000000000000000000000000001000000004e21000000000000ad000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8a00000000000000000000000000010000000033000000ffffffff00000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000500000005"], 0xf8}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="f800000016000100000000000000ec278c0400000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000005020000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000001000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffff0200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000fbffffff020000fd00000000000000000500000005000000"], 0xf8}}, 0x0) 5.778119821s ago: executing program 8 (id=2157): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000c40)="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", 0x586}, {&(0x7f00000000c0)="924c7c18e709b52c12046e7084278515c67c54facb0c69", 0x17}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c0000000097ff000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140fffffffff000000002400000000000000000000000700000001"], 0x48}, 0x4) 5.507447834s ago: executing program 0 (id=2158): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4001, &(0x7f0000000240), 0x1, 0x2c3, &(0x7f0000000700)="$eJzs3T9v00AYx/HfOWkTaFVcWoTEWKgEC4LCgFiCUF4EEwKaIFVERUARf6aCmBCCnZ23wItgAfEGYGLiBYTJ6M7npEkc242auIXvR2rk2He+52I7d0+k6gTgv3Wz+ePTlV/2z0gVVaS316VAUl2qSjql0/Wn2ztbO512K+tEFVfD/hnFNc1Imc3tdlpVW8/V8EL7rqrFvfswHVEU3fhZdhAonXv6UwRSzT+d7nh95pFlezVhvd0DjuOoMV119VxLZccBACiXH/8DP84v+vl7EEjrftg/lOP/pLplBzB1UeZR0zXJ+O+yrMjY63vCHerney6Fs8eDJEss0vLc0Pt5xXfWwATT5GWVLpbg2P2tTvvi5sNOK9BrNbw9xVbdayu+dRM50a6l5KYZCvTdpM8oF1wf5mwfNuL4n0kaiH9lwhYnZr6Yb+a2CfVRrd78rxoZe5nclQqHrlQc/6XxZ3S9DG0p+a+NRqMRDBRZdo2c8S14Ob2sp2ckSu6oZQ3+QBDmxelqnRyqFffuck6tldRaG8m7MbVWB2rZ3vTu5vHtTZt5b26ZNf3WZzX3zP8DG9+6Mp/M/lNj1uOhwH3icX/m05urunOGIyPH6OPS+xRr40L/E+UUQGHvdE/XtPTkxcsHlU6n/dhu3E3ZeLTY2zP3RkotU/KGdvt7aoqckcLJoDTLwC4c6Ant90duYfuUHYqLsv+Nq4cjjCIbza+zvZHK2Cj5+wkz0b/oZUeCkth5l4nzv36+Uo0ne/YlTJ2nF/whwJ8xsnPsXgbXrxvFM3JJx/eVwS2Mz+BGc66RnNHlXGfPS+eSPTXXYpDRYujj/EeYpr7rDr//AwAAAAAAAAAAAAAAAAAAHDWz+HeCsvsIAAAAAAAAAAAAAAAAAAAAAMBR11v/V8n6vyq2/u/w8lIHuf7vh22x/i8wfX8DAAD//5r/e7I=") open(&(0x7f0000000000)='./file0\x00', 0x88a40, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 5.398274957s ago: executing program 6 (id=2159): futex(&(0x7f00000040c0), 0x4, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000006480)=ANY=[@ANYBLOB="6673636b2c696e6c696e655f646174612c6e6f636f772c64656772616465642c7374725f686173683d736970686173682c6e6f7265636f49cb844a3df86a59636172642c7265636f6e7374727563745f616c6c6f632c657261737572655f636f64652c61636c2c6e6f5f73706c6974627261696e5f636865636b2c686173682c7569643d", @ANYRES64=0x0, @ANYRES32], 0x1, 0x58f3, &(0x7f0000010b40)="$eJzs3XuQXFX9IPBzu3synZk8JgEkgkyGQBRBzYRX4aM0ur4KkIqFpYSNwkAmGE1CKgkCASW44EIBFlpaivoHWkgtGi2qYJVIiTw2YRWkWF1qC6nVXfQPt5AlJZClLNf8aqbv6fTc6Tu3p7snJPD5VDK3z+nb33Puvadv9/f0nekAAADA68Lu67fsPeeoD/3my6MvX/PRX2y4NvSXx+urcYWBdHnFq9VDDqTeyqLxZXZcvOWqH/1l6OIP/Pruvh++smvNsWv/8MHDLr7/c2fuvO27D700995/PVsUN46nE/eXk+eTEKq/3PPNr+x67MixuiSEUE4GtoewIFn40IIkE2L4HyGENWlhUebOe14+Ze3Y8tqbeifUz8+sZ7y/vlXTcbZt7+UnhT++f9V1v13805/07Hhu+/5VkmrDeAph3oWNj+8JIcxO/4+Joy2OxzhoV4YQ+hoed0ZBv45rsf/LcspHp8tZ6bK/IE68f0mmXMqsly1HPZllX0F7ncrrR7vrFZmTKWdPRp3K62esX5Auf54uT5xm/HL8n4RSEir17q9P9o+R0HDckpCMH8tqvVyqH9uQbn+mnGTKpUy53JPZrvF204FWTpKJ9XG9TH08HVfS+mMbz9VNnJtT/8Z0WU2fqK/EcsjeqOmfdKO+XeNiv/ZM0ZcDodRwDmpWXz/w6cHoT+v6k4WTHrOviXjfrlU3Ly2vfnj3QE4/kruTNH7SVvxtjy+Y85kf33hZ9nW9Hv/CUhq/1Fb8P531xAvn3/iD7+TGvzXGL7cV/+QH+p4/65Hrl+Tunz1x/1Taij/y7KO3LD78oh25/b89xq+2FX/Fzid65+594MHc/g/H/TO7rfjPvPvDf77rqfuey40fYvy+tuKv3rnpq72De0/Ijf9g3D/97Y2fF3ec/vTg4F+H8uI/GePPbSv+ndtve9cd8286M/f4roz7Z6Ct+Gcff/91c/bed0zeuTO5vVuvnACvT4el77FuSMvt5pmdasgXvj1Uqb3nm5P+n9vNhjLG2pk3g/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeH064qT/+pH//cmB5ytpuTe98Uyptoz1s0JIZocQtmwd2bx13cZLhj536WWbN46sHxrZOjS6cevmK4dOfdvQ5tFN60euHLt3+O2n1B63MCS1ZXLMpLb37du3rzQwsS629++O3/HHpWf8n7+FMHzE7wcruf1fdtuGOw5v8jMjWbHvfRsuO+f3p30/3a6BtF8DOf0KOf36v+f9846v7/nLCSEMv2Gqfj36zHt/NaFD4xX746RKvaHWod6kr2k/6r1O+xP3V2XtuvWjw8X7t5yzHf/+quf+sfaKr/2ztn+rudvR4v6dvWLf+tK3Vp39/791da3iYD3uRfs7bkXsX9x/1XR/z0u3a17OdlVytuv63z741C+PuvGl7WG48uLiyW0XbVdPOgB6kje21G5soS9ZMKG+mq4fj3h83LKtGzYt23Lltrev2zByyegloxvfufzU5acPn3b6acvGt3xZl7c/tv/mFrf/wIyn+V/Y/vP4s7XxVNSvov0x1q/i/dHYo7znX9+5X/nGO2975JxaRdE4j2vXzyfpsm/sOC8PDeNt8r5qtl1xP8yavHrtfBrCULP98MJLZ4Yj/8e664rOQ41HpvFnRrJi32NL/v79M7636D21igNynm/sUJvn+Xqv9/dnfH9V0+NRNM5erf3bG8rpdvVnWq71a/ljj/TcvPtvX6z3b9ascMXI1q2bl9d+zknXn5Mc3bRf2doYffH4z3JId0uoD9Mm43VMT6j1L3v+jKtn92p/el9/snBSrH1NxPt2rbp5aXn1w7vz9nRyd63F2WFubZm8KWfN9ZkHlusdbtb+oTM+JvZr8CPfu/eT9/7s1Enj4+Taz6LtSnK266dP3fmNH37tP/6se9v1kfc+MfD3//nZpbWKQ+W8Uu912p+k8bxycghFz7/Fofl25D7/Ss23p+j5l21n//rN4w1lyv2h3Nbz9eQH+p4/65Hrl+Q+X/e0+ny9ekKpXPB8PVjGz6v3/JowUJIV+359w2HbH7pm5VG1iqJxXV+72bg+pYX8I2e7fnX+04OXDv2H/96988aP3nbPBX8YWfGlWsXBctyr6f6t5uzfeq9j3tm4f99x8aXr19TqD973v+myIP+Jp5ItV277/Mj69aObt7S2Xa2+nsZ2snu53dfTeHZbWLBdpUnbNXM3WtlfrT7fYv/XtL2/Jj7f+kPS1uvCtscXzPnMj2+8bGDSo9KGLiyl8Uttxf/TWU+8cP6NP/hObvxbY/xKW/FHnn30lsWHX7QjN/7tSRq/2lb8FTuf6J2794EHc+MPx/7Pbiv+M+/+8J/veuq+53Ljhxi/v739/+KO058eHPxrbvwnk7SdsfdIIdzz8ilra+Uk9KTPt9iPngn9CtlykimXMuVyY7kUc+i0gXKSTKyP66X1xzb0pZlP5dTHd2HVRbXlK7Ecsjemrj/YlBrO/c3qi96nAgC81qWf/38zvq2Ln/+Ppm+U8mcaYL9O87BFOXFjHrZ/PmfiJ4yL0vjx8XEecPAdYXhsee1Q7Y3+dOc5Y06WneeM7Zxw3MQY7c5zFs2/L8mUY79q8+WVhjw0NTmvqYQW5t8ntzP1/Htm84vnx4dumNStoYZ5q+zx60lnzJpd75Dpb2UsQt74yM6Lxes5BueFlePttTg+stfRxOOQvY4mtnNU5sTZ7nU0nY6P2O0pxsd4l4s/35h8/MIU+3f/8WseLXv8pnG8q2Prz/Tns4f+vOHMfh5mXjInfvoEO9jnDWN93I5Ki/OJn8yp79J84uPxdBH7tWeKvhwI5hOB16p4/X98jRjL/8fegP+/zHpF70Oz7xpjvNzrhMrN+1OUd0y+Tq+vrdfx1Ts3fbV3cO8Jue9zHmz1up9NE0p9Bdf9FO3HpZly4X7MmaApyvey7RTt9+x1Gf1hblv7/c7tt73rjvk3nZm731fWXkiL9/s3JpTmFux3+UJO/FcjX5jVevzXS74w0/Nnr1o+kl74NFP5yCdy6qebj/RNulHfrnGHXD7Sc2D7BQAcOmL+X//8LM3//1dmvaK89cRMOcbLzVtz3p/k5a0fS5dXZNbvT3+jYrrvm88+/v7r5uy975jcvOX2VvPQ/zShNFCYh3aWN+fmESunul58dmH8mGfl5hH1PKuzPDG3//U8sbM8PTd+PU/vLI/O3T/1PLqzeYDc+PV5gEM9z53Z+brXbB6d/vrsTOXR5+bUTzeP7p90o75d4+TRAACvrpj/N17/P5b/P5JZr9P37bl5QZfet2f/Hkg9/pMHKq+c6bxvpvPWmc7rO7tetHhe4lDPi2d6Xmhm58nkxWk5ZG/UyIsBADgYxPx/dlrOz/87y09y87d6fiI/bxpffn6Q5OeH+vyX/F/+X0z+DwDw2hbz//hrj/Hv//2XtJz9u/Xy9Jz48nR5+lTjp+U8fabn2cwDmAcoZh4AAOC1pWc8U6r9nv01DfWfTpfZ37PP+73883PWb1Ul/e30i7ZuHh294LJNa0a2jl6w8dI1o1suuHzzuq1bRzfW1us0b8zNW9K8sSdU0v3RfL1s3jY//XsI83P+HkJ2/Rj26PEbk/8eQrbZ2QV/R2D/8Wutv3nHrzTF+n3TON558T+Vs35UP/4Xf/bkC9ZuuWDdxnVb142sX7dtdOJ6Y1lr3zS+NzPulml9b2bmxySl6X9/Z3f6UZrUj550f+R9P3uS6ceCtCcL8r7/IKffv/lvX//C8fv+eVcIw0eU39TR/ktW7PvP541+bOvu328a639pyv7X10z7VfR9pdn14/ZU1l+6ZetJay+9bGP2GyXbE+czSvVyN+czSvvnLdKnf7nF+YnVOfXTnZ8oT7pxcGp5fgIAgAni5//x/Wz8/PBr6RuoWN96nt7Z58e5efpwa3l69nvJivL07Ppxe1vN06sd5unZ9ovy9GbrN8vT8/LuvPifyFl/ulofJ51d55E7Ti5sbZxkv8+gaJxk15/uOEk6HCfZ9ovGSbP1m42TvOOeF//jOevnyRkPYWDSeOjsupzc8XBra+PhrZly0XjIrj/d8VDqcDxk2y8aD83WbzYe8o5vXvxzctZv1cTxMXaiGB8XoxdcfunmzzesN9Pff9F5/2b2+z/a1Xr/Z/a6r5nv/8xeVzbz/e/surLc/j/Z2UxY6/2f2e+DbNfMztc2XGeWXmxWdP1Z0Tzuqpz66c7jzpp04+BkHhdePTH/jx/3xPz/pnTZ7Y+BDv3vSfO9x03jd+l7zIrex3g9n6Kxg4DXcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDW9FYWjS93X79l7zlHfeg3Xx59+ZqP/mLDtW+56kd/Gbr4A7++u++Hr+xac+zaP3zwsIvv/9yZO2/77kMvzb33X88WBh6oLU5Mi9UQkueTEKq/3PPNr+x67MixuiSEUE4GtoewIFn40IIkE2H4HyGENfV+TrzznpdPWTu2vPam3gn18zNBstsV+suxPxP6Ga4o3CIOQdV0nG3be/lJ4Y/vX3Xdbxf/9Cc9O57bvn+VpNownkKYd2Hj43tCCLPT/2PiaFsUH5wuV4YQ+hoed0ZBv45rsf/LcspHp8tZ6bK/IE68f0mmXMqsly1HPZllX0F7ncrrR7vrFZmTKWdPRp3K62esX5Auf54uT5xm/HLt/1i4UhIq9e6vT/aPkdBw3JKQjB/Lar1cqh/bkG5/ppxkyqVMudyT2a7xdtOBVk6SifVxvUx9PB1X0vpjG8/VTZybU//GdFlNn6ivxHLI3qjpn3Sjvl3jYr/2TNGXA6HUcA5qVl8/8OnB6E/r+pOFkx6zr4l4365VNy8tr35490BOP5K7kzR+0lb8bY8vmPOZH9942aK8+BeW0viltuL/6awnXjj/xh98Jzf+rTF+ua34Jz/Q9/xZj1y/JHf/7In7p9JW/JFnH71l8eEX7cjt/+0xfrWt+Ct2PtE7d+8DD+b2fzjun9ltxX/m3R/+811P3fdcbvwQ4/e1FX/1zk1f7R3ce0Ju/Afj/ulvb/y8uOP0pwcH/zqUF//JGH9uW/Hv3H7bu+6Yf9OZucd3Zdw/A23FP/v4+6+bs/e+Y/LOncnt3XrlBHh9Oix9j3VDWm43z+xUQ77w7aFK7T3fnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGvT764+9dPnve/jqypJCEnOOvuaiPeVZ61YMdRGuyPPPnrL4sMv2tFYt6iNOAAAAECxmIeX6jXVsChcnswORzddP84RHB1LycT67BxCjJOdI2g3TqlLccpdilPpUpyeLsWZ1aU4vV2KUy2IUw2txZk9ZZxSy/3p61Kc/i7FmdOlOHO7FGdel+LM71KcgSnjtD4OF3QpzsIuxTmsS3EO71KcI7oU5w1dinNkl+Jk55SnOw7npmselRdn/Ea5ME4lKdfvaDafHts5psN2+ltsJ/f1uMV2ZrfYznGZx5Wm2U61xXbe3GE7SYvtvLXDdkoF7cRxe0W2f7GdWGpx/F9ZGKfSUpxtXerPVV2Kc3WX4nyxS3G+1KU413QYB6BVMf/fn+8NhN7Ke0JfesbJzgLEfHfx+M/Jr3d5J6QY702Z+lnZeNkw2UQ9E2/xdPuXnUDIxFuSqe+ZEK9Sz0emiFdtjLc0c+ek7c32LzuhkOnfiZn63qJ42YkFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhBv7v61E+f976PrwpJGPvX1L4m4n3lWStWDLXR7q5VNy8tr354d2Ndb6WNQAAAAEChmIf31GuqobeyPPQmsyasV03nAappuTxQWw7OCyvHlslQabzclyyY8nGV9HHLtm7YtGzLldvevm7DyCWjl4xufOfyU5efPnza6actW7tu/ehw7WcIvQXxQgjj0w9brtz2+ZH160c3b6lVZvu/KH3corScpI8bfEcYHltem/Z/YUF7pUntzdyNiUfqlZwjCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwbu/YX6uZZxwH8eZOcJDtbbWT/srKehv4ZVYe29Uw6HcsLgoOtLT0MJJkeR3EtDk/XsrWjzrgV3GaLImwUSqU3lTrcHN7sjxvi/lCozGrBU4tsQ3ehF8qmk270QjoiPSdvTpImzWkcO233+VzkTZ7n9zy/98nFge97AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dCZro+OV8lh1OAoh6lFT7yKZS2fjuDRA36+/uPXHuZGTy1vHcpkBNgIAAAD6SnL4UHMkH3KZdEiHa6Y+LQ4tE2Em9wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8/k7XR8Up5rHppFELUo6beRTKXzsZxaYC+b7339BdeHxn5R+tYcYB9AAAAgG7aU36Sw1PNkXwohiVhKLqm66oFHbt11iX7LJxlXeezg151S2ZZd90s6z7Vp25d47ojAAAAwIUvyf+Z5kgh5DLzeub/frk+qVvUUZduXAf5rQAAAADw/0nyf645Ugy5TLGZ12eb9xd31CXr+/3fPlm/rMf6fv/PX9u4+j89AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFw4Jmuj45XyWDUdhRD1qKl3kcyls3FcGqDvqpeG/3XboUcWt47lMgNsBAAAAPSV5PCZ6J0PucxwGAqXTuX+kVv2P/vVZ58fDSFMx/xsNuzYsG3bvaumX5O6lUcODf3o8DvfO6Nu5fTrnB0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD40EzWRscr5bHqJVEIUY+aehfJXDobx6UB+r75pa/87cnjL7zdOlYcYB8AAACgvySHz2T/fCiGbMiGq6Y+tWb901Id63s9MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHvd954Fvb5iY2HjvRfcmRNMnPF/uxxtvLqQ3c/2XCQAA+LAtClGon6Or18/1XQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOeDydroeKU8Vs1HIUQ9aupdJHPpbByXBugbv3g0N+/kS6+0jhUH2AcAAADoL8nhM9k/H4phKAyFK6c+dXsmMJX/Cx/hTQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnlcna6HilPFadF4UQ9aipd5HMpbNxXBqg7xM7933x4Pwf3to6lssMsBEAAADQV5LDs82RfMhlPh1y4drG54n2BVG6ce3+XGBm3da2ZcOzXldrW5ee9bpdHSfLNE4zvS6f7FeYvjbXlc5cV2pZVwzN9qW2dWFP26p5fe4zAAAAwBxK8n+uOVIIuUyuJef+vK2+IOcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1M1kbHK+WxahSFEPWoqXeRzKWzcVwaoO8Dv//kZd/4xe7trWPFAfYBAAAA+kty+Ez2z4diWBg+ERZO5f5QaK9P6v5dOXXw8f/8fXkIK646NpLpuf9v37z55c6XEFLtRakQ5jf6RT36/e6Pj9+/tH7qyRBWXJm+9lz7tW8Z15+rbFy77fCxrWf5YgAAAOAikuT/oeZIIeQy9/TM/0nyPqf8P//+nb+6ovHaSOQdK1KFRr9Uj35fXvr0X5et/uc7p/P/2fp9bt/mg1e0NZwe6RDF9fLm7euO3XAglZx6un+6o3/yvXztu2//d9OOx05N98+HfGN8QaZb/zNfO1wS1ydSe6trPthba++f6XH+R/7wyvHfLNj9/un+7y0abva/7iznP3v/4dsf3XPjvkPr2vuHEErd+r/7/q3h6j/f/XDn+Yc7Nm795ltfO0Rx/cjiEwdW7y/e1N4/6uiffP+/PP7Enp899oPnk/7Jb0WWL5lt/1RH/9d2Xb7z1YfWL2jvn+px/pfveH1kS+n7f+o8/10Dn/+p65+5840N8YOdUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeXydroeKU8Vk1FIUQ9aupdJHPpbByXBuj71m1H371j909/0jpWHGAfAAAAoL8kh89k/3wohmzIhuGp3P9cZePabYePbQ2F6dmocc1MbLlv22c2bdl+z11zdOcAAADAbCX5P9McKYRcZmkYauT/8ubt647dcCCV5P9Ukv833T2xcUVo1r226/Kdrz60fkHzOUEIUz8LyJ+u+/xM3S03Hy2c+Mu3lnWtWzVTd2TxiQOr9xdvSupCa93K0Hw+8dT1z9z5xob4web9tdZ99ptbJhqPJ5J9h29/dM+N+w6ta56jcR1u7JvUTaT2Vtd8sLeW1KUb13zj3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAmSZro+OV8lg1pEOIetTUu0jm0tk4Lg3Qd83SXz982ckXFraO5TIDbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoK+/UTGkfZxwH8eXaTN5vdpE3aF4yKaVoVpR4sCiJ6UVGRVqTgqVKk2tqDKAgiSj2YSiuWqngRrF6KqKBGKSjYWCytkor/ihcPKihUD0IpBrRL8aCSzTPbzSTj6qQK6ucDw7PPMzPf+c08Tya7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD9KX89Iqz2y8/7mLefc8NGjd5185KZ37t1+0cOvfje2+boP99VfOjW1ZeXWL69fvvnA3Wsn9zx/+KfBt3451jX4odlmderWQognYgi1d6efeWzq47NmxmIIoRqHxkMYjssOD8dcwpqfQwhb2nXO3fnmycu3zrTbd/fNGV+aC8nfV2hUs3pmDc2tl3+XWlpn25oPXhK+vnbDjk9XvPF678Tx8dOHxFrHegphyabO83tDCP1pm5GttpHs5NSuDyHUO867sktd5//B+i8t6J+b2v+lttElJ9u/Ktev5I7L9zO9ubbe5XqLVVRH2eO6Gcj18y+jxSqqMxsfTu3bqV39J/Or2RZDJYaedvn3xNNrJHTMWwyxNZe1dr/SntuQ7j/Xj7l+Jdev9ubuq3XdtNCqMc4db+mfd3z2Ou5Jx6/sfFcv4NaC8bNTW0t/qKeyfsh/mNWY96F9Xy1ZXdO/U8vfodLxDlpovD3xaTIaaawRl80759cFZPumNjxxYXXje0eGCuqI+2LKj6Xyt30yPHD7a7seGCnK31RJ+ZVS+d+sO/rDbbteeK4w/+ksv1oq/7KD9RPr3t+5qvV8FligcTp7Pj2l8u849sGTK/5/50Rh/Xuz/Fqp/Gsmj/YNNg8eKpzfNdnz6S+V/9XVN377yuf7jxfmhyy/Xip/4+R9T/WNNi8uzD+UPZ9GufXz48QVX4yOfj9WlP9Zlj9YKv/l8T1Xvbh099rC+V2fPZ+hUvk3X3Bgx0Bz/3lF786490z95wT4b1qevmM9nvplf2cuVsfvhWfHema/8w2kbfBMXihn5jpL/sJ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//tQEzIg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) 5.231728827s ago: executing program 8 (id=2160): r0 = epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(r12, &(0x7f0000002200)=[{{&(0x7f0000000340)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000003c0)="c8079610af27f0dc5f8f2cabea43cb1a88728e645d4650a57ed2fc84692f47a0be38453f2b37a484a53f956be2e8c84a3eedcb5b3c79ccf1cf9213d325f883e035fe3a3ac9007488ffeb37b36e8d2cc05adb458376eca7f46dbc4dbcdebd0954a6e89174f02b8888a77952c5abaccf5b062a75b220303c5d9f57eb08fc2c4333cb7b3cf9248065d1b5", 0x89}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000740)}, {&(0x7f0000000840)="982a1cdc87a76990524b997a5f7b22ae76c9744637ec3874cc485da05256fa9b7df02942fb34165045d487ae466b4a947d832753742cee2d62811e31bf9c4a00899d5877cf4ba47eb15c77d5618d7eca5a926b3c3ebeda8ac0c3bc6d8899b26a0dbc597c6db72db96dbc785e18b215205292c58848da79cb4fe5903f82", 0x7d}, {}, {&(0x7f0000000940)}, {&(0x7f0000001a00)="6482e9d685c744b2fd86ab4c6ab8012f09faaef3ce04cdd481eb3f400e2d7daa7077305e3b0430a0ad6c216fa2bcd7e806ab7ea3892d5a305e0cf487fff7ba32be2a39f756a28b7b8268aec02d21b7d3c2c073c3a54e97d73d4cd3e876a43e9630b2842c46b6474477b5be30ec41eb59fcc339f2856eb6e982c64aeb66286518818e22faa803caeada53553a4b3069e842f355608b621d9d64f0377912d8e9a5bdf73a60de5ad1e9ccb4f6452fbc7652f9592ee0f332c159a16d84abf5b74be39d4ab478491d35eaafe8ccfedf267cb432a9a18b7f7b9091995b95157ec33cb727ff01e0843a960b85abafe70a960a5e", 0xf0}], 0x7, &(0x7f0000001b80)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x18}}, {{&(0x7f0000001bc0)=@xdp={0x2c, 0xb, 0x0, 0xd}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c40)="b9c9bd6a61569e803e8fa899bd7ce5aa63de33a9bd53b646c0fffee7f7ea9651b355910fe20c0590b045236f988e91f4204d705e8caedaf857e1876187645c048941f8e2bc4e404d896d907cc74935e68c16b29c62b852ab9d0d191fce8aabae48b7d0dd7accd3f81529a335eccad943530a21d0492feb869fc2b7b9620116bf7185312d17574d8ee20c2402d1e71cfbb23f18ef843cded36fe2a83dcf44bab9091982003c319312166aafc0a6761a2011df55d25f5fc4ecae5ce9e763b9d88bb57301b86e6a89997e1300333b91e02bf827c4f7a77deaa8f63abf", 0xdb}, {0x0}, {&(0x7f0000001e40)="0b24379e22", 0x5}, {&(0x7f0000001e80)="f84b9f6399cfcb9e7b03c92627e80bfcdaab163f5c880a235ed1fb0aebf9c9d50ded997606ac6a9522330f67a2bf83a9951d32e0417ec679eee261d97a63da809a6a895b6b13c915a58284e284271eb5aa6131244977eeaf7e89c13dcd21ed0b566cd0dc7b93dd2f9719b89a90654e30bca3951d850a6150e1626b1b8eef57849166314257d918", 0x87}, {&(0x7f0000001f40)="9b1ee4deeb8f254ccd025075af0a49371e5e1a78c70524bcfdb8f86b32bce4dcf6096361d4ce17f8771e64a24de01f2a69e66e4c2086d542eb2f3e7c9543e1c14ee2a6d004232dc2afe961f7bdfa362d8c14a0b038ebe4681ae9faafb85ef92820e9de3a210cdf304cd59a052a4f330a1957601cf888d0f6ace5364e3ba93f4147f9ea51ad0a75034937670c4535b5e376ae3dd6c65c0300a02b7e95566fa147cdb7ab6e8dc5afcbea74003881cc5d27ba2e452dca4200859c0a21e914", 0xbd}, {&(0x7f0000002000)="364e5182cc88d0808508c1cc62f806d5f98d4f2551e2ebaeb521fbc03b80c0f63afa8bde624e075e52495da724d2711e9ea77a61b63bf4067f8da6174d440d146734a2b2e634c563a69d9e3f707253b0", 0x50}, {&(0x7f0000002080)="09d4106086244c057e67c993dd9e1d974e3fae8f477d3682a609db01d78255c6d84f75616ff78fdce0", 0x29}], 0x7, &(0x7f0000002140)=[@txtime={{0x18, 0x1, 0x3d, 0x1c}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa78a}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x456c}}, @mark={{0x14, 0x1, 0x24, 0x53e7cb54}}], 0x90}}], 0x2, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r11, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000300)={0x60000001}) epoll_wait(r8, &(0x7f0000000180)=[{}, {}], 0x2, 0x4000005) 5.210074314s ago: executing program 2 (id=2161): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000000), 0x4) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 5.060613457s ago: executing program 9 (id=2162): socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='udt trusted:'], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="737461636b2026ae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f"], 0x564) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b72800000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00008000000000000040000f50000009502000073f0238e9110646f2441d063d6a1939d561be9472eeb6d61ccb99df97621f627a5987dea0b03470fcf814d04282778c11ec856d43b14e993eb29b719395fd65e8b76f1cdba362daf834bd135de99e59ab3af530fc6c0e2a0577e151924f8d97ecffac54c15b31abe3d86b6b272be0fc1626ef64f9831f5b91f756ddfbe96cb08ac1d343821687196335820f2605a402431b595a5dcf50ffdda2c8c37ded10293ae066fe9abe27cc042ba634e4532372a0b63433e30789995046c6ff2185f4a688db682ace1dd15741e1cbc1df5e480398e046fefcb1375c54a82b1b9a6c76859c2bd1dd95c12d0fff6aab2b03c5d13c8"], 0x208) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r6, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r7, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400e5000106010100000000000000d0cae06700"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 4.462218018s ago: executing program 0 (id=2163): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) unshare(0x2040400) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 4.290127151s ago: executing program 2 (id=2164): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, 0x0) 3.483970584s ago: executing program 0 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r2, 0x0) listen(r3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4000091) syz_usb_connect(0x0, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010255345c100d1001cbf5810102030109023400010202400b09048b7f02dca4670909050110200004080f080b"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2a, 0x15}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}]}, 0x3c}}, 0x4004000) request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='#/]#\x00', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, r5, 0x10, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x8000) 3.375762085s ago: executing program 8 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8040, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x4468, &(0x7f0000010780)="$eJzs3c9rG1ceAPA3spPY2SRrZxPIwsIKNrDL7mLsnHbrQB3H+WEnborbhNKLIttK4la2gi2XHnJwb4GeCj2UHkIK7cmnkEOv6Z/QSw89pKceQttDoRQKoS6SRrZmZNVKsGycfj4Hj+a9ee99re/M6I1AM5lY+dbcUnZuKZtfyJZmbiydyr5TKi7PF0JmhyTG74nH37dz49OeTuwnu73v/ZFdOXv+tWunQvhi9qsna2tra6GiO2xqqOH1zz/emWlc1mVSbSr9bt7bdnkzhHCsKa6KrhDCG5+HEIUQzsRlo/GyN4RwONTqrt15/3p2m6J58LhwOvd08u7D4ZMTq/cetv7foxA+Lv71vzfnv/9H1/A3/96m4QEAAAAAAAAAAAAAAAAA2OMuTF25+urgUHgUhe7VqOH3ur1xfbxdq9/Hrm2bv7eM8bv0j4oBAAAAAAAAAAAAAAAAAADgBbPx+/9sdDRqfl73WLwcadF+7eXOx0jnjL9yZezc4FD8/Peoqf5/cdEPZ7pC/ybPfU8///1Mqv3mz39vHud51eOrj9sXosxAYj2TGRgI4ZP4we8nooOZYmmp/J8bpeWF2W0LY89K5r92o41EduJ7b7Sb/9FU/51//v9fmvamyvr17dvFXmjJ/He13O7T96K28n821W4n8v+s3E5mQzL/3dWy3sYNRmrvViX/H3Rvnf+xVP9t5b/32eM+EkLIRpWm2cQZoDKHqZS3mq+QlMz/vmpZ4tQZv5Gtjv9fUvk/l+p/t87/K+kPIjaVzP/+allPYouN47//p/hWXb9z/J9P9b8b+a/Ev1ItnPqss2Pvfcn8H6gVdic2qb6T7Z7/LySa7u9Y/q9m4jiPRIk9YDWqlbe6Xx1Jyfz3NNVvXP9l2pr/XUy136nrv/q4fSFUr//qp/9/RbXrPzaXzH/TROzr4/GFVLvH/3iqg06f/0eq8z+eVzL/B6tlyblzX/Vvu/mfSPWfzv+3f9qeuKuzkp56/jfOJ78eqJXfN/9rSzL/cXIyjd8DrFT/Vud/0dbz/0up/ndj/lfZOVZSF/n7OxvEnpXM/6F09fHh+EUl/1+28fl/OdVB5/MfwqDv+p5bMv+HW25XPf57ts7/ZKpdp/P/zy3q059HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+a0XjZF6LMQGI9kxkYCOFsvH4iHIym87O56WJp5u2lEMbi8mw4Gt0slqbzxdzcQmm2kMsXi6WZEM7F9cdCT7RULJVz8/nb59f76o1uFfKL5elCvhxCuBCX/y0crvc1PVeez98OIVxcr/tzprR4+1Z+ITc7t/jS4ODgYBhfj6E/KrxbLiyUa6PXakOYWG/bFzUEV62+tB7Loeit0vLiQr5YLb/c0KZYmskXG9pMxnUfhv6ovLi8MJMvF3LF0s36eLtpJF6OjU+9PnV5qKn+elRbju5sWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8o0fD//8ohNBdW8uEEEbqL6LNtn/wuHA693Ty7sPhkxOr9+4/abUdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVdukYJWIgCgPwm7GJncewCklnG1FECyOCJ9BjeBg9ipfwDhYWtlaCzCxhdwLb7Fbf10zIT/IezA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs5+ZxfnoYxogUXY6Ij5fPr2V+V863y/b3J0fYkcO5vZ+vroex3HvayS/Kq+8p/6e/P6/P0Tir962ebPqUlv+uz6ere7X61jXKVverc88i5T4ippKfp5z7fnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W2fRtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzAoAAP//v5Ynrg==") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f0000000000)=ANY=[], 0x4000) 3.190007367s ago: executing program 2 (id=2167): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea4}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) 1.131397581s ago: executing program 2 (id=2168): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001840)) sendmmsg$inet(r0, &(0x7f0000001a80), 0x0, 0x200400c0) r1 = open$dir(&(0x7f0000001b40)='./file0\x00', 0x4001, 0x1a6) fchmodat(r1, &(0x7f0000001b80)='./file0\x00', 0x12) mknodat(r1, &(0x7f0000001bc0)='./file0\x00', 0x8000, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000001c40)={0x1f, @none, 0x4}, 0xa) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000001c80)={0xf000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d00)={&(0x7f0000001cc0)='xen_cpu_load_idt\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001d40)={0x0, 'bond0\x00', {0x2}, 0x2}) 660.696568ms ago: executing program 9 (id=2169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) 412.864058ms ago: executing program 8 (id=2170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@nobarrier}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (fail_nth: 13) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) pipe(&(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x800000}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 81.102074ms ago: executing program 0 (id=2171): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x4000, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @private1, 0x9}, 0x1c) close(r0) 0s ago: executing program 2 (id=2172): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000c40)="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", 0x586}, {&(0x7f00000000c0)="924c7c18e709b52c12046e7084278515c67c54facb0c69", 0x17}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000000000000000100000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140fffffffff000000002400000000000000000000000700000001"], 0x48}, 0x4) kernel console output (not intermixed with test programs): /u8:2: Failed to release dquot type 1 [ 1069.707991][T11943] loop4: detected capacity change from 0 to 32768 [ 1069.747492][T11943] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1070.357090][T11957] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1865'. [ 1070.471764][T11957] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1865'. [ 1070.538074][T11943] XFS (loop4): Metadata corruption detected at xfs_inode_buf_verify+0x613/0x6b0, xfs_inode block 0x4880 xfs_inode_buf_verify [ 1070.556850][T11943] XFS (loop4): Unmount and run xfs_repair [ 1070.565999][T11943] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1070.576571][T11943] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1070.585860][T11943] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.598480][T11943] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.607802][T11943] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.609986][T11946] loop8: detected capacity change from 0 to 32768 [ 1070.617064][T11943] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.639846][T11943] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.652742][T11943] 00000060: 00 00 00 00 d4 0c 9f e3 00 00 00 00 00 00 00 00 ................ [ 1070.667838][T11943] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1070.677164][T11943] XFS (loop4): metadata I/O error in "xfs_imap_to_bp+0x128/0x2e0" at daddr 0x4880 len 64 error 117 [ 1070.688661][T11943] XFS (loop4): Failed to read root inode 0x2440, error 117 [ 1070.699506][T11943] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 1070.709906][ T5883] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1070.736542][T11960] loop9: detected capacity change from 0 to 64 [ 1070.756105][T11946] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1071.009573][ T30] audit: type=1800 audit(1753709864.386:902): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1863" name="file1" dev="loop8" ino=17059 res=0 errno=0 [ 1071.120155][ T9268] ocfs2: Unmounting device (7,8) on (node local) [ 1071.371534][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1071.642178][ T5883] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1071.798033][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1071.943206][ T5883] usb usb7-port1: attempt power cycle [ 1072.351480][ T5883] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1072.408527][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1072.462667][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1871'. [ 1072.691476][ T5883] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1072.706022][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1872'. [ 1072.743864][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1072.808004][T11977] cgroup: Name too long [ 1072.867209][ T5883] usb usb7-port1: unable to enumerate USB device [ 1073.611783][T11991] overlayfs: failed to resolve './file0': -2 [ 1074.114376][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1074.365054][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1074.441020][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1074.472819][ T5883] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1074.482416][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.493365][ T5883] usb 5-1: Product: syz [ 1074.497796][ T5883] usb 5-1: Manufacturer: syz [ 1074.502813][ T5883] usb 5-1: SerialNumber: syz [ 1074.512971][ T5883] usb 5-1: config 0 descriptor?? [ 1075.143658][ T5883] gs_usb 5-1:0.0: Configuring for 3 interfaces [ 1075.779424][T11995] comedi comedi4: bad chanlist[1]=0x00001000 chan=4096 range length=2 [ 1076.157577][ T5883] gs_usb 5-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 1076.243441][T12003] loop9: detected capacity change from 0 to 40427 [ 1076.270083][T12003] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1076.280714][T12003] F2FS-fs (loop9): build fault injection rate: 19 [ 1076.396739][T12007] syzkaller0: entered promiscuous mode [ 1076.402710][T12007] syzkaller0: entered allmulticast mode [ 1076.470239][ T5883] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 1077.053720][ T5883] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1077.183925][ T5883] usb 5-1: USB disconnect, device number 13 [ 1077.905870][T12023] loop4: detected capacity change from 0 to 256 [ 1077.958269][T12023] exfat: Deprecated parameter 'namecase' [ 1077.968079][T12023] exfat: Deprecated parameter 'utf8' [ 1078.160097][T12029] overlayfs: failed to resolve './file1': -2 [ 1078.262916][T12023] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1079.067590][T12031] loop8: detected capacity change from 0 to 32768 [ 1079.131059][T12031] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1079.977385][T12031] XFS (loop8): Ending clean mount [ 1080.422054][ T9268] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1080.636032][T12046] loop9: detected capacity change from 0 to 40427 [ 1080.649481][T12046] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1080.662045][T12046] F2FS-fs (loop9): build fault injection rate: 19 [ 1080.669037][T12046] F2FS-fs (loop9): Unrecognized mount option "io_bits=00000000000000000033" or missing value [ 1080.751356][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 1081.359080][T12059] 9pnet_fd: Insufficient options for proto=fd [ 1081.666828][ T5883] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1081.891497][ T5883] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.905877][ T5883] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1081.921995][ T5883] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1081.935432][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.044058][T12064] overlayfs: failed to resolve './file1': -2 [ 1082.057638][ T5883] usb 10-1: config 0 descriptor?? [ 1082.357727][T12066] netlink: 'syz.2.1905': attribute type 4 has an invalid length. [ 1082.369582][T12066] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1905'. [ 1082.452233][T12066] : renamed from bond0 (while UP) [ 1082.560978][ T5883] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 1082.696677][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1906'. [ 1082.769350][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1906'. [ 1082.999641][T12046] loop9: detected capacity change from 0 to 1024 [ 1083.033833][T12046] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1083.053606][T12046] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1083.082523][T12046] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1083.096152][T12046] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1083.108947][T12046] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.1898: Inode bitmap for bg 0 marked uninitialized [ 1083.136365][T12046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.161243][ T9791] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1083.363311][ T9791] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.374516][ T9791] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.387195][ T9791] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.398052][ T9791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.417606][ T9791] usb 9-1: config 0 descriptor?? [ 1083.672247][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1083.684504][ T9791] usb 9-1: string descriptor 0 read error: -71 [ 1083.696577][ T9791] usb 9-1: USB disconnect, device number 15 [ 1083.815734][ T5883] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 1083.824464][ T5883] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 1083.849825][ T9787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.896468][ T5883] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -71 [ 1083.915187][ T5883] usb 10-1: USB disconnect, device number 22 [ 1084.134509][T12089] Mount JFS Failure: -22 [ 1084.200216][T12089] loop9: detected capacity change from 0 to 256 [ 1084.224633][T12089] exfat: Unknown parameter 'jfs' [ 1084.353976][T12092] netlink: 'syz.9.1912': attribute type 7 has an invalid length. [ 1084.362289][T12092] netlink: 'syz.9.1912': attribute type 8 has an invalid length. [ 1084.528790][T12093] loop9: detected capacity change from 0 to 128 [ 1084.559260][T12093] befs: Unknown parameter 'syzkaller' [ 1085.174780][T12101] overlayfs: failed to resolve './file1': -2 [ 1085.432498][T12105] loop8: detected capacity change from 0 to 512 [ 1085.526272][T12105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.843794][ T9268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.363819][T12118] FAULT_INJECTION: forcing a failure. [ 1086.363819][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.379943][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.8.1922 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1086.380102][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1086.380196][T12118] Call Trace: [ 1086.380261][T12118] [ 1086.380318][T12118] __dump_stack+0x26/0x30 [ 1086.380498][T12118] dump_stack_lvl+0x1df/0x270 [ 1086.380688][T12118] dump_stack+0x1e/0x25 [ 1086.380855][T12118] should_fail_ex+0x7dc/0x8a0 [ 1086.381085][T12118] should_failslab+0x15b/0x200 [ 1086.381281][T12118] __kmalloc_noprof+0x182/0x1310 [ 1086.381439][T12118] ? tomoyo_file_ioctl+0x3d/0x50 [ 1086.381591][T12118] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1086.381787][T12118] ? __msan_warning+0x1b/0x30 [ 1086.381911][T12118] ? filter_irq_stacks+0x13f/0x190 [ 1086.382038][T12118] ? kmsan_get_metadata+0xfb/0x160 [ 1086.382224][T12118] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1086.382428][T12118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1086.382593][T12118] ? __srcu_read_lock+0x5e/0xd0 [ 1086.382771][T12118] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1086.382946][T12118] ? stack_depot_save_flags+0x35/0x7b0 [ 1086.383156][T12118] ? kmsan_get_metadata+0xfb/0x160 [ 1086.383306][T12118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1086.383425][T12086] loop6: detected capacity change from 0 to 32768 [ 1086.383507][T12118] tomoyo_file_ioctl+0x3d/0x50 [ 1086.383646][T12118] security_file_ioctl+0x141/0x590 [ 1086.383845][T12118] __se_sys_ioctl+0xbb/0x400 [ 1086.384075][T12118] __x64_sys_ioctl+0x97/0xe0 [ 1086.384341][T12118] x64_sys_call+0x1ebe/0x3db0 [ 1086.384569][T12118] do_syscall_64+0xd9/0x210 [ 1086.384754][T12118] ? irqentry_exit+0x16/0x60 [ 1086.384913][T12118] ? clear_bhb_loop+0x40/0x90 [ 1086.385102][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.385301][T12118] RIP: 0033:0x7fb7b2d8e9a9 [ 1086.385446][T12118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.385595][T12118] RSP: 002b:00007fb7b3cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.385756][T12118] RAX: ffffffffffffffda RBX: 00007fb7b2fb5fa0 RCX: 00007fb7b2d8e9a9 [ 1086.385882][T12118] RDX: 0000000000000000 RSI: 00000000000007ac RDI: 0000000000000003 [ 1086.385984][T12118] RBP: 00007fb7b3cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.386094][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.386199][T12118] R13: 0000000000000000 R14: 00007fb7b2fb5fa0 R15: 00007ffcf7faf8d8 [ 1086.386362][T12118] [ 1086.386777][T12118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1086.760781][ T5883] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1086.959683][ T5883] usb 10-1: Using ep0 maxpacket: 8 [ 1086.997668][ T5883] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1087.053882][ T5883] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1087.066914][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.075589][ T5883] usb 10-1: Product: syz [ 1087.080120][ T5883] usb 10-1: Manufacturer: syz [ 1087.085337][ T5883] usb 10-1: SerialNumber: syz [ 1087.165472][ T5883] usb 10-1: config 0 descriptor?? [ 1087.220223][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1087.233088][ T5883] usb 10-1: setting power ON [ 1087.242157][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 1087.327252][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1087.381426][T12116] dvb-usb: bulk message failed: -22 (3/0) [ 1087.387504][T12116] dvb-usb: bulk message failed: -22 (4/0) [ 1087.394116][T12116] cxusb: i2c read failed [ 1087.439491][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1087.455957][ T5883] usb 10-1: media controller created [ 1087.588164][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1087.739027][ T5883] usb 10-1: selecting invalid altsetting 6 [ 1087.745461][ T5883] usb 10-1: digital interface selection failed (-22) [ 1087.761485][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1087.793262][ T5883] usb 10-1: setting power OFF [ 1087.798368][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 1087.804602][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1087.817360][ T5883] (NULL device *): no alternate interface [ 1088.093858][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1088.115936][ T5883] usb 10-1: USB disconnect, device number 23 [ 1088.309306][ T30] audit: type=1326 audit(1753709881.786:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12127 comm="syz.6.1923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe717b8e9a9 code=0x0 [ 1088.511460][T12130] netlink: 'syz.6.1923': attribute type 21 has an invalid length. [ 1088.519757][T12130] netlink: 'syz.6.1923': attribute type 1 has an invalid length. [ 1088.530853][T12130] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1923'. [ 1089.012405][T12139] loop8: detected capacity change from 0 to 1024 [ 1089.028673][T12139] EXT4-fs: Ignoring removed oldalloc option [ 1089.036385][T12139] EXT4-fs: Ignoring removed orlov option [ 1089.095845][T12139] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1089.177964][T12139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.412568][T12139] EXT4-fs: Ignoring removed orlov option [ 1089.441405][T12139] EXT4-fs (loop8): can't enable nombcache during remount [ 1089.791429][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.799271][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.841231][ T8443] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1090.050624][ T8443] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1090.059248][ T8443] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1090.068769][ T8443] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.081673][ T8443] usb 7-1: config 220 has no interface number 2 [ 1090.088267][ T8443] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1090.102349][ T8443] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1090.110840][ T8443] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1090.118027][ T8443] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1090.184859][ T8373] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1090.256053][ T9268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.305844][ T8443] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1090.316545][ T8443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.325522][ T8443] usb 7-1: Product: syz [ 1090.329992][ T8443] usb 7-1: Manufacturer: syz [ 1090.335349][ T8443] usb 7-1: SerialNumber: syz [ 1090.371713][ T8373] usb 10-1: Using ep0 maxpacket: 16 [ 1090.392179][ T8373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1090.404274][ T8373] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1090.415045][ T8373] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.441146][ T8373] usb 10-1: config 0 descriptor?? [ 1090.636796][ T8443] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1090.645711][ T8443] usb 7-1: No valid video chain found. [ 1090.653429][ T8443] usb 7-1: selecting invalid altsetting 0 [ 1090.760774][ T8443] usb 7-1: selecting invalid altsetting 0 [ 1090.766958][ T8443] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1090.830683][ T8443] usb 7-1: USB disconnect, device number 36 [ 1090.921553][ T8373] holtek_kbd 0003:04D9:A055.0012: hidraw0: USB HID v0.06 Device [HID 04d9:a055] on usb-dummy_hcd.9-1/input0 [ 1091.109046][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.118624][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.136267][ T8373] usb 10-1: USB disconnect, device number 24 [ 1092.780708][ T5883] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1092.954250][T12164] loop8: detected capacity change from 0 to 40427 [ 1092.968447][ T5883] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1092.981996][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1092.999730][ T5883] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.009295][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.027248][T12164] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1093.036041][T12164] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1093.045791][T12164] F2FS-fs (loop8): heap/no_heap options were deprecated [ 1093.060489][T12164] F2FS-fs (loop8): build fault injection type: 0x0 [ 1093.078407][T12164] F2FS-fs (loop8): invalid crc value [ 1093.430264][ T5883] usb 7-1: config 0 descriptor?? [ 1093.452489][T12164] F2FS-fs (loop8): checkpoint=disable on readonly fs [ 1093.836349][ T5883] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1095.515574][T10299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1095.528844][T10299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1095.562014][T10299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1095.584695][T10299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1095.599769][T10299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1095.848418][ T8373] usb 7-1: USB disconnect, device number 37 [ 1096.270219][ T30] audit: type=1326 audit(1753709889.746:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27fe18e9a9 code=0x0 [ 1096.629526][T12197] bridge0: port 2(gretap0) entered blocking state [ 1096.638679][T12197] bridge0: port 2(gretap0) entered disabled state [ 1096.646239][T12197] gretap0: entered allmulticast mode [ 1096.655277][T12197] gretap0: entered promiscuous mode [ 1096.895639][T12200] FAULT_INJECTION: forcing a failure. [ 1096.895639][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.910209][T12200] CPU: 1 UID: 0 PID: 12200 Comm: syz.6.1952 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1096.910368][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1096.910454][T12200] Call Trace: [ 1096.910506][T12200] [ 1096.910560][T12200] __dump_stack+0x26/0x30 [ 1096.910730][T12200] dump_stack_lvl+0x1df/0x270 [ 1096.910909][T12200] dump_stack+0x1e/0x25 [ 1096.911061][T12200] should_fail_ex+0x7dc/0x8a0 [ 1096.911275][T12200] should_fail+0x2a/0x40 [ 1096.911460][T12200] should_fail_usercopy+0x2e/0x40 [ 1096.911598][T12200] _copy_to_user+0x35/0x120 [ 1096.911785][T12200] simple_read_from_buffer+0x1b2/0x340 [ 1096.911952][T12200] proc_fail_nth_read+0x1d2/0x2c0 [ 1096.912140][T12200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1096.912331][T12200] vfs_read+0x27c/0xf00 [ 1096.912456][T12200] ? stack_depot_save_flags+0x35/0x7b0 [ 1096.912647][T12200] ? kmsan_get_metadata+0xfb/0x160 [ 1096.912832][T12200] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1096.913125][T12200] __x64_sys_read+0x1fb/0x4d0 [ 1096.913306][T12200] x64_sys_call+0x39db/0x3db0 [ 1096.913499][T12200] do_syscall_64+0xd9/0x210 [ 1096.913659][T12200] ? irqentry_exit+0x16/0x60 [ 1096.913800][T12200] ? clear_bhb_loop+0x40/0x90 [ 1096.914004][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.914174][T12200] RIP: 0033:0x7fe717b8d3bc [ 1096.914302][T12200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1096.914443][T12200] RSP: 002b:00007fe718a79030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.914588][T12200] RAX: ffffffffffffffda RBX: 00007fe717db5fa0 RCX: 00007fe717b8d3bc [ 1096.914703][T12200] RDX: 000000000000000f RSI: 00007fe718a790a0 RDI: 0000000000000004 [ 1096.914804][T12200] RBP: 00007fe718a79090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.914902][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.914999][T12200] R13: 0000000000000000 R14: 00007fe717db5fa0 R15: 00007ffe3bcb9358 [ 1096.915144][T12200] [ 1097.641875][ T8373] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1097.691365][T10299] Bluetooth: hci0: command tx timeout [ 1097.707629][T12206] loop6: detected capacity change from 0 to 256 [ 1097.849336][ T8373] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1097.857879][ T8373] usb 9-1: config 0 has no interface number 0 [ 1097.865923][ T8373] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.877814][ T8373] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.889832][ T8373] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1097.899705][ T8373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.940849][ T8373] usb 9-1: config 0 descriptor?? [ 1097.981912][T12209] loop9: detected capacity change from 0 to 128 [ 1098.023501][T12209] zonefs: Unknown parameter 'explicit' [ 1098.201841][ T5883] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1098.354117][ T9791] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1098.404122][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 1098.419341][ T5883] usb 7-1: config 0 has an invalid interface number: 68 but max is 0 [ 1098.431175][ T5883] usb 7-1: config 0 has no interface number 0 [ 1098.437569][ T5883] usb 7-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 64 [ 1098.450315][T12186] chnl_net:caif_netlink_parms(): no params data found [ 1098.507264][ T8373] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1 [ 1098.513957][ T5883] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1098.521227][ T8373] hid_prodikeys: hid-prodikeys: failed to find output report [ 1098.521227][ T8373] [ 1098.531980][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.546473][ T5883] usb 7-1: Product: syz [ 1098.554095][ T5883] usb 7-1: Manufacturer: syz [ 1098.558995][ T5883] usb 7-1: SerialNumber: syz [ 1098.685096][ T9791] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.696014][ T9791] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1098.712035][ T9791] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1098.722610][ T9791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.812169][ T5883] usb 7-1: config 0 descriptor?? [ 1098.931532][ T5883] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1098.954796][ T9791] usb 10-1: config 0 descriptor?? [ 1099.059937][ T4026] usb 7-1: Failed to submit usb control message: -71 [ 1099.067563][ T4026] usb 7-1: unable to send the bmi data to the device: -71 [ 1099.078247][ T4026] usb 7-1: unable to get target info from device [ 1099.085335][ T4026] usb 7-1: could not get target info (-71) [ 1099.094415][ T4026] usb 7-1: could not probe fw (-71) [ 1099.184943][ T9791] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1099.195162][ T9791] dvb-usb: bulk message failed: -22 (3/0) [ 1099.262537][ T5883] usb 7-1: USB disconnect, device number 38 [ 1099.476060][ T9791] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1099.588884][ T9791] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1099.599331][ T9791] usb 10-1: media controller created [ 1099.695397][T12204] loop8: detected capacity change from 0 to 40427 [ 1099.717672][T12204] F2FS-fs (loop8): invalid crc value [ 1099.719911][ T9791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.802155][T10299] Bluetooth: hci0: command tx timeout [ 1099.928552][ T9791] dvb-usb: bulk message failed: -22 (6/0) [ 1099.942846][ T9791] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1100.026935][T12204] F2FS-fs (loop8): Start checkpoint disabled! [ 1100.061561][T12204] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1100.098993][ T30] audit: type=1800 audit(1753709893.576:905): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1953" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=10 res=0 errno=0 [ 1100.106754][ T9791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input27 [ 1100.193653][ T35] kworker/u8:2: attempt to access beyond end of device [ 1100.193653][ T35] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1100.210157][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1100.210315][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1100.210452][ T35] Workqueue: writeback wb_workfn (flush-7:8) [ 1100.210672][ T35] Call Trace: [ 1100.210734][ T35] [ 1100.210798][ T35] __dump_stack+0x26/0x30 [ 1100.210982][ T35] dump_stack_lvl+0x1df/0x270 [ 1100.211182][ T35] dump_stack+0x1e/0x25 [ 1100.211353][ T35] f2fs_handle_critical_error+0xa6f/0xc20 [ 1100.211573][ T35] f2fs_stop_checkpoint+0x65/0x80 [ 1100.211758][ T35] f2fs_write_end_io+0xb4b/0x1920 [ 1100.211975][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.212166][ T35] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1100.212343][ T35] bio_endio+0xe24/0xf80 [ 1100.212575][ T35] submit_bio_noacct+0x214/0x2710 [ 1100.212767][ T35] submit_bio+0x5a9/0x5d0 [ 1100.212942][ T35] f2fs_submit_write_bio+0x92/0x250 [ 1100.213106][ T35] __submit_merged_bio+0x16f/0x6a0 [ 1100.213266][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.213445][ T35] __submit_merged_write_cond+0x458/0x9a0 [ 1100.213676][ T35] f2fs_write_data_pages+0x4bb2/0x5480 [ 1100.214029][ T35] ? blk_add_trace_split+0x2c0/0x4b0 [ 1100.214202][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.214371][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.214534][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.214697][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.214882][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.215046][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.215215][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.215388][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.215555][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.215715][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.215878][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.216046][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.216202][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.216377][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1100.216566][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1100.216745][ T35] do_writepages+0x3f2/0x860 [ 1100.216958][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1100.217128][ T35] ? queue_io+0x761/0x790 [ 1100.217314][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.217492][ T35] __writeback_single_inode+0x101/0x1190 [ 1100.217709][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.217946][ T35] writeback_sb_inodes+0xaa9/0x1c90 [ 1100.218274][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.218490][ T35] wb_writeback+0x4ce/0xc00 [ 1100.218724][ T35] ? queue_io+0x461/0x790 [ 1100.218938][ T35] wb_workfn+0x397/0x1910 [ 1100.219114][ T35] ? kmsan_get_metadata+0xfb/0x160 [ 1100.219298][ T35] ? __pfx_wb_workfn+0x10/0x10 [ 1100.219472][ T35] process_scheduled_works+0xb8e/0x1d80 [ 1100.219744][ T35] worker_thread+0xedf/0x1590 [ 1100.219967][ T35] kthread+0xd59/0xf00 [ 1100.220102][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1100.220305][ T35] ? __pfx_kthread+0x10/0x10 [ 1100.220444][ T35] ret_from_fork+0x1e3/0x310 [ 1100.220586][ T35] ? __pfx_kthread+0x10/0x10 [ 1100.220732][ T35] ret_from_fork_asm+0x1a/0x30 [ 1100.220946][ T35] [ 1100.315249][ T9791] dvb-usb: schedule remote query interval to 150 msecs. [ 1100.323863][ T35] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1100.329499][ T9791] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1100.636317][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 1100.644101][ T5883] dvb-usb: error while querying for an remote control event. [ 1100.819446][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 1100.826822][ T5883] dvb-usb: error while querying for an remote control event. [ 1100.994018][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 1101.000267][ T5883] dvb-usb: error while querying for an remote control event. [ 1101.160899][ T9791] dvb-usb: bulk message failed: -22 (1/0) [ 1101.169733][ T9791] dvb-usb: error while querying for an remote control event. [ 1101.347070][ T9791] dvb-usb: bulk message failed: -22 (1/0) [ 1101.353458][ T9791] dvb-usb: error while querying for an remote control event. [ 1101.400198][ T8373] usb 10-1: USB disconnect, device number 25 [ 1101.560593][T12240] loop6: detected capacity change from 0 to 256 [ 1101.608414][T12240] exfat: Deprecated parameter 'utf8' [ 1101.614693][T12240] exfat: Deprecated parameter 'utf8' [ 1101.748317][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.758191][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.766452][T12186] bridge_slave_0: entered allmulticast mode [ 1101.776348][T12186] bridge_slave_0: entered promiscuous mode [ 1101.839360][ T8373] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1101.860294][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.868457][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.877112][T10299] Bluetooth: hci0: command tx timeout [ 1101.879050][T12186] bridge_slave_1: entered allmulticast mode [ 1101.896001][T12186] bridge_slave_1: entered promiscuous mode [ 1102.038839][T12240] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 1102.118825][T12238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1102.170050][T12186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.260093][T12186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.401755][ T9791] usb 9-1: USB disconnect, device number 16 [ 1102.665959][T12186] team0: Port device team_slave_0 added [ 1102.767005][T12186] team0: Port device team_slave_1 added [ 1102.795294][T12244] loop9: detected capacity change from 0 to 4096 [ 1102.998635][T12244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.010776][T12186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.018625][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.049521][T12186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.067424][T12186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.077693][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.111271][T12186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.489055][T12186] hsr_slave_0: entered promiscuous mode [ 1103.509064][T12186] hsr_slave_1: entered promiscuous mode [ 1103.522392][T12186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.530256][T12186] Cannot create hsr debugfs directory [ 1103.880861][ T9787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.941151][T10299] Bluetooth: hci0: command 0x0419 tx timeout [ 1104.839030][T12260] loop6: detected capacity change from 0 to 1024 [ 1104.913682][T12260] EXT4-fs: Ignoring removed oldalloc option [ 1104.923827][T12260] EXT4-fs: Ignoring removed orlov option [ 1105.034089][T12260] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1105.309158][T12260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.545176][T12257] loop9: detected capacity change from 0 to 40427 [ 1105.615923][T12257] F2FS-fs (loop9): invalid crc value [ 1105.986006][T12257] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1106.015191][T10299] Bluetooth: hci0: command 0x0419 tx timeout [ 1106.128883][ T30] audit: type=1800 audit(1753709899.526:906): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1965" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1106.246261][ T9787] syz-executor: attempt to access beyond end of device [ 1106.246261][ T9787] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1106.267868][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1106.268020][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1106.268128][ T9787] Call Trace: [ 1106.268185][ T9787] [ 1106.268249][ T9787] __dump_stack+0x26/0x30 [ 1106.268435][ T9787] dump_stack_lvl+0x1df/0x270 [ 1106.268625][ T9787] dump_stack+0x1e/0x25 [ 1106.268791][ T9787] f2fs_handle_critical_error+0xa6f/0xc20 [ 1106.269008][ T9787] f2fs_stop_checkpoint+0x65/0x80 [ 1106.269183][ T9787] f2fs_write_end_io+0xb4b/0x1920 [ 1106.269382][ T9787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.269577][ T9787] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1106.269769][ T9787] bio_endio+0xe24/0xf80 [ 1106.269997][ T9787] submit_bio_noacct+0x214/0x2710 [ 1106.270199][ T9787] submit_bio+0x5a9/0x5d0 [ 1106.270362][ T9787] f2fs_submit_write_bio+0x92/0x250 [ 1106.270554][ T9787] __submit_merged_bio+0x16f/0x6a0 [ 1106.270703][ T9787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.270881][ T9787] __submit_merged_write_cond+0x458/0x9a0 [ 1106.271055][ T9787] f2fs_write_data_pages+0x4bb2/0x5480 [ 1106.271363][ T9787] ? kmsan_get_metadata+0xfb/0x160 [ 1106.271535][ T9787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.271717][ T9787] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 1106.271941][ T9787] ? kmsan_get_metadata+0xfb/0x160 [ 1106.272101][ T9787] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1106.272357][ T9787] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1106.272585][ T9787] ? kmsan_get_metadata+0xfb/0x160 [ 1106.272745][ T9787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.272910][ T9787] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.273108][ T9787] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.273311][ T9787] do_writepages+0x3f2/0x860 [ 1106.273537][ T9787] ? _raw_spin_unlock+0x30/0x50 [ 1106.273741][ T9787] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1106.273964][ T9787] filemap_fdatawrite+0x207/0x260 [ 1106.274230][ T9787] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1106.274471][ T9787] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1106.274821][ T9787] kill_f2fs_super+0x2ff/0x970 [ 1106.275040][ T9787] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1106.275248][ T9787] deactivate_locked_super+0xcb/0x3c0 [ 1106.275485][ T9787] deactivate_super+0x12f/0x140 [ 1106.275701][ T9787] cleanup_mnt+0x6fb/0x780 [ 1106.275874][ T9787] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1106.276106][ T9787] ? __pfx___cleanup_mnt+0x10/0x10 [ 1106.276300][ T9787] __cleanup_mnt+0x22/0x30 [ 1106.276466][ T9787] task_work_run+0x206/0x2b0 [ 1106.276650][ T9787] exit_to_user_mode_loop+0x2a6/0x330 [ 1106.276844][ T9787] do_syscall_64+0x1e3/0x210 [ 1106.277014][ T9787] ? irqentry_exit+0x16/0x60 [ 1106.277189][ T9787] ? clear_bhb_loop+0x40/0x90 [ 1106.277375][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.277525][ T9787] RIP: 0033:0x7f0e6a18fcd7 [ 1106.277640][ T9787] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1106.277774][ T9787] RSP: 002b:00007ffec1458b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1106.277917][ T9787] RAX: 0000000000000000 RBX: 00007f0e6a210b55 RCX: 00007f0e6a18fcd7 [ 1106.278016][ T9787] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1458bd0 [ 1106.278112][ T9787] RBP: 00007ffec1458bd0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.278213][ T9787] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec1459c60 [ 1106.278318][ T9787] R13: 00007f0e6a210b55 R14: 000000000010e0d6 R15: 00007ffec1459ca0 [ 1106.278459][ T9787] [ 1106.642915][ T9787] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1107.289190][ T8829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.483440][T12186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1107.601872][ T8373] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1107.617884][T12186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1107.692130][T12186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1107.790090][ T8373] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1107.805442][T12186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1107.813447][ T8373] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1107.824485][ T8373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.022578][ T8373] usb 9-1: config 0 descriptor?? [ 1108.069925][ T8373] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1109.201348][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.377834][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.482477][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.490087][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.622756][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.630542][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.699466][T12304] loop9: detected capacity change from 0 to 2048 [ 1109.835266][T12304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.849742][T12304] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.268501][ T9791] usb 9-1: USB disconnect, device number 17 [ 1110.348396][T12310] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 1110.361138][T12310] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1111.180188][ T9787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.453149][ T8443] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1111.675900][T12327] loop6: detected capacity change from 0 to 1024 [ 1111.700665][ T8443] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.712479][ T8443] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1111.726347][ T8443] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1111.735877][ T8443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.753351][T12327] EXT4-fs: Ignoring removed oldalloc option [ 1111.760066][T12327] EXT4-fs: Ignoring removed orlov option [ 1111.880261][T12327] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1111.905356][ T8443] usb 9-1: config 0 descriptor?? [ 1111.961372][ T8443] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1112.077715][T12327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.163113][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.386341][T12337] loop9: detected capacity change from 0 to 22 [ 1112.399168][T12337] romfs: Unknown parameter '' [ 1112.462516][T12337] loop9: detected capacity change from 0 to 1024 [ 1112.566900][T12337] hfsplus: invalid extent max_key_len 0 [ 1112.605268][T12337] hfsplus: failed to load extents file [ 1112.619124][T12186] veth0_vlan: entered promiscuous mode [ 1112.678477][T12186] veth1_vlan: entered promiscuous mode [ 1112.817945][ T30] audit: type=1326 audit(1753709906.236:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.842247][ T30] audit: type=1326 audit(1753709906.236:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.865662][ T30] audit: type=1326 audit(1753709906.236:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.888664][ T30] audit: type=1326 audit(1753709906.236:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.912181][ T30] audit: type=1326 audit(1753709906.236:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.936976][ T30] audit: type=1326 audit(1753709906.246:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1112.961288][ T30] audit: type=1326 audit(1753709906.246:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27fe18e9e3 code=0x7ffc0000 [ 1112.984639][ T30] audit: type=1326 audit(1753709906.246:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27fe18d45f code=0x7ffc0000 [ 1113.007556][ T30] audit: type=1326 audit(1753709906.266:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f27fe18ea37 code=0x7ffc0000 [ 1113.031840][ T30] audit: type=1326 audit(1753709906.276:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27fe18d310 code=0x7ffc0000 [ 1113.166608][T12332] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1985'. [ 1113.399506][ T8829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.471115][T12347] loop9: detected capacity change from 0 to 256 [ 1113.496203][T12347] minix: Unknown parameter 'fsuuid' [ 1113.500582][T12186] veth0_macvtap: entered promiscuous mode [ 1113.571734][T12186] veth1_macvtap: entered promiscuous mode [ 1113.727632][T12186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.851810][T12186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.876749][T12349] program syz.6.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.919811][T12186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.929172][T12186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.941694][T12186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.954457][T12186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.464593][T12316] usb 9-1: USB disconnect, device number 18 [ 1115.206100][ T9791] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1115.421990][ T9791] usb 10-1: Using ep0 maxpacket: 16 [ 1115.494873][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.509662][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.521179][ T9791] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1115.534028][ T9791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.606182][ T9791] usb 10-1: config 0 descriptor?? [ 1116.532210][T12381] loop8: detected capacity change from 0 to 1024 [ 1116.568617][T12381] EXT4-fs: Ignoring removed oldalloc option [ 1116.576238][T12381] EXT4-fs: Ignoring removed orlov option [ 1116.617921][T12381] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1116.754382][T12381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.952081][ T8373] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1117.194940][ T8373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1117.206599][ T8373] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1117.220171][ T8373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1117.232313][ T8373] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1117.242947][ T8373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.409818][ T8373] usb 7-1: config 0 descriptor?? [ 1117.473577][ T8373] em28xx 7-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1117.482874][ T8373] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1117.753431][ T8373] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1117.786528][ T8373] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1117.825101][ T8373] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1117.835513][ T8373] em28xx 7-1:0.0: No AC97 audio processor [ 1117.931722][ T8373] usb 7-1: USB disconnect, device number 39 [ 1117.943683][ T8373] em28xx 7-1:0.0: Disconnecting em28xx [ 1118.004244][ T9791] usbhid 10-1:0.0: can't add hid device: -71 [ 1118.011333][ T9791] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1118.037575][ T8373] em28xx 7-1:0.0: Freeing device [ 1118.076109][ T9791] usb 10-1: USB disconnect, device number 26 [ 1118.114634][ T9268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.837211][T12405] loop9: detected capacity change from 0 to 256 [ 1118.871369][T12405] exfat: Deprecated parameter 'namecase' [ 1118.877786][T12405] exfat: Unknown parameter 'umask’[Ñ>kŽÄ@R¦' [ 1118.971758][ T9791] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1119.062954][ T5873] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1119.113031][T12398] loop9: detected capacity change from 0 to 512 [ 1119.178578][ T9791] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.195748][ T9791] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1119.210938][ T9791] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.218740][T12398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.220224][ T9791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.233700][T12398] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.349084][T12398] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.2002: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1119.416991][T12398] EXT4-fs (loop9): Remounting filesystem read-only [ 1119.434361][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1119.448348][ T5873] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.457918][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.478935][ T5873] usb 7-1: config 0 descriptor?? [ 1119.488732][ T9791] usb 9-1: config 0 descriptor?? [ 1119.515065][ T5873] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1119.538258][ T9791] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1120.024711][ T9787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.638350][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.647149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.845623][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.857127][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.021864][T12432] program syz.9.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1121.237933][T12436] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[12436] [ 1121.815108][ T9791] usb 9-1: USB disconnect, device number 19 [ 1122.128862][ T8373] usb 7-1: USB disconnect, device number 40 [ 1122.391937][ T8443] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1122.505814][T12452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2015'. [ 1122.551537][T12450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2015'. [ 1122.568568][T12453] bridge0: port 3(gretap0) entered blocking state [ 1122.578940][T12453] bridge0: port 3(gretap0) entered disabled state [ 1122.586466][T12453] gretap0: entered allmulticast mode [ 1122.595830][T12453] gretap0: entered promiscuous mode [ 1122.606864][T12453] bridge0: port 3(gretap0) entered blocking state [ 1122.613993][T12453] bridge0: port 3(gretap0) entered forwarding state [ 1122.642295][ T8443] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1122.654978][ T8443] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1122.758826][T12450] gretap0: left allmulticast mode [ 1122.764623][T12450] gretap0: left promiscuous mode [ 1122.774052][T12450] bridge0: port 3(gretap0) entered disabled state [ 1122.783081][T12455] loop9: detected capacity change from 0 to 64 [ 1122.795850][ T8443] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1122.805786][ T8443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.814349][ T8443] usb 9-1: Product: syz [ 1122.818830][ T8443] usb 9-1: Manufacturer: syz [ 1122.824843][ T8443] usb 9-1: SerialNumber: syz [ 1122.924534][ T8443] usb 9-1: config 0 descriptor?? [ 1122.942805][T12445] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1122.982646][T12445] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1123.374852][T12445] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1123.407347][T12445] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1124.597474][T12445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.608033][T12445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.894520][ T9791] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1125.132943][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1125.148185][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1125.159743][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1125.170276][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1125.187442][ T9791] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1125.197144][ T9791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.271690][ T8443] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1125.303609][ T8443] dm9601 9-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 1125.437941][ T9791] usb 10-1: config 0 descriptor?? [ 1125.466804][ T8443] usb 9-1: USB disconnect, device number 20 [ 1125.475975][ T8443] dm9601 9-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 1125.730961][T12495] loop0: detected capacity change from 0 to 64 [ 1126.705359][ T9791] usbhid 10-1:0.0: can't add hid device: -71 [ 1126.712337][ T9791] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1126.752328][ T9791] usb 10-1: USB disconnect, device number 27 [ 1127.079424][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 1127.097613][T12494] loop8: detected capacity change from 0 to 40427 [ 1127.116391][T12494] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 1127.124082][T12494] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1127.163930][T12501] bond0: entered promiscuous mode [ 1127.169299][T12501] bond_slave_0: entered promiscuous mode [ 1127.182985][T12501] bond_slave_1: entered promiscuous mode [ 1127.207608][T12501] bond0: left promiscuous mode [ 1127.213572][T12501] bond_slave_0: left promiscuous mode [ 1127.226746][T12501] bond_slave_1: left promiscuous mode [ 1127.245432][T12498] loop6: detected capacity change from 0 to 4096 [ 1127.649964][T12494] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1127.657598][T12494] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1128.129541][T12512] program syz.0.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.960825][ T5873] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1129.167255][ T5873] usb 10-1: Using ep0 maxpacket: 32 [ 1129.207851][ T5873] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1129.216917][ T5873] usb 10-1: config 0 has no interface number 0 [ 1129.227151][ T5873] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1129.344868][ T5873] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1129.358066][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.366673][ T5873] usb 10-1: Product: syz [ 1129.371470][ T5873] usb 10-1: Manufacturer: syz [ 1129.376446][ T5873] usb 10-1: SerialNumber: syz [ 1129.457024][ T5873] usb 10-1: config 0 descriptor?? [ 1129.495890][ T5873] smsc75xx v1.0.0 [ 1129.774116][ T8373] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1129.952098][ T5873] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1129.966658][ T5873] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1129.975506][ T8373] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1129.977083][ T5873] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1129.988501][ T8373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1130.003266][ T5873] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1130.010238][ T8373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1130.031334][ T8373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1130.046518][ T8373] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1130.057356][ T8373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.286251][ T8373] usb 1-1: config 0 descriptor?? [ 1130.722700][T12535] loop6: detected capacity change from 0 to 2048 [ 1130.780601][ T8373] usbhid 1-1:0.0: can't add hid device: -71 [ 1130.787525][ T8373] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1130.841774][T12539] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1130.864713][ T8373] usb 1-1: USB disconnect, device number 13 [ 1131.400168][T12539] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1131.403496][T12539] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1131.408082][T12539] Remounting filesystem read-only [ 1131.946714][T12550] program syz.8.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.074375][ T5873] usb 10-1: USB disconnect, device number 28 [ 1132.111135][ T8829] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1132.966350][T12548] loop0: detected capacity change from 0 to 40427 [ 1132.992033][T12548] F2FS-fs (loop0): invalid crc value [ 1133.377555][T12548] F2FS-fs (loop0): Start checkpoint disabled! [ 1133.388764][T12562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1133.413155][T12548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1133.664717][ T8752] kworker/u8:3: attempt to access beyond end of device [ 1133.664717][ T8752] loop0: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 1133.793730][ T3723] kworker/u8:16: attempt to access beyond end of device [ 1133.793730][ T3723] loop0: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 1133.811688][ T3723] CPU: 0 UID: 0 PID: 3723 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1133.811853][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1133.811992][ T3723] Workqueue: writeback wb_workfn (flush-7:0) [ 1133.812194][ T3723] Call Trace: [ 1133.812246][ T3723] [ 1133.812293][ T3723] __dump_stack+0x26/0x30 [ 1133.812443][ T3723] dump_stack_lvl+0x1df/0x270 [ 1133.812607][ T3723] dump_stack+0x1e/0x25 [ 1133.812763][ T3723] f2fs_handle_critical_error+0xa6f/0xc20 [ 1133.812983][ T3723] f2fs_stop_checkpoint+0x65/0x80 [ 1133.813155][ T3723] f2fs_write_end_io+0xb4b/0x1920 [ 1133.813348][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.813538][ T3723] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1133.813709][ T3723] bio_endio+0xe24/0xf80 [ 1133.813934][ T3723] submit_bio_noacct+0x214/0x2710 [ 1133.814179][ T3723] submit_bio+0x5a9/0x5d0 [ 1133.814366][ T3723] f2fs_submit_write_bio+0x92/0x250 [ 1133.814533][ T3723] __submit_merged_bio+0x16f/0x6a0 [ 1133.814697][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.814879][ T3723] __submit_merged_write_cond+0x458/0x9a0 [ 1133.815076][ T3723] f2fs_write_data_pages+0x4bb2/0x5480 [ 1133.815410][ T3723] ? blk_add_trace_split+0x2c0/0x4b0 [ 1133.815588][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.815745][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.815907][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.816097][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.816254][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.816423][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.816582][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.816747][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.816904][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.817076][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.817234][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.817398][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.817557][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.817719][ T3723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1133.817895][ T3723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1133.818075][ T3723] do_writepages+0x3f2/0x860 [ 1133.818276][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1133.818447][ T3723] ? queue_io+0x761/0x790 [ 1133.818634][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.818817][ T3723] __writeback_single_inode+0x101/0x1190 [ 1133.819045][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.819220][ T3723] writeback_sb_inodes+0xaa9/0x1c90 [ 1133.819519][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.819726][ T3723] wb_writeback+0x4ce/0xc00 [ 1133.819952][ T3723] ? queue_io+0x461/0x790 [ 1133.820156][ T3723] wb_workfn+0x397/0x1910 [ 1133.820336][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1133.820505][ T3723] ? __pfx_wb_workfn+0x10/0x10 [ 1133.820666][ T3723] process_scheduled_works+0xb8e/0x1d80 [ 1133.820925][ T3723] worker_thread+0xedf/0x1590 [ 1133.821176][ T3723] kthread+0xd59/0xf00 [ 1133.821320][ T3723] ? __pfx_worker_thread+0x10/0x10 [ 1133.821541][ T3723] ? __pfx_kthread+0x10/0x10 [ 1133.821694][ T3723] ret_from_fork+0x1e3/0x310 [ 1133.821847][ T3723] ? __pfx_kthread+0x10/0x10 [ 1133.822007][ T3723] ret_from_fork_asm+0x1a/0x30 [ 1133.822234][ T3723] [ 1133.966574][T12567] syzkaller0: entered promiscuous mode [ 1133.986153][ T3723] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1133.988671][T12567] syzkaller0: entered allmulticast mode [ 1133.998357][ T3723] CPU: 0 UID: 0 PID: 3723 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1133.998560][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1133.998701][ T3723] Workqueue: writeback wb_workfn (flush-7:0) [ 1133.998945][ T3723] Call Trace: [ 1133.999021][ T3723] [ 1133.999093][ T3723] __dump_stack+0x26/0x30 [ 1133.999294][ T3723] dump_stack_lvl+0x1df/0x270 [ 1133.999510][ T3723] dump_stack+0x1e/0x25 [ 1133.999684][ T3723] f2fs_handle_critical_error+0xa6f/0xc20 [ 1133.999909][ T3723] f2fs_stop_checkpoint+0x65/0x80 [ 1134.000086][ T3723] f2fs_write_end_io+0xb4b/0x1920 [ 1134.000322][ T3723] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1134.000509][ T3723] bio_endio+0xe24/0xf80 [ 1134.000741][ T3723] submit_bio_noacct+0x214/0x2710 [ 1134.000959][ T3723] submit_bio+0x5a9/0x5d0 [ 1134.001123][ T3723] f2fs_submit_write_bio+0x92/0x250 [ 1134.001291][ T3723] __submit_merged_bio+0x16f/0x6a0 [ 1134.001454][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.001645][ T3723] __submit_merged_write_cond+0x458/0x9a0 [ 1134.001870][ T3723] f2fs_write_data_pages+0x4bb2/0x5480 [ 1134.002230][ T3723] ? blk_add_trace_split+0x2c0/0x4b0 [ 1134.002415][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.002593][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.002777][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.002961][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.003145][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.003321][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.003488][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.003659][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.003821][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.003998][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.004166][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.004388][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.004571][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.004759][ T3723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1134.004975][ T3723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1134.005179][ T3723] do_writepages+0x3f2/0x860 [ 1134.005413][ T3723] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1134.005621][ T3723] ? queue_io+0x761/0x790 [ 1134.005825][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.005999][ T3723] __writeback_single_inode+0x101/0x1190 [ 1134.006207][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.006394][ T3723] writeback_sb_inodes+0xaa9/0x1c90 [ 1134.006734][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.006977][ T3723] wb_writeback+0x4ce/0xc00 [ 1134.007219][ T3723] ? queue_io+0x461/0x790 [ 1134.007434][ T3723] wb_workfn+0x397/0x1910 [ 1134.007647][ T3723] ? kmsan_get_metadata+0xfb/0x160 [ 1134.007860][ T3723] ? __pfx_wb_workfn+0x10/0x10 [ 1134.008061][ T3723] process_scheduled_works+0xb8e/0x1d80 [ 1134.008359][ T3723] worker_thread+0xedf/0x1590 [ 1134.008643][ T3723] kthread+0xd59/0xf00 [ 1134.008805][ T3723] ? __pfx_worker_thread+0x10/0x10 [ 1134.009070][ T3723] ? __pfx_kthread+0x10/0x10 [ 1134.009263][ T3723] ret_from_fork+0x1e3/0x310 [ 1134.009431][ T3723] ? __pfx_kthread+0x10/0x10 [ 1134.009603][ T3723] ret_from_fork_asm+0x1a/0x30 [ 1134.009852][ T3723] [ 1134.016793][ T3723] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1135.329624][T12578] loop6: detected capacity change from 0 to 512 [ 1135.461298][T12578] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1135.585625][T12578] EXT4-fs (loop6): 1 truncate cleaned up [ 1135.597299][T12578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.708367][T12578] fscrypt (loop6, inode 18): Unsupported encryption flags (0x98) [ 1135.988608][T12587] loop8: detected capacity change from 0 to 1024 [ 1136.025341][T12587] EXT4-fs: Ignoring removed oldalloc option [ 1136.035592][T12587] EXT4-fs: Ignoring removed orlov option [ 1136.076211][T12587] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1136.138436][ T8829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.226308][T12587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.453528][T12587] EXT4-fs: Ignoring removed orlov option [ 1136.460032][T12587] EXT4-fs (loop8): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 1136.554488][T12587] EXT4-fs (loop8): can't enable nombcache during remount [ 1136.861531][ T9268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.240236][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1137.246944][ T30] audit: type=1326 audit(1753709930.716:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.273123][ T30] audit: type=1326 audit(1753709930.716:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.299694][ T30] audit: type=1326 audit(1753709930.716:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.331538][ T30] audit: type=1326 audit(1753709930.716:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.357661][ T30] audit: type=1326 audit(1753709930.716:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.383796][ T30] audit: type=1326 audit(1753709930.726:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f27fe18e9a9 code=0x7ffc0000 [ 1137.409187][ T30] audit: type=1326 audit(1753709930.726:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27fe18e9e3 code=0x7ffc0000 [ 1137.439051][ T30] audit: type=1326 audit(1753709930.736:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27fe18d45f code=0x7ffc0000 [ 1137.465965][ T30] audit: type=1326 audit(1753709930.756:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f27fe18ea37 code=0x7ffc0000 [ 1137.488832][ T30] audit: type=1326 audit(1753709930.776:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27fe18d310 code=0x7ffc0000 [ 1137.703174][ T8373] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1137.930290][ T8373] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.943030][ T8373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1137.954567][ T8373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1137.954733][ T8373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1137.954979][ T8373] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.987485][ T8373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.990749][T12603] loop6: detected capacity change from 0 to 64 [ 1138.144454][ T8373] usb 1-1: config 0 descriptor?? [ 1138.248027][T12603] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2072'. [ 1138.624345][ T8373] usbhid 1-1:0.0: can't add hid device: -71 [ 1138.631654][ T8373] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1138.731264][ T8373] usb 1-1: USB disconnect, device number 14 [ 1139.188774][T12622] loop6: detected capacity change from 0 to 8 [ 1139.990128][T12629] loop0: detected capacity change from 0 to 1024 [ 1140.034841][T12629] EXT4-fs: Ignoring removed oldalloc option [ 1140.043183][T12629] EXT4-fs: Ignoring removed orlov option [ 1140.108587][T12629] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1140.203594][T12629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.272827][T12629] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1140.843447][T12186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.539388][T12648] loop8: detected capacity change from 0 to 40427 [ 1142.572080][T12648] F2FS-fs (loop8): build fault injection rate: 690 [ 1142.579201][T12648] F2FS-fs (loop8): Image doesn't support compression [ 1142.593320][T12648] F2FS-fs (loop8): invalid crc value [ 1142.606655][T12653] loop0: detected capacity change from 0 to 40427 [ 1142.625439][T12653] F2FS-fs (loop0): build fault injection rate: 690 [ 1142.633147][T12653] F2FS-fs (loop0): Image doesn't support compression [ 1142.648347][T12653] F2FS-fs (loop0): invalid crc value [ 1143.130548][T12648] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1143.526773][T12648] syz.8.2084: attempt to access beyond end of device [ 1143.526773][T12648] loop8: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1143.587580][T12648] syz.8.2084: attempt to access beyond end of device [ 1143.587580][T12648] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1143.610252][T12648] FAULT_INJECTION: forcing a failure. [ 1143.610252][T12648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.624239][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.8.2084 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1143.624408][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1143.624505][T12648] Call Trace: [ 1143.624565][T12648] [ 1143.624623][T12648] __dump_stack+0x26/0x30 [ 1143.624812][T12648] dump_stack_lvl+0x1df/0x270 [ 1143.625013][T12648] dump_stack+0x1e/0x25 [ 1143.625187][T12648] should_fail_ex+0x7dc/0x8a0 [ 1143.625444][T12648] should_fail_alloc_page+0x222/0x240 [ 1143.625617][T12648] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 1143.625804][T12648] alloc_pages_mpol+0x328/0x860 [ 1143.625969][T12648] folio_alloc_noprof+0x109/0x360 [ 1143.626129][T12648] filemap_alloc_folio_noprof+0x9d/0x420 [ 1143.626293][T12648] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1143.626465][T12648] __filemap_get_folio+0xb45/0x1930 [ 1143.626633][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.626817][T12648] f2fs_write_begin+0x37e/0x4ad0 [ 1143.626981][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.627133][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.627283][T12648] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1143.627492][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.627675][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.627848][T12648] ? __pfx_f2fs_write_begin+0x10/0x10 [ 1143.628018][T12648] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1143.628196][T12648] ? __pfx_f2fs_write_begin+0x10/0x10 [ 1143.628367][T12648] generic_perform_write+0x3f4/0x10c0 [ 1143.628638][T12648] f2fs_file_write_iter+0x1f4e/0x4990 [ 1143.628792][T12648] ? kmsan_get_metadata+0xfb/0x160 [ 1143.628960][T12648] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1143.629217][T12648] vfs_write+0xb48/0x1580 [ 1143.629406][T12648] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 1143.629575][T12648] __x64_sys_write+0x1fb/0x4d0 [ 1143.629758][T12648] x64_sys_call+0x38c3/0x3db0 [ 1143.629957][T12648] do_syscall_64+0xd9/0x210 [ 1143.630164][T12648] ? irqentry_exit+0x16/0x60 [ 1143.630307][T12648] ? clear_bhb_loop+0x40/0x90 [ 1143.630478][T12648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.630647][T12648] RIP: 0033:0x7fb7b2d8e9a9 [ 1143.630767][T12648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.630909][T12648] RSP: 002b:00007fb7b3cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1143.631058][T12648] RAX: ffffffffffffffda RBX: 00007fb7b2fb5fa0 RCX: 00007fb7b2d8e9a9 [ 1143.631174][T12648] RDX: 000000000004fed4 RSI: 0000200000000980 RDI: 0000000000000004 [ 1143.631287][T12648] RBP: 00007fb7b3cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.631396][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.631488][T12648] R13: 0000000000000000 R14: 00007fb7b2fb5fa0 R15: 00007ffcf7faf8d8 [ 1143.631629][T12648] [ 1143.801685][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1143.801792][ T30] audit: type=1800 audit(1753709936.996:1018): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2084" name="file1" dev="loop8" ino=14 res=0 errno=0 [ 1143.919851][T12653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1144.137637][ T9268] syz-executor: attempt to access beyond end of device [ 1144.137637][ T9268] loop8: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1144.158870][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1144.159021][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.159110][ T9268] Call Trace: [ 1144.159165][ T9268] [ 1144.159217][ T9268] __dump_stack+0x26/0x30 [ 1144.159398][ T9268] dump_stack_lvl+0x1df/0x270 [ 1144.159577][ T9268] dump_stack+0x1e/0x25 [ 1144.159747][ T9268] f2fs_handle_critical_error+0xa6f/0xc20 [ 1144.159946][ T9268] f2fs_stop_checkpoint+0x65/0x80 [ 1144.160107][ T9268] f2fs_write_end_io+0xb4b/0x1920 [ 1144.160284][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.160458][ T9268] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1144.160620][ T9268] bio_endio+0xe24/0xf80 [ 1144.160831][ T9268] submit_bio_noacct+0x214/0x2710 [ 1144.161023][ T9268] submit_bio+0x5a9/0x5d0 [ 1144.161173][ T9268] f2fs_submit_write_bio+0x92/0x250 [ 1144.161328][ T9268] __submit_merged_bio+0x16f/0x6a0 [ 1144.161485][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.161650][ T9268] __submit_merged_write_cond+0x458/0x9a0 [ 1144.161826][ T9268] f2fs_write_data_pages+0x4bb2/0x5480 [ 1144.162118][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.162269][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.162422][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.162584][ T9268] ? folios_put_refs+0x41/0xb10 [ 1144.162768][ T9268] ? filter_irq_stacks+0x49/0x190 [ 1144.162930][ T9268] ? stack_depot_save_flags+0x35/0x7b0 [ 1144.163172][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.163332][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.163507][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.163668][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.163836][ T9268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1144.164016][ T9268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1144.164198][ T9268] do_writepages+0x3f2/0x860 [ 1144.164443][ T9268] ? _raw_spin_unlock+0x30/0x50 [ 1144.164645][ T9268] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1144.164869][ T9268] filemap_fdatawrite+0x207/0x260 [ 1144.165128][ T9268] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1144.165379][ T9268] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1144.165712][ T9268] kill_f2fs_super+0x2ff/0x970 [ 1144.165947][ T9268] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1144.166128][ T9268] deactivate_locked_super+0xcb/0x3c0 [ 1144.166343][ T9268] deactivate_super+0x12f/0x140 [ 1144.166543][ T9268] cleanup_mnt+0x6fb/0x780 [ 1144.166702][ T9268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1144.166925][ T9268] ? __pfx___cleanup_mnt+0x10/0x10 [ 1144.167095][ T9268] __cleanup_mnt+0x22/0x30 [ 1144.167261][ T9268] task_work_run+0x206/0x2b0 [ 1144.167439][ T9268] exit_to_user_mode_loop+0x2a6/0x330 [ 1144.167618][ T9268] do_syscall_64+0x1e3/0x210 [ 1144.167768][ T9268] ? irqentry_exit+0x16/0x60 [ 1144.167898][ T9268] ? clear_bhb_loop+0x40/0x90 [ 1144.168053][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.168203][ T9268] RIP: 0033:0x7fb7b2d8fcd7 [ 1144.168307][ T9268] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1144.168440][ T9268] RSP: 002b:00007ffcf7faeb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1144.168577][ T9268] RAX: 0000000000000000 RBX: 00007fb7b2e10b55 RCX: 00007fb7b2d8fcd7 [ 1144.168673][ T9268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf7faec20 [ 1144.168764][ T9268] RBP: 00007ffcf7faec20 R08: 0000000000000000 R09: 0000000000000000 [ 1144.168855][ T9268] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf7fafcb0 [ 1144.168950][ T9268] R13: 00007fb7b2e10b55 R14: 00000000001173f1 R15: 00007ffcf7fafcf0 [ 1144.169080][ T9268] [ 1144.548763][ T9268] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1144.559944][ T30] audit: type=1800 audit(1753709937.596:1019): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2083" name="file1" dev="loop0" ino=14 res=0 errno=0 [ 1144.593327][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1144.593476][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.593560][ T9268] Call Trace: [ 1144.593634][ T9268] [ 1144.593691][ T9268] __dump_stack+0x26/0x30 [ 1144.593881][ T9268] dump_stack_lvl+0x1df/0x270 [ 1144.594066][ T9268] dump_stack+0x1e/0x25 [ 1144.594254][ T9268] f2fs_handle_critical_error+0xa6f/0xc20 [ 1144.594483][ T9268] f2fs_stop_checkpoint+0x65/0x80 [ 1144.594668][ T9268] f2fs_write_end_io+0xb4b/0x1920 [ 1144.594891][ T9268] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1144.595073][ T9268] bio_endio+0xe24/0xf80 [ 1144.595314][ T9268] submit_bio_noacct+0x214/0x2710 [ 1144.595539][ T9268] submit_bio+0x5a9/0x5d0 [ 1144.595684][ T9268] f2fs_submit_write_bio+0x92/0x250 [ 1144.595837][ T9268] __submit_merged_bio+0x16f/0x6a0 [ 1144.596006][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.596187][ T9268] __submit_merged_write_cond+0x458/0x9a0 [ 1144.596381][ T9268] f2fs_write_data_pages+0x4bb2/0x5480 [ 1144.596695][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.596855][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.597013][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.597189][ T9268] ? folios_put_refs+0x41/0xb10 [ 1144.597366][ T9268] ? filter_irq_stacks+0x49/0x190 [ 1144.597527][ T9268] ? stack_depot_save_flags+0x35/0x7b0 [ 1144.597736][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.597885][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.598047][ T9268] ? kmsan_get_metadata+0xfb/0x160 [ 1144.598213][ T9268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1144.598376][ T9268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1144.598542][ T9268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1144.598703][ T9268] do_writepages+0x3f2/0x860 [ 1144.598898][ T9268] ? _raw_spin_unlock+0x30/0x50 [ 1144.599066][ T9268] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1144.599260][ T9268] filemap_fdatawrite+0x207/0x260 [ 1144.599496][ T9268] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1144.599723][ T9268] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1144.600054][ T9268] kill_f2fs_super+0x2ff/0x970 [ 1144.600275][ T9268] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1144.600482][ T9268] deactivate_locked_super+0xcb/0x3c0 [ 1144.600704][ T9268] deactivate_super+0x12f/0x140 [ 1144.600902][ T9268] cleanup_mnt+0x6fb/0x780 [ 1144.601092][ T9268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1144.601358][ T9268] ? __pfx___cleanup_mnt+0x10/0x10 [ 1144.601535][ T9268] __cleanup_mnt+0x22/0x30 [ 1144.601699][ T9268] task_work_run+0x206/0x2b0 [ 1144.601897][ T9268] exit_to_user_mode_loop+0x2a6/0x330 [ 1144.602081][ T9268] do_syscall_64+0x1e3/0x210 [ 1144.602232][ T9268] ? irqentry_exit+0x16/0x60 [ 1144.602369][ T9268] ? clear_bhb_loop+0x40/0x90 [ 1144.602524][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.602671][ T9268] RIP: 0033:0x7fb7b2d8fcd7 [ 1144.602778][ T9268] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1144.602899][ T9268] RSP: 002b:00007ffcf7faeb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1144.603029][ T9268] RAX: 0000000000000000 RBX: 00007fb7b2e10b55 RCX: 00007fb7b2d8fcd7 [ 1144.603139][ T9268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf7faec20 [ 1144.603225][ T9268] RBP: 00007ffcf7faec20 R08: 0000000000000000 R09: 0000000000000000 [ 1144.603316][ T9268] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf7fafcb0 [ 1144.603404][ T9268] R13: 00007fb7b2e10b55 R14: 00000000001173f1 R15: 00007ffcf7fafcf0 [ 1144.603528][ T9268] [ 1144.963289][ T9268] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1145.004469][T12653] syz.0.2083: attempt to access beyond end of device [ 1145.004469][T12653] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1145.193225][T12653] syz.0.2083: attempt to access beyond end of device [ 1145.193225][T12653] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1145.252837][T12653] syz.0.2083: attempt to access beyond end of device [ 1145.252837][T12653] loop0: rw=2049, sector=77952, nr_sectors = 632 limit=40427 [ 1145.269602][T12653] syz.0.2083: attempt to access beyond end of device [ 1145.269602][T12653] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1145.517802][T12665] loop6: detected capacity change from 0 to 64 [ 1145.746564][T12186] syz-executor: attempt to access beyond end of device [ 1145.746564][T12186] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1145.762890][T12186] CPU: 1 UID: 0 PID: 12186 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1145.763050][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1145.763141][T12186] Call Trace: [ 1145.763200][T12186] [ 1145.763264][T12186] __dump_stack+0x26/0x30 [ 1145.763450][T12186] dump_stack_lvl+0x1df/0x270 [ 1145.763641][T12186] dump_stack+0x1e/0x25 [ 1145.763808][T12186] f2fs_handle_critical_error+0xa6f/0xc20 [ 1145.764021][T12186] f2fs_stop_checkpoint+0x65/0x80 [ 1145.764194][T12186] f2fs_write_end_io+0xb4b/0x1920 [ 1145.764416][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.764620][T12186] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1145.764804][T12186] bio_endio+0xe24/0xf80 [ 1145.765035][T12186] submit_bio_noacct+0x214/0x2710 [ 1145.765247][T12186] submit_bio+0x5a9/0x5d0 [ 1145.765412][T12186] f2fs_submit_write_bio+0x92/0x250 [ 1145.765590][T12186] __submit_merged_bio+0x16f/0x6a0 [ 1145.765749][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.765928][T12186] __submit_merged_write_cond+0x458/0x9a0 [ 1145.766117][T12186] f2fs_write_data_pages+0x4bb2/0x5480 [ 1145.766438][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1145.766598][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.766777][T12186] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 1145.767001][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1145.767160][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1145.767406][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1145.767579][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.767734][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1145.767893][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.768058][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1145.768243][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1145.768440][T12186] do_writepages+0x3f2/0x860 [ 1145.768666][T12186] ? _raw_spin_unlock+0x30/0x50 [ 1145.768861][T12186] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1145.769078][T12186] filemap_fdatawrite+0x207/0x260 [ 1145.769337][T12186] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1145.769565][T12186] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1145.769959][T12186] kill_f2fs_super+0x2ff/0x970 [ 1145.770185][T12186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1145.770386][T12186] deactivate_locked_super+0xcb/0x3c0 [ 1145.770611][T12186] deactivate_super+0x12f/0x140 [ 1145.770827][T12186] cleanup_mnt+0x6fb/0x780 [ 1145.771007][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1145.771261][T12186] ? __pfx___cleanup_mnt+0x10/0x10 [ 1145.771441][T12186] __cleanup_mnt+0x22/0x30 [ 1145.771604][T12186] task_work_run+0x206/0x2b0 [ 1145.771778][T12186] exit_to_user_mode_loop+0x2a6/0x330 [ 1145.771955][T12186] do_syscall_64+0x1e3/0x210 [ 1145.772104][T12186] ? irqentry_exit+0x16/0x60 [ 1145.772238][T12186] ? clear_bhb_loop+0x40/0x90 [ 1145.772392][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.772541][T12186] RIP: 0033:0x7f8dfdb8fcd7 [ 1145.772649][T12186] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1145.772769][T12186] RSP: 002b:00007ffe9b9fde48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1145.772927][T12186] RAX: 0000000000000000 RBX: 00007f8dfdc10b55 RCX: 00007f8dfdb8fcd7 [ 1145.773029][T12186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9b9fdf00 [ 1145.773126][T12186] RBP: 00007ffe9b9fdf00 R08: 0000000000000000 R09: 0000000000000000 [ 1145.773228][T12186] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9b9fef90 [ 1145.773327][T12186] R13: 00007f8dfdc10b55 R14: 0000000000117a8b R15: 00007ffe9b9fefd0 [ 1145.773462][T12186] [ 1146.135043][T12186] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1146.148309][T12186] CPU: 1 UID: 0 PID: 12186 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1146.148475][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1146.148572][T12186] Call Trace: [ 1146.148630][T12186] [ 1146.148689][T12186] __dump_stack+0x26/0x30 [ 1146.148879][T12186] dump_stack_lvl+0x1df/0x270 [ 1146.149087][T12186] dump_stack+0x1e/0x25 [ 1146.149257][T12186] f2fs_handle_critical_error+0xa6f/0xc20 [ 1146.149475][T12186] f2fs_stop_checkpoint+0x65/0x80 [ 1146.149650][T12186] f2fs_write_end_io+0xb4b/0x1920 [ 1146.149914][T12186] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1146.150097][T12186] bio_endio+0xe24/0xf80 [ 1146.150339][T12186] submit_bio_noacct+0x214/0x2710 [ 1146.150551][T12186] submit_bio+0x5a9/0x5d0 [ 1146.150718][T12186] f2fs_submit_write_bio+0x92/0x250 [ 1146.150886][T12186] __submit_merged_bio+0x16f/0x6a0 [ 1146.151052][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1146.151261][T12186] __submit_merged_write_cond+0x458/0x9a0 [ 1146.151451][T12186] f2fs_write_data_pages+0x4bb2/0x5480 [ 1146.151778][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1146.151977][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1146.152156][T12186] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 1146.152385][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1146.152544][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1146.152784][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1146.152944][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1146.153130][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1146.153302][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1146.153474][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1146.153659][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1146.153843][T12186] do_writepages+0x3f2/0x860 [ 1146.154066][T12186] ? _raw_spin_unlock+0x30/0x50 [ 1146.154280][T12186] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1146.154498][T12186] filemap_fdatawrite+0x207/0x260 [ 1146.154760][T12186] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1146.154996][T12186] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1146.155352][T12186] kill_f2fs_super+0x2ff/0x970 [ 1146.155581][T12186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1146.155774][T12186] deactivate_locked_super+0xcb/0x3c0 [ 1146.156006][T12186] deactivate_super+0x12f/0x140 [ 1146.156224][T12186] cleanup_mnt+0x6fb/0x780 [ 1146.156398][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1146.156634][T12186] ? __pfx___cleanup_mnt+0x10/0x10 [ 1146.156807][T12186] __cleanup_mnt+0x22/0x30 [ 1146.156971][T12186] task_work_run+0x206/0x2b0 [ 1146.157145][T12186] exit_to_user_mode_loop+0x2a6/0x330 [ 1146.157339][T12186] do_syscall_64+0x1e3/0x210 [ 1146.157493][T12186] ? irqentry_exit+0x16/0x60 [ 1146.157625][T12186] ? clear_bhb_loop+0x40/0x90 [ 1146.157782][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.157932][T12186] RIP: 0033:0x7f8dfdb8fcd7 [ 1146.158040][T12186] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1146.158177][T12186] RSP: 002b:00007ffe9b9fde48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1146.158314][T12186] RAX: 0000000000000000 RBX: 00007f8dfdc10b55 RCX: 00007f8dfdb8fcd7 [ 1146.158409][T12186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9b9fdf00 [ 1146.158498][T12186] RBP: 00007ffe9b9fdf00 R08: 0000000000000000 R09: 0000000000000000 [ 1146.158584][T12186] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9b9fef90 [ 1146.158677][T12186] R13: 00007f8dfdc10b55 R14: 0000000000117a8b R15: 00007ffe9b9fefd0 [ 1146.158806][T12186] [ 1146.509921][T12186] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1146.531414][ T9791] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1146.620028][T12665] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2088'. [ 1146.784953][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.800540][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.814854][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1146.829149][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.846400][ T9791] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.860321][ T9791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.309829][ T9791] usb 10-1: config 0 descriptor?? [ 1147.789058][ T9791] usbhid 10-1:0.0: can't add hid device: -71 [ 1147.796163][ T9791] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1147.842481][ T9791] usb 10-1: USB disconnect, device number 29 [ 1148.299502][T12679] loop8: detected capacity change from 0 to 64 [ 1149.008933][T12685] syz.6.2099 (12685): /proc/12685/oom_adj is deprecated, please use /proc/12685/oom_score_adj instead. [ 1150.079120][T12694] syzkaller0: entered promiscuous mode [ 1150.085243][T12694] syzkaller0: entered allmulticast mode [ 1150.092916][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2102'. [ 1150.137390][T12698] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1150.547042][T12703] loop9: detected capacity change from 0 to 64 [ 1150.802310][T12703] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2104'. [ 1151.143816][T12704] loop6: detected capacity change from 0 to 512 [ 1151.242255][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.249039][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.393643][T12704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.407040][T12704] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.763695][ T9791] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1151.976092][ T8829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.989918][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.005408][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1152.017188][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1152.027498][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1152.046760][ T9791] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1152.060790][ T9791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.091928][T12722] loop8: detected capacity change from 0 to 64 [ 1152.246142][ T9791] usb 10-1: config 0 descriptor?? [ 1152.705731][ T9791] usbhid 10-1:0.0: can't add hid device: -71 [ 1152.717683][ T9791] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1152.782539][ T9791] usb 10-1: USB disconnect, device number 30 [ 1153.291039][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 1154.378128][T12735] loop0: detected capacity change from 0 to 40427 [ 1154.415643][T12735] F2FS-fs (loop0): build fault injection rate: 690 [ 1154.427633][T12735] F2FS-fs (loop0): Image doesn't support compression [ 1154.438121][T12735] F2FS-fs (loop0): invalid crc value [ 1154.482184][T12738] loop8: detected capacity change from 0 to 40427 [ 1154.507098][T12738] F2FS-fs (loop8): heap/no_heap options were deprecated [ 1154.518122][T12738] F2FS-fs (loop8): build fault injection rate: 19 [ 1154.525300][T12738] F2FS-fs (loop8): Unrecognized mount option "disãard" or missing value [ 1154.650278][T12737] syzkaller0: entered promiscuous mode [ 1154.659353][T12737] syzkaller0: entered allmulticast mode [ 1155.115811][T12735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1155.283046][T12744] loop9: detected capacity change from 0 to 64 [ 1155.379576][T12735] syz.0.2116: attempt to access beyond end of device [ 1155.379576][T12735] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1155.402115][ T30] audit: type=1800 audit(1753709948.846:1020): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2116" name="file1" dev="loop0" ino=17 res=0 errno=0 [ 1155.440595][T12735] syz.0.2116: attempt to access beyond end of device [ 1155.440595][T12735] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1155.457548][T12735] syz.0.2116: attempt to access beyond end of device [ 1155.457548][T12735] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1155.517296][T12744] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2118'. [ 1156.083927][T12186] syz-executor: attempt to access beyond end of device [ 1156.083927][T12186] loop0: rw=2049, sector=45112, nr_sectors = 24 limit=40427 [ 1156.099429][T12186] CPU: 0 UID: 0 PID: 12186 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1156.099594][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1156.099690][T12186] Call Trace: [ 1156.099747][T12186] [ 1156.099807][T12186] __dump_stack+0x26/0x30 [ 1156.099996][T12186] dump_stack_lvl+0x1df/0x270 [ 1156.100190][T12186] dump_stack+0x1e/0x25 [ 1156.100366][T12186] f2fs_handle_critical_error+0xa6f/0xc20 [ 1156.100578][T12186] f2fs_stop_checkpoint+0x65/0x80 [ 1156.100759][T12186] f2fs_write_end_io+0xb4b/0x1920 [ 1156.100961][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.101151][T12186] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1156.101325][T12186] bio_endio+0xe24/0xf80 [ 1156.101550][T12186] submit_bio_noacct+0x214/0x2710 [ 1156.101759][T12186] submit_bio+0x5a9/0x5d0 [ 1156.101915][T12186] f2fs_submit_write_bio+0x92/0x250 [ 1156.102082][T12186] __submit_merged_bio+0x16f/0x6a0 [ 1156.102244][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.102428][T12186] __submit_merged_write_cond+0x458/0x9a0 [ 1156.102619][T12186] f2fs_write_data_pages+0x4bb2/0x5480 [ 1156.102947][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.103115][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.103281][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.103472][T12186] ? folios_put_refs+0x41/0xb10 [ 1156.103653][T12186] ? filter_irq_stacks+0x49/0x190 [ 1156.103815][T12186] ? stack_depot_save_flags+0x35/0x7b0 [ 1156.104042][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.104216][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.104391][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.104564][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.104746][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.104929][T12186] do_writepages+0x3f2/0x860 [ 1156.105154][T12186] ? _raw_spin_unlock+0x30/0x50 [ 1156.105356][T12186] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1156.105583][T12186] filemap_fdatawrite+0x207/0x260 [ 1156.105844][T12186] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1156.106078][T12186] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1156.106432][T12186] kill_f2fs_super+0x2ff/0x970 [ 1156.106656][T12186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1156.106858][T12186] deactivate_locked_super+0xcb/0x3c0 [ 1156.107097][T12186] deactivate_super+0x12f/0x140 [ 1156.107312][T12186] cleanup_mnt+0x6fb/0x780 [ 1156.107498][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1156.107741][T12186] ? __pfx___cleanup_mnt+0x10/0x10 [ 1156.107932][T12186] __cleanup_mnt+0x22/0x30 [ 1156.108114][T12186] task_work_run+0x206/0x2b0 [ 1156.108304][T12186] exit_to_user_mode_loop+0x2a6/0x330 [ 1156.108511][T12186] do_syscall_64+0x1e3/0x210 [ 1156.108678][T12186] ? irqentry_exit+0x16/0x60 [ 1156.108824][T12186] ? clear_bhb_loop+0x40/0x90 [ 1156.109018][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.109189][T12186] RIP: 0033:0x7f8dfdb8fcd7 [ 1156.109305][T12186] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1156.109454][T12186] RSP: 002b:00007ffe9b9fde48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1156.109601][T12186] RAX: 0000000000000000 RBX: 00007f8dfdc10b55 RCX: 00007f8dfdb8fcd7 [ 1156.109709][T12186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9b9fdf00 [ 1156.109811][T12186] RBP: 00007ffe9b9fdf00 R08: 0000000000000000 R09: 0000000000000000 [ 1156.109913][T12186] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9b9fef90 [ 1156.110018][T12186] R13: 00007f8dfdc10b55 R14: 000000000011a259 R15: 00007ffe9b9fefd0 [ 1156.110163][T12186] [ 1156.486649][T12186] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1156.501447][T12186] CPU: 0 UID: 0 PID: 12186 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1156.501609][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1156.501702][T12186] Call Trace: [ 1156.501761][T12186] [ 1156.501822][T12186] __dump_stack+0x26/0x30 [ 1156.502010][T12186] dump_stack_lvl+0x1df/0x270 [ 1156.502205][T12186] dump_stack+0x1e/0x25 [ 1156.502382][T12186] f2fs_handle_critical_error+0xa6f/0xc20 [ 1156.502605][T12186] f2fs_stop_checkpoint+0x65/0x80 [ 1156.502782][T12186] f2fs_write_end_io+0xb4b/0x1920 [ 1156.503009][T12186] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1156.503189][T12186] bio_endio+0xe24/0xf80 [ 1156.503423][T12186] submit_bio_noacct+0x214/0x2710 [ 1156.503629][T12186] submit_bio+0x5a9/0x5d0 [ 1156.503793][T12186] f2fs_submit_write_bio+0x92/0x250 [ 1156.503961][T12186] __submit_merged_bio+0x16f/0x6a0 [ 1156.504128][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.504320][T12186] __submit_merged_write_cond+0x458/0x9a0 [ 1156.504523][T12186] f2fs_write_data_pages+0x4bb2/0x5480 [ 1156.504850][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.505018][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.505184][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.505373][T12186] ? folios_put_refs+0x41/0xb10 [ 1156.505550][T12186] ? filter_irq_stacks+0x49/0x190 [ 1156.505717][T12186] ? stack_depot_save_flags+0x35/0x7b0 [ 1156.505947][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.506121][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.506282][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.506461][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.506645][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.506825][T12186] do_writepages+0x3f2/0x860 [ 1156.507046][T12186] ? _raw_spin_unlock+0x30/0x50 [ 1156.507248][T12186] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1156.507471][T12186] filemap_fdatawrite+0x207/0x260 [ 1156.507730][T12186] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1156.507966][T12186] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1156.508313][T12186] kill_f2fs_super+0x2ff/0x970 [ 1156.508542][T12186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1156.508741][T12186] deactivate_locked_super+0xcb/0x3c0 [ 1156.508998][T12186] deactivate_super+0x12f/0x140 [ 1156.509216][T12186] cleanup_mnt+0x6fb/0x780 [ 1156.509401][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1156.509647][T12186] ? __pfx___cleanup_mnt+0x10/0x10 [ 1156.509837][T12186] __cleanup_mnt+0x22/0x30 [ 1156.510016][T12186] task_work_run+0x206/0x2b0 [ 1156.510210][T12186] exit_to_user_mode_loop+0x2a6/0x330 [ 1156.510415][T12186] do_syscall_64+0x1e3/0x210 [ 1156.510578][T12186] ? irqentry_exit+0x16/0x60 [ 1156.510726][T12186] ? clear_bhb_loop+0x40/0x90 [ 1156.510898][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.511065][T12186] RIP: 0033:0x7f8dfdb8fcd7 [ 1156.511182][T12186] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1156.511320][T12186] RSP: 002b:00007ffe9b9fde48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1156.511474][T12186] RAX: 0000000000000000 RBX: 00007f8dfdc10b55 RCX: 00007f8dfdb8fcd7 [ 1156.511581][T12186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9b9fdf00 [ 1156.511678][T12186] RBP: 00007ffe9b9fdf00 R08: 0000000000000000 R09: 0000000000000000 [ 1156.511774][T12186] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9b9fef90 [ 1156.511877][T12186] R13: 00007f8dfdc10b55 R14: 000000000011a259 R15: 00007ffe9b9fefd0 [ 1156.512029][T12186] [ 1156.868799][T12186] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1156.887426][T12186] CPU: 0 UID: 0 PID: 12186 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1156.887585][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1156.887678][T12186] Call Trace: [ 1156.887735][T12186] [ 1156.887792][T12186] __dump_stack+0x26/0x30 [ 1156.887980][T12186] dump_stack_lvl+0x1df/0x270 [ 1156.888170][T12186] dump_stack+0x1e/0x25 [ 1156.888343][T12186] f2fs_handle_critical_error+0xa6f/0xc20 [ 1156.888559][T12186] f2fs_stop_checkpoint+0x65/0x80 [ 1156.888732][T12186] f2fs_write_end_io+0xb4b/0x1920 [ 1156.888991][T12186] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1156.889176][T12186] bio_endio+0xe24/0xf80 [ 1156.889415][T12186] submit_bio_noacct+0x214/0x2710 [ 1156.889625][T12186] submit_bio+0x5a9/0x5d0 [ 1156.889785][T12186] f2fs_submit_write_bio+0x92/0x250 [ 1156.889955][T12186] __submit_merged_bio+0x16f/0x6a0 [ 1156.890133][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.890320][T12186] __submit_merged_write_cond+0x458/0x9a0 [ 1156.890499][T12186] f2fs_write_data_pages+0x4bb2/0x5480 [ 1156.890811][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.890978][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.891139][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.891311][T12186] ? folios_put_refs+0x41/0xb10 [ 1156.891479][T12186] ? filter_irq_stacks+0x49/0x190 [ 1156.891630][T12186] ? stack_depot_save_flags+0x35/0x7b0 [ 1156.891850][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.892019][T12186] ? kmsan_get_metadata+0xfb/0x160 [ 1156.892165][T12186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.892321][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.892481][T12186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.892644][T12186] do_writepages+0x3f2/0x860 [ 1156.892825][T12186] ? _raw_spin_unlock+0x30/0x50 [ 1156.893031][T12186] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1156.893239][T12186] filemap_fdatawrite+0x207/0x260 [ 1156.893491][T12186] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1156.893711][T12186] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1156.894042][T12186] kill_f2fs_super+0x2ff/0x970 [ 1156.894273][T12186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1156.894472][T12186] deactivate_locked_super+0xcb/0x3c0 [ 1156.894712][T12186] deactivate_super+0x12f/0x140 [ 1156.894925][T12186] cleanup_mnt+0x6fb/0x780 [ 1156.895095][T12186] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1156.895327][T12186] ? __pfx___cleanup_mnt+0x10/0x10 [ 1156.895523][T12186] __cleanup_mnt+0x22/0x30 [ 1156.895706][T12186] task_work_run+0x206/0x2b0 [ 1156.895891][T12186] exit_to_user_mode_loop+0x2a6/0x330 [ 1156.896082][T12186] do_syscall_64+0x1e3/0x210 [ 1156.896236][T12186] ? irqentry_exit+0x16/0x60 [ 1156.896385][T12186] ? clear_bhb_loop+0x40/0x90 [ 1156.896542][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.896700][T12186] RIP: 0033:0x7f8dfdb8fcd7 [ 1156.896819][T12186] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1156.896942][T12186] RSP: 002b:00007ffe9b9fde48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1156.897072][T12186] RAX: 0000000000000000 RBX: 00007f8dfdc10b55 RCX: 00007f8dfdb8fcd7 [ 1156.897165][T12186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9b9fdf00 [ 1156.897254][T12186] RBP: 00007ffe9b9fdf00 R08: 0000000000000000 R09: 0000000000000000 [ 1156.897352][T12186] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9b9fef90 [ 1156.897442][T12186] R13: 00007f8dfdc10b55 R14: 000000000011a259 R15: 00007ffe9b9fefd0 [ 1156.897589][T12186] [ 1157.255297][T12186] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1157.676437][T12761] loop9: detected capacity change from 0 to 64 [ 1158.564004][ T9791] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1158.750964][ T9791] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1158.763342][ T9791] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1158.779231][ T9791] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1158.790061][ T9791] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1158.817581][ T9791] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1158.830850][ T9791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.983184][ T9791] usb 9-1: config 0 descriptor?? [ 1159.013822][T12774] loop6: detected capacity change from 0 to 64 [ 1159.191230][T12774] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2131'. [ 1159.298872][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2133'. [ 1159.413982][T12778] team_slave_0: entered promiscuous mode [ 1159.420208][T12778] team_slave_1: entered promiscuous mode [ 1159.435812][T12778] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1159.512075][ T9791] usbhid 9-1:0.0: can't add hid device: -71 [ 1159.518948][ T9791] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1159.603547][ T9791] usb 9-1: USB disconnect, device number 21 [ 1161.098478][T12790] loop0: detected capacity change from 0 to 512 [ 1161.314335][T12790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.329094][T12790] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.865033][T12808] FAULT_INJECTION: forcing a failure. [ 1161.865033][T12808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.878890][T12808] CPU: 1 UID: 0 PID: 12808 Comm: syz.8.2142 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1161.879047][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.879140][T12808] Call Trace: [ 1161.879195][T12808] [ 1161.879253][T12808] __dump_stack+0x26/0x30 [ 1161.879435][T12808] dump_stack_lvl+0x1df/0x270 [ 1161.879622][T12808] dump_stack+0x1e/0x25 [ 1161.879788][T12808] should_fail_ex+0x7dc/0x8a0 [ 1161.880019][T12808] should_fail+0x2a/0x40 [ 1161.880209][T12808] should_fail_usercopy+0x2e/0x40 [ 1161.880359][T12808] _copy_from_user+0x33/0x100 [ 1161.880559][T12808] __sys_bpf+0x2c8/0xe60 [ 1161.880760][T12808] __x64_sys_bpf+0xa4/0xf0 [ 1161.880996][T12808] x64_sys_call+0x2c3b/0x3db0 [ 1161.881176][T12808] do_syscall_64+0xd9/0x210 [ 1161.881327][T12808] ? irqentry_exit+0x16/0x60 [ 1161.881458][T12808] ? clear_bhb_loop+0x40/0x90 [ 1161.881613][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.881763][T12808] RIP: 0033:0x7fb7b2d8e9a9 [ 1161.881898][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.882034][T12808] RSP: 002b:00007fb7b3cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.882182][T12808] RAX: ffffffffffffffda RBX: 00007fb7b2fb5fa0 RCX: 00007fb7b2d8e9a9 [ 1161.882286][T12808] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1161.882377][T12808] RBP: 00007fb7b3cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.882466][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.882550][T12808] R13: 0000000000000001 R14: 00007fb7b2fb5fa0 R15: 00007ffcf7faf8d8 [ 1161.882698][T12808] [ 1162.105904][T12186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.720085][T12816] loop0: detected capacity change from 0 to 64 [ 1162.890837][ T9791] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1162.952998][T12817] syzkaller0: entered promiscuous mode [ 1162.958804][T12817] syzkaller0: entered allmulticast mode [ 1163.124877][ T9791] usb 10-1: device descriptor read/64, error -71 [ 1163.404893][ T5873] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1163.500123][ T9791] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1163.577451][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1163.592954][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1163.607342][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1163.619078][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1163.639372][ T5873] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1163.650493][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.717936][T12824] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2149'. [ 1163.743260][ T9791] usb 10-1: device descriptor read/64, error -71 [ 1163.773021][ T5873] usb 7-1: config 0 descriptor?? [ 1163.857479][ T9791] usb usb10-port1: attempt power cycle [ 1164.211145][ T9791] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1164.264693][ T9791] usb 10-1: device descriptor read/8, error -71 [ 1164.442640][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 1164.454687][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1164.495252][ T5873] usb 7-1: USB disconnect, device number 41 [ 1164.523838][T12832] loop8: detected capacity change from 0 to 64 [ 1164.541746][ T9791] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1164.613121][ T9791] usb 10-1: device descriptor read/8, error -71 [ 1164.737711][ T9791] usb usb10-port1: unable to enumerate USB device [ 1165.428220][T12843] loop0: detected capacity change from 0 to 64 [ 1166.078359][T12850] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1166.202579][ T30] audit: type=1400 audit(1753709959.656:1021): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=26AE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F pid=12848 comm="syz.9.2162" [ 1166.624423][T12844] loop6: detected capacity change from 0 to 32768 [ 1166.856971][T12844] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,nojournal_transaction_names,reconstruct_alloc,nocow [ 1166.857162][T12844] allowing incompatible features above 0.0: (unknown version) [ 1166.857264][T12844] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1166.918518][T12844] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 1166.927963][T12844] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 1166.937785][T12844] bcachefs (loop6): Version upgrade required: [ 1166.937785][T12844] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1166.937785][T12844] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1166.937785][T12844] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1167.094398][T12844] bcachefs (loop6): dropping and reconstructing all alloc info [ 1167.274853][T12844] bcachefs (loop6): accounting_read... done [ 1167.330230][T12844] bcachefs (loop6): alloc_read... done [ 1167.360244][T12844] bcachefs (loop6): snapshots_read... done [ 1167.373194][T12844] bcachefs (loop6): check_allocations... done [ 1167.586120][T12844] bcachefs (loop6): going read-write [ 1167.642060][T12844] bcachefs (loop6): journal_replay... [ 1168.081802][ T8373] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1168.202628][T12844] done [ 1168.209915][T12844] bcachefs (loop6): check_alloc_info... done [ 1168.413665][T12844] bcachefs (loop6): check_lrus... done [ 1168.485935][T12844] bcachefs (loop6): check_btree_backpointers... done [ 1168.516033][T12844] bcachefs (loop6): check_backpointers_to_extents... [ 1168.533390][ T8373] usb 1-1: Using ep0 maxpacket: 16 [ 1168.565962][T12844] done [ 1168.569140][T12844] bcachefs (loop6): check_extents_to_backpointers... [ 1168.577481][T12844] bcachefs (loop6): scanning for missing backpointers in 9/128 buckets [ 1168.612813][T12844] done [ 1168.626945][T12844] bcachefs (loop6): check_alloc_to_lru_refs... done [ 1168.705692][T12844] bcachefs (loop6): bucket_gens_init... [ 1168.743372][T12872] loop8: detected capacity change from 0 to 32768 [ 1168.781384][T12844] done [ 1168.787747][T12844] bcachefs (loop6): check_snapshot_trees... done [ 1168.812169][T12844] bcachefs (loop6): check_snapshots... [ 1168.816107][T12844] bcachefs (loop6): snapshot points to missing/incorrect tree: [ 1168.816227][T12844] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 1168.869481][ T8373] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1168.925769][ T8373] usb 1-1: config 2 has an invalid interface number: 139 but max is 0 [ 1168.936168][ T8373] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.947137][ T8373] usb 1-1: config 2 has no interface number 0 [ 1168.955680][ T8373] usb 1-1: config 2 interface 139 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.970121][ T8373] usb 1-1: config 2 interface 139 has no altsetting 0 [ 1168.993558][T12872] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1169.001899][T12844] done [ 1169.020921][T12844] bcachefs (loop6): check_subvols... [ 1169.034535][ T30] audit: type=1800 audit(1753709962.506:1022): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2166" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 1169.065623][ T8373] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=81.f5 [ 1169.075409][ T8373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.075997][T12872] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 1169.083936][ T8373] usb 1-1: Product: syz [ 1169.084067][ T8373] usb 1-1: Manufacturer: syz [ 1169.102774][T12872] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1169.103811][ T8373] usb 1-1: SerialNumber: syz [ 1169.108248][T12872] OCFS2: File system is now read-only. [ 1169.108321][T12872] (syz.8.2166,12872,0):ocfs2_search_chain:1852 ERROR: status = -30 [ 1169.147688][T12872] (syz.8.2166,12872,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 1169.163269][T12872] (syz.8.2166,12872,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 1169.173577][T12872] (syz.8.2166,12872,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 1169.185539][T12872] (syz.8.2166,12872,0):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 1169.194295][T12872] (syz.8.2166,12872,0):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 1169.194783][T12844] done [ 1169.202960][T12872] (syz.8.2166,12872,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 1169.218119][T12872] (syz.8.2166,12872,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 1169.227386][T12872] (syz.8.2166,12872,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 1169.243404][T12872] (syz.8.2166,12872,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 1169.252847][T12872] (syz.8.2166,12872,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 1169.267379][T12872] (syz.8.2166,12872,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 1169.279607][T12872] (syz.8.2166,12872,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 1169.289369][T12872] (syz.8.2166,12872,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 1169.298460][T12844] bcachefs (loop6): check_subvol_children... [ 1169.298929][T12872] (syz.8.2166,12872,0):ocfs2_expand_inline_dir:2856 ERROR: status = -30 [ 1169.299168][T12872] (syz.8.2166,12872,0):ocfs2_extend_dir:3203 ERROR: status = -30 [ 1169.325101][T12872] (syz.8.2166,12872,0):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30 [ 1169.337330][T12872] (syz.8.2166,12872,0):ocfs2_symlink:1876 ERROR: status = -30 [ 1169.347872][T12872] (syz.8.2166,12872,0):ocfs2_symlink:2077 ERROR: status = -30 [ 1169.348068][T12878] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 1169.374407][T12878] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1169.385662][T12878] (syz.8.2166,12878,1):ocfs2_search_chain:1852 ERROR: status = -30 [ 1169.394283][T12878] (syz.8.2166,12878,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 1169.403262][T12878] (syz.8.2166,12878,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 1169.412579][T12878] (syz.8.2166,12878,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 1169.421825][T12878] (syz.8.2166,12878,1):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 1169.434196][T12878] (syz.8.2166,12878,1):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 1169.445020][T12878] (syz.8.2166,12878,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 1169.455035][T12878] (syz.8.2166,12878,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 1169.466727][T12878] (syz.8.2166,12878,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 1169.477392][T12878] (syz.8.2166,12878,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 1169.487070][T12878] (syz.8.2166,12878,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 1169.496658][T12878] (syz.8.2166,12878,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 1169.506296][T12878] (syz.8.2166,12878,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 1169.516436][T12878] (syz.8.2166,12878,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 1169.526485][T12878] (syz.8.2166,12878,1):ocfs2_lock_allocators:2775 ERROR: status = -30 [ 1169.535925][T12878] (syz.8.2166,12878,1):ocfs2_write_begin_nolock:1722 ERROR: status = -30 [ 1169.546736][T12878] (syz.8.2166,12878,1):ocfs2_dio_wr_get_block:2215 ERROR: status = -30 [ 1169.556168][T12878] (syz.8.2166,12878,1):ocfs2_dio_end_io:2398 ERROR: Direct IO failed, bytes = -30 [ 1169.593608][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.613682][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.626446][T12844] done [ 1169.678848][T12844] bcachefs (loop6): delete_dead_snapshots... done [ 1169.784323][T12844] bcachefs (loop6): check_inodes... done [ 1169.837363][T12844] bcachefs (loop6): check_extents... done [ 1169.859365][T12844] bcachefs (loop6): check_indirect_extents... done [ 1169.880663][T12844] bcachefs (loop6): check_dirents... done [ 1169.917376][T12844] bcachefs (loop6): check_xattrs... [ 1169.939513][ T8373] cxacru 1-1:2.139: cxacru_bind: interface has incorrect endpoints [ 1169.956688][ T8373] cxacru 1-1:2.139: usbatm_usb_probe: bind failed: -19! [ 1169.973455][T12844] done [ 1169.979075][T12844] bcachefs (loop6): check_root... done [ 1169.993028][T12844] bcachefs (loop6): check_unreachable_inodes... done [ 1170.015051][T12844] bcachefs (loop6): check_subvolume_structure... done [ 1170.029047][ T8373] usb 1-1: USB disconnect, device number 15 [ 1170.058307][T12844] bcachefs (loop6): check_directory_structure... done [ 1170.072518][T12844] bcachefs (loop6): check_nlinks... done [ 1170.102086][T12844] bcachefs (loop6): check_rebalance_work... done [ 1170.125318][T12844] bcachefs (loop6): resume_logged_ops... done [ 1170.144888][T12844] bcachefs (loop6): delete_dead_inodes... done [ 1170.169670][T12844] bcachefs (loop6): set_fs_needs_rebalance... done [ 1170.267498][ T9268] (syz-executor,9268,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 1170.328482][ T9268] ocfs2: Unmounting device (7,8) on (node local) [ 1170.441435][T12844] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 1170.452138][T12844] bcachefs (loop6): check_alloc_info... done [ 1170.509077][T12844] bcachefs (loop6): check_lrus... done [ 1170.564481][T12844] bcachefs (loop6): check_btree_backpointers... done [ 1170.607252][T12844] bcachefs (loop6): check_backpointers_to_extents... done [ 1170.655771][T12844] bcachefs (loop6): check_extents_to_backpointers... done [ 1170.697838][T12844] bcachefs (loop6): check_alloc_to_lru_refs... done [ 1170.781754][T12844] bcachefs (loop6): bucket_gens_init... done [ 1170.831450][ T9791] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1170.843874][T12844] bcachefs (loop6): check_snapshot_trees... done [ 1170.880212][T12844] bcachefs (loop6): check_snapshots... done [ 1170.907715][T12844] bcachefs (loop6): check_subvols... [ 1170.908047][T12844] ===================================================== [ 1170.921155][T12844] BUG: KMSAN: uninit-value in bch2_check_subvols+0x1297/0x48c0 [ 1170.929005][T12844] bch2_check_subvols+0x1297/0x48c0 [ 1170.934779][T12844] __bch2_run_recovery_passes+0x49b/0x1330 [ 1170.941025][T12844] bch2_run_recovery_passes+0x284/0x310 [ 1170.946878][T12844] bch2_fs_recovery+0x53bf/0x66d0 [ 1170.952346][T12844] bch2_fs_start+0x11b3/0x1990 [ 1170.957406][T12844] bch2_fs_get_tree+0x1125/0x2b50 [ 1170.962894][T12844] vfs_get_tree+0xb0/0x5c0 [ 1170.967546][T12844] do_new_mount+0x738/0x1610 [ 1170.972594][T12844] path_mount+0x6db/0x1e90 [ 1170.979518][T12844] __se_sys_mount+0x6eb/0x7d0 [ 1170.984628][T12844] __x64_sys_mount+0xe4/0x150 [ 1170.989557][T12844] x64_sys_call+0xfa7/0x3db0 [ 1170.994694][T12844] do_syscall_64+0xd9/0x210 [ 1171.002204][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.008357][T12844] [ 1171.011621][T12844] Uninit was created at: [ 1171.016191][T12844] ___kmalloc_large_node+0x2e2/0x460 [ 1171.021862][T12844] __kmalloc_large_node_noprof+0x3f/0x1f0 [ 1171.027855][T12844] __kvmalloc_node_noprof+0x9f/0x1530 [ 1171.033718][T12844] btree_node_data_alloc+0xe2/0x5f0 [ 1171.039162][T12844] __bch2_btree_node_mem_alloc+0x1eb/0x480 [ 1171.045397][T12844] bch2_fs_btree_cache_init+0x513/0x1150 [ 1171.052379][T12844] bch2_fs_open+0x46ac/0x5560 [ 1171.057355][T12844] bch2_fs_get_tree+0x95f/0x2b50 [ 1171.062759][T12844] vfs_get_tree+0xb0/0x5c0 [ 1171.067430][T12844] do_new_mount+0x738/0x1610 [ 1171.072541][T12844] path_mount+0x6db/0x1e90 [ 1171.077198][T12844] __se_sys_mount+0x6eb/0x7d0 [ 1171.084341][T12844] __x64_sys_mount+0xe4/0x150 [ 1171.089267][T12844] x64_sys_call+0xfa7/0x3db0 [ 1171.094325][T12844] do_syscall_64+0xd9/0x210 [ 1171.095081][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.099011][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.099152][T12844] [ 1171.118354][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.119513][T12844] CPU: 1 UID: 0 PID: 12844 Comm: syz.6.2159 Not tainted 6.16.0-syzkaller #0 PREEMPT(none) [ 1171.123295][ T9791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1171.133261][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1171.146716][ T9791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1171.153425][T12844] ===================================================== [ 1171.153472][T12844] Disabling lock debugging due to kernel taint [ 1171.163823][ T9791] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.176940][T12844] Kernel panic - not syncing: kmsan.panic set ... [ 1171.177038][T12844] CPU: 1 UID: 0 PID: 12844 Comm: syz.6.2159 Tainted: G B 6.16.0-syzkaller #0 PREEMPT(none) [ 1171.177205][T12844] Tainted: [B]=BAD_PAGE [ 1171.177252][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1171.177328][T12844] Call Trace: [ 1171.177373][T12844] [ 1171.177418][T12844] __dump_stack+0x26/0x30 [ 1171.177575][T12844] dump_stack_lvl+0x53/0x270 [ 1171.177726][T12844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1171.177877][T12844] dump_stack+0x1e/0x25 [ 1171.178017][T12844] panic+0x4bd/0xd50 [ 1171.178244][T12844] kmsan_report+0x31c/0x320 [ 1171.178374][T12844] ? __msan_warning+0x1b/0x30 [ 1171.178471][T12844] ? bch2_check_subvols+0x1297/0x48c0 [ 1171.178616][T12844] ? __bch2_run_recovery_passes+0x49b/0x1330 [ 1171.178804][T12844] ? bch2_run_recovery_passes+0x284/0x310 [ 1171.178986][T12844] ? bch2_fs_recovery+0x53bf/0x66d0 [ 1171.179151][T12844] ? bch2_fs_start+0x11b3/0x1990 [ 1171.179319][T12844] ? bch2_fs_get_tree+0x1125/0x2b50 [ 1171.179503][T12844] ? vfs_get_tree+0xb0/0x5c0 [ 1171.179627][T12844] ? do_new_mount+0x738/0x1610 [ 1171.179753][T12844] ? path_mount+0x6db/0x1e90 [ 1171.179879][T12844] ? __se_sys_mount+0x6eb/0x7d0 [ 1171.179994][T12844] ? __x64_sys_mount+0xe4/0x150 [ 1171.180150][T12844] ? x64_sys_call+0xfa7/0x3db0 [ 1171.180343][T12844] ? do_syscall_64+0xd9/0x210 [ 1171.180492][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.180646][T12844] ? bch2_trans_iter_exit+0x34a/0x3f0 [ 1171.180853][T12844] ? __bch2_bkey_get_val_typed+0x516/0x5e0 [ 1171.181010][T12844] ? __bch2_bkey_get_val_typed+0xf1/0x5e0 [ 1171.181191][T12844] ? kmsan_get_metadata+0xfb/0x160 [ 1171.181351][T12844] __msan_warning+0x1b/0x30 [ 1171.181477][T12844] bch2_check_subvols+0x1297/0x48c0 [ 1171.181671][T12844] ? kmsan_get_metadata+0xfb/0x160 [ 1171.181825][T12844] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1171.182048][T12844] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1171.182316][T12844] ? bch2_check_subvols+0x202/0x48c0 [ 1171.182476][T12844] ? bch2_check_subvols+0x202/0x48c0 [ 1171.182728][T12844] ? __pfx_bch2_check_subvols+0x10/0x10 [ 1171.182899][T12844] __bch2_run_recovery_passes+0x49b/0x1330 [ 1171.183205][T12844] bch2_run_recovery_passes+0x284/0x310 [ 1171.183436][T12844] bch2_fs_recovery+0x53bf/0x66d0 [ 1171.183627][T12844] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1171.183893][T12844] ? __rcu_read_unlock+0x6d/0xd0 [ 1171.184040][T12844] ? __closure_wake_up+0x164/0x180 [ 1171.184307][T12844] bch2_fs_start+0x11b3/0x1990 [ 1171.184505][T12844] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1171.184745][T12844] ? bch2_parse_mount_opts+0x64/0x640 [ 1171.184959][T12844] ? bch2_fs_get_tree+0x1040/0x2b50 [ 1171.185176][T12844] ? kmsan_get_metadata+0xfb/0x160 [ 1171.185371][T12844] bch2_fs_get_tree+0x1125/0x2b50 [ 1171.185732][T12844] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 1171.185939][T12844] vfs_get_tree+0xb0/0x5c0 [ 1171.186086][T12844] ? mount_capable+0x99/0x100 [ 1171.186293][T12844] do_new_mount+0x738/0x1610 [ 1171.186442][T12844] ? kmsan_get_metadata+0xfb/0x160 [ 1171.186593][T12844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1171.186777][T12844] path_mount+0x6db/0x1e90 [ 1171.186920][T12844] ? user_path_at+0x32d/0x3d0 [ 1171.187102][T12844] __se_sys_mount+0x6eb/0x7d0 [ 1171.187245][T12844] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1171.187495][T12844] __x64_sys_mount+0xe4/0x150 [ 1171.187652][T12844] x64_sys_call+0xfa7/0x3db0 [ 1171.187849][T12844] do_syscall_64+0xd9/0x210 [ 1171.187986][T12844] ? irqentry_exit+0x16/0x60 [ 1171.188106][T12844] ? clear_bhb_loop+0x40/0x90 [ 1171.188259][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.188400][T12844] RIP: 0033:0x7fe717b9014a [ 1171.188489][T12844] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.188610][T12844] RSP: 002b:00007fe718a78e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1171.188730][T12844] RAX: ffffffffffffffda RBX: 00007fe718a78ef0 RCX: 00007fe717b9014a [ 1171.188825][T12844] RDX: 0000200000000080 RSI: 0000200000005900 RDI: 00007fe718a78eb0 [ 1171.188929][T12844] RBP: 0000200000000080 R08: 00007fe718a78ef0 R09: 0000000000010000 [ 1171.189028][T12844] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000005900 [ 1171.189103][T12844] R13: 00007fe718a78eb0 R14: 00000000000058f3 R15: 0000200000006480 [ 1171.189223][T12844] [ 1171.189626][T12844] Kernel Offset: disabled