last executing test programs: 15.018250406s ago: executing program 4 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = syz_open_dev$evdev(0x0, 0xd0, 0x48801) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) accept(r6, &(0x7f00000003c0)=@isdn, &(0x7f0000000000)=0x80) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 14.132891458s ago: executing program 4 (id=623): socketpair(0xf, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x4000000, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 13.110396852s ago: executing program 4 (id=630): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") setrlimit(0x9, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000680)) (fail_nth: 8) 12.477447091s ago: executing program 4 (id=634): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000340)='.\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x1000000}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 11.540612107s ago: executing program 4 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x3, 0x551d, &(0x7f0000001d00)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmz6seit6i5+YJey6sGTpkkasptkSpOmtScPHsWD/4koePLo3+DBszfxoHgTlMxMdOsHCE2a3e3vB5Nn3jdvnjxvKIFnpiSAM2sx+fXnUlyLSxExHxFXI7LzUnFkNvLwQkRcj4i5R45SMf/nxPmIuBwR10bJ85yl4qnPbw5vrP/01i/ffHfh3JUvvv5+drsGZu3FiOju5ucH3TymrTw+KOZrw3YWu2vDIuZPdB8W4zSPB83tLMNBbbyulsXVVr4+3d3vj+JOp1YfxVZ7J5vf7eVv2B+2xnmyFzyo7WXjRnM7i+1+msXWUV7X4VH+3XbUH+R5GkW+j7L0MRiMYz7fPGzm+9l9mMV6b1DM53nTRvNwFIdFHH/31tNOI6tj+wQf9GPu7XZv/zAZNvf67bSXrFeqL1Wqt8vVvbTRHDTXyrVu4/ZastTqjJaVB81ad6OVpq1Os1JPu8vJUqteL1erydKd5na71kuq1cpq5VZ5fbk4u5m8fu+9pNNIlkbx1XZvf9Du9JOddC/JX7GcrFRWX15OblSTdza3kq37d+9ubr37wZ33772y+eZrxaJ/lJUsrdxaWSlXb5VXqstnaP+fFEVPcP9wIqVZFwDw5NH/A7Mwvf5/737E9Pv/mGL/X7yd/v9x63/Pev8/hf3Diej/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrB8WvnwjO1nMx1eK+WeKqeeKcSki5iLi938xH+eP5Zwv8iz8x/qFv9XwbSmyDKP3uFAclyNiozh+e3banwIAAAA8vb76+PpnebeePyzOuiBOU37RZu7qhxPKV4qIhcUfJ5RtbvTw/ISSZX/f5+JwQtmyC1gXJ5Qsv+R2blLZ/pf5Y+HiI6GUh7lTLQcAADgVxzuB0+1CAAAAOE2fzroAZqMU41uZ43vB2X/e/3VD8NKxEQAAAPAEKs26AAAAAGDqsv7f7/8BAADA0y3//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537yVkaCOMA/LZQAf9EYtx7FXdwCuMRXLo0HMBLsHJdr+AFOAPGjUcwYOgUIgYICdOSjzxP0m++aeHHDIGEdyYpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpZ9VPf/+5d3XW3M226tMIuLkhTyzAQAAAE5ZV/W8+Wea+i/a86/aU2/afhER5ZnifRDPjjIHbU515vHVf2P4EdEk7F5j1B7PI+J9e/x53fW7AAAAAI9rtVjOUrWe/kzvPSD6lBZtypcfM+UVEVFNf2dKK3d5bzOFNZ/vYXzOlNYsYI0zhaUlt2GutKs0X/fDqt34n6ZITXn5+dnmDgAA9ChVAvvf+/1WIQAAAPTp070HQEc+XL5cxH4r87AVOEpNu703OeoBAAAAT1Bx7wEAAAAAnWvq/3VVf/sV7v8HAAAAjyrd/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAurat6vlosZ7fmbLa3yTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+sj/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv37xk3FAQB/ts9XUkAcAd0QBpAYYKHXa2npBgygiIE/ASlKryX0yo82A60qUBY2lLkLKiNCSKCw9X/o3EpdwtbhhiIxF9ln5xxyiIMk9pF8PtLz+9py/b7PV0X5+vkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXRu5M4yTadcRwXx+4/vrWa9Q/+0mfubj5cyloWR3Um/f+wUN2Jus0lAgAAwPEQFbV9Uuxvp1vLWR938vo/Lc/Lav47z07+TZhS95d9Wftn7ddfHr24M1hnPE520Utrw8Hpvem0Dm+m8+25fzyjld/5/NlLkn8g8QcbL4zS/H5G39679147D0/UkS0A8F+cGnfbd4qg/H0o6/uNZgbAcdGqFN5l/Z90ms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA6jjfB0GUchhKXWJM48eHxrdVp/d/PhUtnO3769Wb1mdok0hHBpbTg4XeNc5t31GzevrAyHg2v1By+HEJoa/e1i+lc+muHkEBq5P4IDCuLiw56XfPYdPCn/9x7SEO+EEIYN/UACAODISouW1fXb6dZydixaDOHJ97vr/9cqcZix/n/08fn71bGq9X+/thnOv9761c9712/cfGPt6srlweXBp2+e6b/VP3vh3LkLvfxZSc8TEwAAAPanXbRq/R8v7l3/P1mJw4z1/xff9b+qjpWo/6eaLPo1nQkAAMDx9vwrf/weTTketdvhy5X19Wv98XZn/8x420Cq/9qJolXr/2Sx6awAAACAOow2ol3r/xcrcZhx/f+ZH176qXrNJISwUKz/n1r9bHixvunMtYP88vDXf/M9+abnCAAAQLMWilZd/0/z9//jnVce4hDC66+O4+LPAM5U/yfvf/Njdazq+/9n65viXIq74/uR990QWt2mMwIAAOAoe6poWbH/W7q1/MnPJz9se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoG5/BgAA//9kVzgr") r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ioctl$FITRIM(r8, 0x40305839, &(0x7f0000000080)={0x0, 0xe590, 0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) 10.084346631s ago: executing program 4 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000040)=0x5, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) ptrace(0x10, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x0, 0x2}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x40}}, 0x0) 6.72773361s ago: executing program 3 (id=656): lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfb, 0x577, &(0x7f0000000e40)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setrlimit(0xb, &(0x7f0000000000)={0x7, 0x4}) io_setup(0x4, &(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 5.936738313s ago: executing program 3 (id=661): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x20, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 5.776688108s ago: executing program 0 (id=662): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) brk(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x6, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010001307000000001a0000007f000001000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000002000100650000000000000048000200656362286369706865725f6e756c6c29000000000000000000008000"/212], 0x138}}, 0x0) 4.808660297s ago: executing program 1 (id=666): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r4, &(0x7f0000004200)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.794715928s ago: executing program 0 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f400850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (async) open(0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r7 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16=r7, @ANYRES32, @ANYRESOCT=r8, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") listen(0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000740)='./file0\x00', 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8], 0x1, 0x1a6, &(0x7f0000000400)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r10, 0x0, 0x0, 0x3) 4.737470904s ago: executing program 0 (id=668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000011c0)={0x2c, &(0x7f0000000fc0)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) 4.729946974s ago: executing program 2 (id=669): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.45242021s ago: executing program 2 (id=670): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfe, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x5, 0x0, r2, 0x0, 0x2}]) 4.395118215s ago: executing program 2 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000000007010000f8ffffffb702000000000000b70300000000000085000000700000009500"/81], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = io_uring_setup(0x177, &(0x7f0000000380)={0x0, 0x10005990, 0x40, 0x2, 0x23c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r6, 0x29, 0x48, 0x0, 0x2000005d) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x80, &(0x7f0000000280)={0x20, 0x16, 0x40, 0x7, 0x5}, 0x8, 0x55ac, 0xe03e, 0x0, 0x0, 0xa822, &(0x7f00000002c0)="bf3367bdc6c0046c9cb68072af5637239869fc90cff7358493"}) sendfile(r8, 0xffffffffffffffff, 0x0, 0x2000) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x3d17b545f6dcebee, 0x2, 0x8e, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3.893599132s ago: executing program 1 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000001000000bbff020000000000000000000000000001"], 0x0) 3.767627303s ago: executing program 1 (id=673): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000001d09040000010300000009210000000122070009058103"], 0x0) 2.863989406s ago: executing program 3 (id=674): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) 2.625502928s ago: executing program 3 (id=675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)={[{@acl}, {@data_journal}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*-#&,]![{'}}, {@obj_type={'obj_type', 0x3d, '&([}{'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") 2.448770384s ago: executing program 2 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000003000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000001b80)=""/4091, 0x5e, 0xffb, 0x1, 0x0, 0x0, @void, @value}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.291214229s ago: executing program 1 (id=677): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = open(0x0, 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x2000000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) 1.713548052s ago: executing program 3 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c82d31ddd90df9fa3c5063b9148e84b83ad91ebf37995d1b02f1114177d6824b8891b7085e9f89c7ee19577df9f9cc3d45b9875772ae3c644b26fab8b769c73fb8a4d9ca9df0f1112b22bcd0e6710ddee36f3deb15d9b2610e97b14934bf3ba4d0643759c2a3f1b0eeb8bbb7d94f8de2a3de6f758ef4ec562f29af86e648f9eaef83f82dc936be9ae6cbfc061030d05a0f40c00a8987cebbeee11bc122f3b5256dde9cc484bd1d1bdfa2d9f6c5586dc20839ebf6e04dd12707b7441121aeb1a3c787b944bc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000043a800"/22, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000009a8af8ff00000000bfa200000001000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r4}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_io_uring_setup(0x5bb8, &(0x7f00000001c0)={0x0, 0x1adc, 0x2, 0x1, 0x291}, &(0x7f0000000240), &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xee, 0x442, &(0x7f0000000d00)="$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") r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000008000000009a0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) 1.666499606s ago: executing program 0 (id=679): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x64000000, 0x0) 1.575129575s ago: executing program 2 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000580)={r2, 0x1, 0x6, @remote}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x13, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="7d05050130b7"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x10) 1.488227283s ago: executing program 2 (id=681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000fc6285dba79ca3758a419241b1477025d246be0e5fd659c51736ae49bdac27dedfe83"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000004a561f744002724072135630fca2a801dcd23b91d02b100cc0ba5af22e32656a24faa434c7bb66f5c46a15705aa404da0efbd17e315bb21069d0ec92192237419f2dcb0b1b16d84bc3ac44e5aac75510cbc8e9a0fbbd5246bdde6b0f032b1656faee252d190c3df6abe79f5a43a7bbd17f2bb77cec5e1a700755a167d85b7b1683b5c2f02f9027c1cf149a98541a24fae09b3220ce77fbb9c70b9b09046f6eee8a2731206089b0813d26b32448fd7087b29a828eb57e6efa224516069a9f2854f9ea51ad17ee161076028"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@noquota}, {@dioread_nolock}]}, 0x1, 0x55b, &(0x7f0000000940)="$eJzs3U9oHNUfAPDvzGZ//ZefqaCg0kNRoULpJukfrZ7aq1go9CB4qctmG0I22ZDdaBNySO9F7EFUeqk3PXhUPHgQLx69elE8C6JBoelBVvZf2iabuK1JtnY+H5jd9+Zt9vvezH7f7gwzJIDMOtp8SCOejYiLScTIPW1D0Wk82n7d2upy6c7qcimJRuPSb0kkEXF7dbnUfX3SeT4UESsR8UxEfJuPOJ5ujltbXJouVirl+U59tD4zN1pbXDoxNVOcLE+WZ0+98uqZs6fPjJ8c37GxXv/pxnvXv3/91o3PPj+yUvqgmMS5GO603TuOndTeJvk4t2H96d0INkDJoDvAQ8l18jwfEU/HSOQ6WQ88/hr7IhpARiXyHzKq+zugefzbXfby98ev59sHIM24a52l3TLUPjcR+1vHJgf/SO47Mmkebx7ey47yWFq5FhFjQ0ObP/9J5/P38MZ2ooPsqm/Ot3fU5v2frs8/0WP+Ge6eO/2XuvPf2qb572783Bbz38U+Y/z11s8fbxn/WsRzPeMn6/GTHvHTiHi7z/g33/zq7FZtjU8ijkXv+F3J9ueHR69MVcpj7ceeMb4+duS17cZ/cIv47XO2+1tfM722/1yf4//yuy+eX9km/ksvbL//e23/AxHxfp/xn7z96RtbtTXjT2wx/u3iN9fd6jP+y+eO/tjnSwEAAAAAAAAAgAeQtq5lS9LCejlNC4X2PbxPxcG0Uq3Vj1+pLsxOtK95Oxz5tHul1Ui7njTr453rcbv1kxvqp3KdgLkDrXqhVK1MDHjsAAAAAAAAAAAAAAAAAAAA8Kg4tOH+/z9z7fv/gYzwL78hu+Q/ZNf9+Z8MrB/A3vP9D5nVkP+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAADsiosXLjSXxp3V5VKzPjG0uDBdfefERLk2XZhZKBVK1fm5wmS1OlkpF0rVmX96v0q1OjcWswtXR+vlWn20trh0eaa6MFu/PDVTnCxfLuf3ZFQAAAAAAAAAAAAAAAAAAADw3zLcWpK0EBFpq5ymhULE/yPicOSTK1OV8lhEPBERP+Ty+5r18UF3GgAAAAAAAAAAAAAAAAAAAB4ztcWl6WKlUp5X2FyIiJWdfefmOz7wX+U7++pR2SwKWSgMeGICAAAAAAAAAAAAAAAAAIAMunvT76B7AgAAAAAAAAAAAAAAAAAAAFmW/pJERHM5NvLi8MbW/yVrudZzRLx789KHV4v1+vx4c/3v6+vrH3XWnxxE/4F+dfO0m8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXbXFpelipVKe38XCoMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD+DgAA//+H69Sv") open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) 1.327224918s ago: executing program 1 (id=682): creat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x80000001, 0x2, 0x2, 0x6a, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000033bc4200"/31], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5, 0x0, 0x9}, 0x18) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0200ffff07"], 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.036204845s ago: executing program 0 (id=683): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = open(0x0, 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0x100000000000000, 0x12) fcntl$setlease(r6, 0x400, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) 797.534526ms ago: executing program 3 (id=684): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x20, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 456.786968ms ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0x0, 0xd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000800000000e0977834729016662e5264dab2d825d62cf7999fd985da093d4daaa5096bb73580af119c43eaf4207b34ddb907ab54643d60dab7cb965f267cbfbcc112b0364a860abe2db54a718d4d744b8aea5924588d71f4f3c87e3f19da97b10c3dbf0127178a8e10d4c338357c15b24682893dd600"/156], 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3, @ANYRES16, @ANYRES16], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=686): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$eJzs3E1rY9UfB/CTPs7Tf/5FXLibC4PQwiQ0fRh0V3UGH7BD8WHhStMkDZlJckuTprUrFy7Fhe9EFFy59DW4cO1OXCjuhJHccypTH0Bp2tjp5wO333tPTn73nEtpOfeGBODSWsh++akUboarIYTpEMKNEIr9UtoKGzGeCyHcCiFMPbGVUvvvDXMhhGshhJuj4rFmKb302Z3h7fUf3/j562/nZ65//tV3k5s1MGnPhxC6u3H/oBszb8V8mNprw3aR3bVhyvhC91E6zmMeNLeLCge14361IldbsX++u98f5U6nVh9lq71TtO/24gn7w9ZxneIND2t7xXGjuV1ku58X2TqK4zo8in/bjvqDWKeR6n1YlA+DwXHG9uZhM85n91GR9d4gtce6eaN5OMphynS6UM87jWIc26e50v9tb7Z7+4fZsLnXb+e9bL1SfaFSvVuu7uWN5qC5Vq51G3fXssVWZ9StPGjWuhutPG91mpV63l3KFlv1erlazRbvNbfbtV5WrVZWK8vl9aW0dyd79cG7WaeRLY7y5XZvf9Du9LOdfC+L71jKViqrLy5lt6vZ25tb2dZb9+9vbr3z/r33Hry0+forqdOfhpUtriyvrJSry+WV6tLFnf/of/2/mv/HadBjnD+cSmnSAwC4eKz/gUm46Ov/YP0/Ftb/l3b+j5PTXUAuN+t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL6/vZL14rdhbi8fXU/r/U9Ew6LoUQpkIIj//CdJg7UXM61Zn9m/6zfxjDN6VQVBidYz5t10IIG2n79f9nfRUAAADg6fXlR7c+jav1+GNh0gPiPMWbNlM3PhhTvVIIYXbhhzFUCelmU3j29KOKRr/fM+FwTNWKG1hXxlQs3nKbGVe1f2T6RFx5Ikoxpo57zp3ruAAAgLN0ciVwvqsQAAAAztMnkx4Ak1E8aU2fxU+P+eZjpAeCV08cAQAAABdQadIDAAAAAM5csf73/X8AAADwdIvf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAbO3eTkzoUBQD4tND3eD9GYpy7FWewDJfg0KFhKywBt+AGWAPOXIIBQ3tRMRhM+hfJ9yXt5TbN4ZTQwTm3KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG16KhbTh/urUd046009zVwNAAAAcMiqWEzLD+Nq/i8dP0uHLtI8i4g8Ig7V7oP4tRdzkOIUX5xffMrhMaKMsP2O32n7GxHXaXs5b/tXAAAAgNO1nM0nVbVe7cZ9J0SXqqZN/v+moXhZRBTj54ai5dvd5bdO3RzvD23/38O4q59WqWxg1X5kZqdsuQ2binbcIN3ub8Pow5BVQ95dOgAAQFf2K4EOqxAAAAA6dtt3AvQji91S5m4tuHzy/n1B8M/eDAAAAPiBsr4TAAAAAFpX1v/e/wcAAACnrXr/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1aFYvpcjaf1I2z3tTTzNUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLI/7ygMw2AQBjeJ8uqELuD739Is2K1bNzMg+Pi3EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlcfx8jzj1ZjJNnqdSd49rySfTo1vp8avc+OfZKy7fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwsz8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAv2efr7SACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/+Hzq3UpWwdMhSJiQFkn528HpU4WtW+Np+P9Py+thy/73OiKF8/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo7L67H+flZmESZ/Wxm/eurpf9ram+dH379nLZyrjXZtJPhlfTnd5Sd4kAAABwcORNfR8xiGJntQyyhar+L5pzypr/++cncVPPT9f9Td/U/mX77de7L+8NtDAZp7zouY3x6Pi/U+k/xmnOtRf+84x+deerZy959Q3JPth6abeo7mfv2xs33htU4aE2sgUAHsaxpq+D5u+hsh92mRgAB0Y/Kbzv1PV/vtBtTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtGGzFs03ci4jl/n5cunXv6nrVT+1f37693LTT165tp9csL1FExLmN8eh4WxN5Aly6fOXTtfF4dLH94LWI6G70OvhohnMiusxQ8KhBVv+sz/ZVRyOi+5y7Dzr+xQQAwFOnqFtZ198pdlbLY73FiL9/uL/+fyOJI63/p/q0/r/78emb6Vhp/T9sbYbzb2Xzwhcrly5feWvjwtr50fnRZ2+fGL4zPHnm1KkzK9WzkhVPTAAAAHg0g7ql9X+2GLE7tf5/JIljxvr/y++GX6dj5er/B9pf9Os6EwAAgIPtxaN//tF7wPHeYBBfrW1uXhxOtnv7JybbDlL93w7VLa3/88WuswIAAADasLvVu2/9/2wSx4zr/8/9+MrP6TXziDhcr/8fW/98fLa96XTkr5nOauPfiR/7VAEAAJhrh+uWrv8X1fv/2d4rD1lEvPn6JK4/BnCm+j9//5uf0rHS9/9PtjfFuZQtTe5H1S9F9Je6zggAAICn2TN1K4v934ud1U9+OfLhwPv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG37JwAA//9VakSc") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_pts(0xffffffffffffffff, 0x0) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)={[{@acl}, {@data_journal}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*-#&,]![{'}}, {@obj_type={'obj_type', 0x3d, '&([}{'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BX3URxD8gIloor5vgUheFgpQiIqhQEXFRWqG2uDVOLg46q3RyKeJmdZQuxUURnKp2qIugxcHioEMkuVZqG/FPak56nw9c7i73PPd7jtz3SZYjARrrapLZJK0k00k6SYqTDe6qlqtHuxtTO4tJv//4j8WwXbVfOe53JUkvyYNJtssiL7aTta2n93/effTeN1Y797y39dTURC/yyMH+3mOH786//uHcA2uff/n9fJHZdP9wXeevGPFeu0hu/i+K/U8U7bpHwN+x8OoHXw1yf0uSu4f576RM9eG9uXLddif3v/Nnfd/64YvbJjlW4Pz1+53Bd2CvDzROmaSbopxJUm2X5cxM9Rv+69bl8qXllVemX1heXXq+7pkKOC/dZO+Rjy99dOVU/r9rVfkHLq5B/p9Y2PxmsH3Yqns0wETcXq0G+Z9+dv2+yD80jvxDc8k/NJf8Q3PJPzSX/ENzyT9cYJ3jjd7Iw/IPzSX/0FzyD811Mv8AQLP0L9X9BDJQl7rnHwAAAAAAAAAAAAAAAAAA4KyNqZ3F42VSNT99Ozl4OEl7VP3W8P+Ik+uHr5d/KgbNfldU3cbyzJ1jnmBM79f89PUN39Zb/7M76q2/vpT0Xktyrd0+e/8VR/ffv3fTXxzvPDdmgX+oOLX/0JOTrX/ar5v11p/bTT4ZzD/XRs0/ZW4drkfPP90kN45Z/+VfxjwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/NbAAAA//9jD23W") kernel console output (not intermixed with test programs): in 1th superblock [ 123.364373][ T2455] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.366968][ T2453] F2FS-fs (loop1): invalid crc value [ 123.372498][ T2455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.379198][ T2453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.384727][ T2455] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.397563][ T2455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.419185][ T2453] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.422683][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.426162][ T2453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.440906][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.450046][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.478311][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.486630][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.493511][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.500755][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.511206][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.518054][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.525441][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.533807][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.553496][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.791677][ T2455] device veth0_vlan entered promiscuous mode [ 123.810229][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.822381][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.843111][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.870020][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.879242][ T2455] device veth1_macvtap entered promiscuous mode [ 123.891000][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.526618][ T435] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.539447][ T435] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.549723][ T384] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.550188][ T435] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.559127][ T384] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 124.567824][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.584830][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.596310][ T435] usb 4-1: config 0 descriptor?? [ 124.603220][ T8] device bridge_slave_1 left promiscuous mode [ 124.609967][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.617378][ T8] device bridge_slave_0 left promiscuous mode [ 124.623489][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.632343][ T8] device veth1_macvtap left promiscuous mode [ 124.638169][ T8] device veth0_vlan left promiscuous mode [ 124.894115][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.910149][ T2476] loop1: detected capacity change from 0 to 40427 [ 124.911145][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.929619][ T2469] device bridge_slave_0 entered promiscuous mode [ 124.938443][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.945558][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.953246][ T2469] device bridge_slave_1 entered promiscuous mode [ 124.969584][ T2476] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 124.977264][ T2476] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.998371][ T2476] F2FS-fs (loop1): invalid crc value [ 125.004834][ T2476] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.068532][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.075426][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.082567][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.089442][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.115339][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.122819][ T2476] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.129826][ T393] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 125.138303][ T2476] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.147161][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.158185][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.180065][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.198353][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.205235][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.222888][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.239158][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.240137][ T2474] loop4: detected capacity change from 0 to 131072 [ 125.246044][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.290083][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.297922][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.312595][ T2469] device veth0_vlan entered promiscuous mode [ 125.320702][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.320754][ T2474] F2FS-fs (loop4): invalid crc value [ 125.329347][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.342767][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.350293][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.351342][ T2474] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.363744][ T2469] device veth1_macvtap entered promiscuous mode [ 125.371768][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.385481][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.398155][ T2474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 125.408113][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.437794][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 125.437810][ T30] audit: type=1400 audit(1727032321.094:1260): avc: denied { setattr } for pid=2473 comm="syz.4.504" name="" dev="pipefs" ino=17967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 125.488124][ T2496] syz.2.501 (2496) used greatest stack depth: 19552 bytes left [ 125.502277][ T2498] FAULT_INJECTION: forcing a failure. [ 125.502277][ T2498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.518773][ T2498] CPU: 1 PID: 2498 Comm: syz.2.506 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 125.528411][ T2498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 125.538301][ T2498] Call Trace: [ 125.541419][ T2498] [ 125.544204][ T2498] dump_stack_lvl+0x151/0x1c0 [ 125.548718][ T2498] ? io_uring_drop_tctx_refs+0x190/0x190 [ 125.554190][ T2498] ? kstrtouint_from_user+0x20a/0x2a0 [ 125.559387][ T2498] dump_stack+0x15/0x20 [ 125.563378][ T2498] should_fail+0x3c6/0x510 [ 125.567750][ T2498] should_fail_usercopy+0x1a/0x20 [ 125.572610][ T2498] _copy_to_user+0x20/0x90 [ 125.576985][ T2498] simple_read_from_buffer+0xc7/0x150 [ 125.582184][ T2498] proc_fail_nth_read+0x1a3/0x210 [ 125.587143][ T2498] ? proc_fault_inject_write+0x390/0x390 [ 125.592621][ T2498] ? fsnotify_perm+0x470/0x5d0 [ 125.597299][ T2498] ? security_file_permission+0x86/0xb0 [ 125.602676][ T2498] ? proc_fault_inject_write+0x390/0x390 [ 125.608146][ T2498] vfs_read+0x27d/0xd40 [ 125.612141][ T2498] ? kernel_read+0x1f0/0x1f0 [ 125.616652][ T2498] ? __kasan_check_write+0x14/0x20 [ 125.621685][ T2498] ? mutex_lock+0xb6/0x1e0 [ 125.625939][ T2498] ? wait_for_completion_killable_timeout+0x10/0x10 [ 125.632361][ T2498] ? __fdget_pos+0x2e7/0x3a0 [ 125.636789][ T2498] ? ksys_read+0x77/0x2c0 [ 125.640953][ T2498] ksys_read+0x199/0x2c0 [ 125.645034][ T2498] ? __fget_files+0x31e/0x380 [ 125.649634][ T2498] ? vfs_write+0x1110/0x1110 [ 125.654146][ T2498] ? debug_smp_processor_id+0x17/0x20 [ 125.659351][ T2498] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 125.665341][ T2498] __x64_sys_read+0x7b/0x90 [ 125.669687][ T2498] x64_sys_call+0x28/0x9a0 [ 125.673932][ T2498] do_syscall_64+0x3b/0xb0 [ 125.678195][ T2498] ? clear_bhb_loop+0x35/0x90 [ 125.682700][ T2498] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.688429][ T2498] RIP: 0033:0x7f52c211993c [ 125.692683][ T2498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 125.712210][ T2498] RSP: 002b:00007f52c0d94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.720456][ T2498] RAX: ffffffffffffffda RBX: 00007f52c22d2f80 RCX: 00007f52c211993c [ 125.728264][ T2498] RDX: 000000000000000f RSI: 00007f52c0d940a0 RDI: 0000000000000007 [ 125.736076][ T2498] RBP: 00007f52c0d94090 R08: 0000000000000000 R09: 0000000000000000 [ 125.743898][ T2498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.751705][ T2498] R13: 0000000000000000 R14: 00007f52c22d2f80 R15: 00007ffd6b0395d8 [ 125.759520][ T2498] [ 125.779085][ T393] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.801956][ T393] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 125.811870][ T2501] tipc: Started in network mode [ 125.816630][ T2501] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.823217][ T393] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 125.838940][ T393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.846858][ T2501] tipc: New replicast peer: 100.1.1.1 [ 125.859070][ T2501] tipc: Enabled bearer , priority 10 [ 126.209021][ T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 126.234188][ T8] device bridge_slave_1 left promiscuous mode [ 126.240951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.252174][ T8] device bridge_slave_0 left promiscuous mode [ 126.258162][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.266299][ T8] device veth1_macvtap left promiscuous mode [ 126.272192][ T8] device veth0_vlan left promiscuous mode [ 126.629066][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 126.640126][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 126.651181][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.663942][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.673083][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.687030][ T39] usb 2-1: config 0 descriptor?? [ 126.709663][ T2505] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.779004][ T393] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 126.796062][ T393] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input30 [ 126.807668][ T2515] loop0: detected capacity change from 0 to 40427 [ 126.814525][ T393] input: failed to attach handler kbd to device input30, error: -5 [ 126.829593][ T2515] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 126.859255][ T2515] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.881670][ T393] usb 1-1: USB disconnect, device number 20 [ 126.891489][ T948] udevd[948]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 126.903535][ T2515] F2FS-fs (loop0): invalid crc value [ 126.917534][ T6] usb 4-1: USB disconnect, device number 18 [ 126.946333][ T2524] loop3: detected capacity change from 0 to 2048 [ 126.953780][ T2515] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.978976][ T435] tipc: Node number set to 2886997162 [ 127.023243][ T2515] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.036396][ T2520] loop4: detected capacity change from 0 to 40427 [ 127.039019][ T2515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.050544][ T2520] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 127.076311][ T2520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.090287][ T2520] F2FS-fs (loop4): invalid crc value [ 127.095115][ T2518] loop2: detected capacity change from 0 to 40427 [ 127.097057][ T2524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.114038][ T2524] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 127.128103][ T2518] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 127.136318][ T2518] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.159533][ T2518] F2FS-fs (loop2): invalid crc value [ 127.165580][ T2520] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.221359][ T2518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.225623][ T39] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 127.240557][ T39] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 127.260682][ T39] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 127.290347][ T2520] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 127.297217][ T2520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.317424][ T2518] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 127.324848][ T2518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.376316][ T2542] fs-verity: sha256 using implementation "sha256-avx2" [ 127.510732][ T2544] attempt to access beyond end of device [ 127.510732][ T2544] loop4: rw=2049, want=45104, limit=40427 [ 127.589980][ T39] usb 2-1: USB disconnect, device number 16 [ 127.810162][ T2541] loop0: detected capacity change from 0 to 40427 [ 127.828102][ T2541] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.842314][ T2541] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.869215][ T2541] F2FS-fs (loop0): invalid crc value [ 127.897982][ T2541] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.994282][ T2541] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 128.001346][ T2541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.292725][ T30] audit: type=1400 audit(1727032323.954:1261): avc: denied { append } for pid=2560 comm="syz.3.517" name="hwrng" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 128.296132][ T2559] loop2: detected capacity change from 0 to 512 [ 128.349293][ T30] audit: type=1400 audit(1727032323.994:1262): avc: denied { create } for pid=2560 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.364726][ T2561] loop3: detected capacity change from 0 to 4096 [ 128.379468][ T2564] fuse: Bad value for 'fd' [ 128.379812][ T2559] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.394602][ T2564] input: syz0 as /devices/virtual/input/input32 [ 128.409622][ T2561] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 128.437742][ T2561] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 128.455395][ T2559] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.488629][ T2559] EXT4-fs (loop2): 1 truncate cleaned up [ 128.494275][ T2559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.198955][ T435] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.206416][ T20] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.255552][ T2580] loop3: detected capacity change from 0 to 4096 [ 129.301942][ T2580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.313256][ T2580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.328957][ T2580] EXT4-fs (loop3): Ignoring removed oldalloc option [ 129.328972][ T310] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 129.346664][ T2580] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,data_err=ignore,test_dummy_encryption,test_dummy_encryption,nobarrier,barrier,minixdf,oldalloc,,errors=continue. Quota mode: writeback. [ 129.459243][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 129.553023][ T2585] loop2: detected capacity change from 0 to 1024 [ 129.579080][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.590238][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.605998][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.615889][ T2580] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 129.617328][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.626597][ T2585] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.644192][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 129.644243][ T2585] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 129.662756][ T435] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 129.679472][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.688488][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /6/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 129.693726][ T20] usb 2-1: config 0 descriptor?? [ 129.709921][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 129.714035][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.742220][ T2469] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 129.742844][ T310] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.771772][ T30] audit: type=1400 audit(1727032325.414:1263): avc: denied { rmdir } for pid=2469 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.772178][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 129.797722][ T435] usb 1-1: config 0 descriptor?? [ 129.814925][ T2469] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 129.819163][ T2570] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.837942][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 129.845027][ T310] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 129.866403][ T2469] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 129.874892][ T310] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 129.893616][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 129.902499][ T20] hub 2-1:0.0: USB hub found [ 129.923642][ T2469] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 129.929654][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.947530][ T2469] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 130.109101][ T20] hub 2-1:0.0: 2 ports detected [ 130.174321][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.181322][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.188443][ T2596] device bridge_slave_0 entered promiscuous mode [ 130.197514][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.204426][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.211655][ T2596] device bridge_slave_1 entered promiscuous mode [ 130.254807][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.261698][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.268772][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.275566][ T2596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.296049][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.303745][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.311927][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.322888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.330891][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.337742][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.348317][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.356349][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.363208][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.378786][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.386791][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.397736][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.409663][ T2596] device veth0_vlan entered promiscuous mode [ 130.416247][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.424152][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.431719][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.443998][ T2596] device veth1_macvtap entered promiscuous mode [ 130.452793][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.466408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.474778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.490198][ T435] samsung 0003:0419:0600.0019: report_id 0 is invalid [ 130.498950][ T435] samsung 0003:0419:0600.0019: item 0 0 1 8 parsing failed [ 130.506173][ T435] samsung 0003:0419:0600.0019: parse failed [ 130.513001][ T435] samsung: probe of 0003:0419:0600.0019 failed with error -22 [ 130.538949][ T2603] loop2: detected capacity change from 0 to 256 [ 130.559573][ T8] device bridge_slave_1 left promiscuous mode [ 130.565585][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.573156][ T8] device bridge_slave_0 left promiscuous mode [ 130.579331][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.586839][ T8] device veth1_macvtap left promiscuous mode [ 130.592763][ T8] device veth0_vlan left promiscuous mode [ 130.611015][ T2603] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 130.625349][ T2603] exFAT-fs (loop2): hint_cluster is invalid (17) [ 130.677140][ T2606] loop2: detected capacity change from 0 to 512 [ 130.711757][ T2606] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.726229][ T327] usb 1-1: USB disconnect, device number 21 [ 130.745975][ T2606] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.747770][ T2612] loop4: detected capacity change from 0 to 512 [ 130.767965][ T2606] EXT4-fs (loop2): 1 truncate cleaned up [ 130.774320][ T2606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.801251][ T2612] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.822893][ T2606] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 130.838951][ T2612] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.846764][ T2606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 130.853903][ T2612] EXT4-fs (loop4): 1 truncate cleaned up [ 130.867721][ T2612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.868409][ T2606] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 130.879003][ T310] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 130.897515][ T2606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 130.897751][ T2615] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 130.920377][ T2606] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 130.932278][ T2606] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 130.941224][ T310] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input33 [ 130.944273][ T2606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 130.970123][ T310] input: failed to attach handler kbd to device input33, error: -5 [ 130.978223][ T2615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 131.004183][ T310] usb 5-1: USB disconnect, device number 15 [ 131.010891][ T2615] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.528: corrupted xattr block 19 [ 131.085826][ T2615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 131.115749][ T2617] loop3: detected capacity change from 0 to 40427 [ 131.187933][ T2623] syz.4.529[2623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.188288][ T2623] syz.4.529[2623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.269789][ T2617] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 131.308868][ T2622] loop2: detected capacity change from 0 to 1024 [ 131.336819][ T2617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 131.345864][ T2617] F2FS-fs (loop3): invalid crc value [ 131.357221][ T2622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.375979][ T30] audit: type=1400 audit(1727032327.034:1264): avc: denied { setopt } for pid=2621 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.398418][ T2617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.407330][ T2629] loop0: detected capacity change from 0 to 256 [ 131.438963][ T30] audit: type=1400 audit(1727032327.064:1265): avc: denied { getopt } for pid=2621 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.462413][ T30] audit: type=1400 audit(1727032327.064:1266): avc: denied { read } for pid=2621 comm="syz.2.531" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.476282][ T2617] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 131.486251][ T30] audit: type=1400 audit(1727032327.064:1267): avc: denied { open } for pid=2621 comm="syz.2.531" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.506396][ T2617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.538996][ T20] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 131.741293][ T26] usb 2-1: USB disconnect, device number 17 [ 132.400116][ T2649] netlink: 7 bytes leftover after parsing attributes in process `syz.3.536'. [ 132.898226][ T2652] loop4: detected capacity change from 0 to 256 [ 132.974177][ T30] audit: type=1400 audit(1727032328.634:1268): avc: denied { bind } for pid=2655 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.981712][ T2652] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 133.007946][ T2657] loop3: detected capacity change from 0 to 512 [ 133.021809][ T2652] exFAT-fs (loop4): hint_cluster is invalid (17) [ 133.062358][ T2657] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 133.135662][ T2667] loop4: detected capacity change from 0 to 1024 [ 133.203061][ T2667] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.542: Invalid block bitmap block 0 in block_group 0 [ 133.218104][ T2667] Quota error (device loop4): write_blk: dquota write failed [ 133.225771][ T2667] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 133.236013][ T39] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 133.256780][ T2667] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.542: Failed to acquire dquot type 0 [ 133.277212][ T2676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.543'. [ 133.300412][ T2667] EXT4-fs error (device loop4): ext4_free_blocks:6226: comm syz.4.542: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.316106][ T2667] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.542: Invalid inode bitmap blk 0 in block_group 0 [ 133.329649][ T330] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 133.349090][ T330] EXT4-fs error (device loop4): ext4_release_dquot:6210: comm kworker/u4:3: Failed to release dquot type 0 [ 133.360382][ T2667] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 133.369362][ T2667] EXT4-fs (loop4): 1 orphan inode deleted [ 133.375304][ T2667] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 133.499186][ T2678] loop1: detected capacity change from 0 to 40427 [ 133.550688][ T2678] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 133.558446][ T2678] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.567317][ T2678] F2FS-fs (loop1): invalid crc value [ 133.574174][ T2678] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.596722][ T2678] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.603677][ T2678] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.669020][ T39] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.670145][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 133.680332][ T39] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.689165][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 133.698553][ T39] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 133.716143][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.724136][ T311] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 133.759236][ T26] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 133.877252][ T2688] loop1: detected capacity change from 0 to 40427 [ 133.929499][ T2688] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 133.937197][ T2688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.952419][ T2690] loop2: detected capacity change from 0 to 512 [ 133.956758][ T2688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.967467][ T2690] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.980957][ T2690] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.990977][ T2688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.002660][ T2688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.002802][ T2690] EXT4-fs (loop2): 1 truncate cleaned up [ 134.015610][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 134.021868][ T2690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.897809][ T2701] syz.2.550[2701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.897989][ T2701] syz.2.550[2701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.912784][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.937132][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.947391][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.960877][ T30] audit: type=1400 audit(1727032329.874:1269): avc: denied { create } for pid=2687 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.986912][ T311] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 135.009371][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.068988][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.077045][ T30] audit: type=1400 audit(1727032329.904:1270): avc: denied { bind } for pid=2687 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.103004][ T26] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 135.113269][ T311] usb 4-1: config 0 descriptor?? [ 135.118260][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.130556][ T26] usb 5-1: config 0 descriptor?? [ 135.163827][ T2704] loop2: detected capacity change from 0 to 256 [ 135.179605][ T26] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 135.211547][ T2704] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 135.230642][ T2704] exFAT-fs (loop2): hint_cluster is invalid (17) [ 135.300261][ T2710] loop2: detected capacity change from 0 to 512 [ 135.396872][ T2680] loop3: detected capacity change from 0 to 1024 [ 135.404573][ T2710] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 135.439139][ T2710] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 135.455067][ T2680] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.507802][ T2680] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,dioread_nolock,,errors=continue. Quota mode: none. [ 135.529029][ T2680] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 135.754165][ T2722] loop2: detected capacity change from 0 to 40427 [ 135.764790][ T2722] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 135.772483][ T2722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.783676][ T2722] F2FS-fs (loop2): invalid crc value [ 135.800316][ T2722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.836249][ T2722] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.843226][ T2722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.859013][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 135.864769][ T311] usbhid: probe of 4-1:0.0 failed with error -71 [ 135.878031][ T2723] loop4: detected capacity change from 0 to 40427 [ 135.912089][ T311] usb 4-1: USB disconnect, device number 19 [ 135.940274][ T384] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 135.950951][ T384] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 135.965507][ T2723] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 135.978955][ T2723] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 135.992041][ T2723] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.022627][ T2723] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.029662][ T2723] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.046016][ T2723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 136.056515][ T2723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 136.070162][ T2723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.548'. [ 136.078973][ T2723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.548'. [ 136.135970][ T2735] loop2: detected capacity change from 0 to 128 [ 136.149531][ T2735] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.161178][ T2735] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 136.259585][ T2740] loop1: detected capacity change from 0 to 256 [ 136.299971][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.307374][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.314656][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.321822][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.336224][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.349899][ T2740] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 136.365219][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.425427][ T39] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 136.494491][ T39] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input34 [ 136.503871][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.518965][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.526578][ T39] input: failed to attach handler kbd to device input34, error: -5 [ 136.534392][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.542228][ T2747] FAULT_INJECTION: forcing a failure. [ 136.542228][ T2747] name failslab, interval 1, probability 0, space 0, times 0 [ 136.551205][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.554708][ T2747] CPU: 0 PID: 2747 Comm: syz.1.558 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 136.562023][ T39] usb 1-1: USB disconnect, device number 22 [ 136.571809][ T2747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.571826][ T2747] Call Trace: [ 136.571832][ T2747] [ 136.571841][ T2747] dump_stack_lvl+0x151/0x1c0 [ 136.582744][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.587435][ T2747] ? io_uring_drop_tctx_refs+0x190/0x190 [ 136.590689][ T2681] mmap: syz.4.548 (2681): VmData 17584128 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 136.593334][ T2747] ? pcpu_chunk_relocate+0x20a/0x430 [ 136.612365][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.623282][ T2747] dump_stack+0x15/0x20 [ 136.623308][ T2747] should_fail+0x3c6/0x510 [ 136.644111][ T2747] __should_failslab+0xa4/0xe0 [ 136.648710][ T2747] should_failslab+0x9/0x20 [ 136.653136][ T2747] slab_pre_alloc_hook+0x37/0xd0 [ 136.657908][ T2747] kmem_cache_alloc_trace+0x48/0x210 [ 136.663029][ T2747] ? ioprio_alloc_pd+0x71/0xa0 [ 136.665419][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.667624][ T2747] ? ioprio_free_cpd+0x20/0x20 [ 136.679529][ T2747] ioprio_alloc_pd+0x71/0xa0 [ 136.684042][ T2747] blkcg_activate_policy+0x243/0xe00 [ 136.689174][ T2747] blk_ioprio_init+0x1c/0x20 [ 136.693587][ T2747] blkcg_init_queue+0x17c/0x200 [ 136.698277][ T2747] blk_alloc_queue+0x3fa/0x570 [ 136.702975][ T2747] __blk_mq_alloc_disk+0x48/0x160 [ 136.704303][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.707828][ T2747] loop_add+0x2a6/0x920 [ 136.707850][ T2747] loop_control_ioctl+0x109/0x6f0 [ 136.723976][ T2747] ? xor_init+0x70/0x70 [ 136.727964][ T2747] ? security_file_ioctl+0x84/0xb0 [ 136.732920][ T2747] ? xor_init+0x70/0x70 [ 136.736914][ T2747] __se_sys_ioctl+0x114/0x190 [ 136.738994][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.741413][ T2747] __x64_sys_ioctl+0x7b/0x90 [ 136.753049][ T2747] x64_sys_call+0x98/0x9a0 [ 136.757298][ T2747] do_syscall_64+0x3b/0xb0 [ 136.761549][ T2747] ? clear_bhb_loop+0x35/0x90 [ 136.766066][ T2747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.768474][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.771791][ T2747] RIP: 0033:0x7f6403732ef9 [ 136.771808][ T2747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.771822][ T2747] RSP: 002b:00007f640238b038 EFLAGS: 00000246 [ 136.798435][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.803126][ T2747] ORIG_RAX: 0000000000000010 [ 136.803136][ T2747] RAX: ffffffffffffffda RBX: 00007f64038eb058 RCX: 00007f6403732ef9 [ 136.803149][ T2747] RDX: ffffffffffffffe4 RSI: 0000000000004c80 RDI: 000000000000000b [ 136.803161][ T2747] RBP: 00007f640238b090 R08: 0000000000000000 R09: 0000000000000000 [ 136.828395][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.828553][ T2747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.849474][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.851380][ T2747] R13: 0000000000000000 R14: 00007f64038eb058 R15: 00007ffef3568f48 [ 136.851400][ T2747] [ 136.876654][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.933943][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.951794][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.969039][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 136.985364][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.002808][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.019119][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.036361][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.042154][ T2744] loop0: detected capacity change from 0 to 40427 [ 137.051111][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.062347][ T2744] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 137.070738][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.074795][ T2744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 137.132378][ T2744] F2FS-fs (loop0): invalid crc value [ 137.142309][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.144732][ T2744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.150840][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.164139][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.171467][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.183808][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 137.183823][ T30] audit: type=1326 audit(1727032332.844:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.189106][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.199775][ T30] audit: type=1326 audit(1727032332.854:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.224780][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.245366][ T30] audit: type=1326 audit(1727032332.854:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.252116][ T2744] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.274826][ T30] audit: type=1326 audit(1727032332.854:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.307424][ T30] audit: type=1326 audit(1727032332.864:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.333961][ T2744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.342590][ T30] audit: type=1326 audit(1727032332.864:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.377991][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.385267][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.392637][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.397070][ T30] audit: type=1326 audit(1727032332.864:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 137.399874][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.509484][ T2763] usb usb8: usbfs: process 2763 (syz.2.561) did not claim interface 0 before use [ 137.529821][ T2763] loop2: detected capacity change from 0 to 16 [ 137.905047][ T2764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.562'. [ 137.915706][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 137.959987][ T2763] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.967926][ T2761] attempt to access beyond end of device [ 137.967926][ T2761] loop2: rw=0, want=1049384, limit=16 [ 137.978991][ T327] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 138.065616][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 138.108681][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 138.116233][ T311] hid-generic 0000:0000:0001.001A: unknown main item tag 0x0 [ 138.204680][ T311] hid-generic 0000:0000:0001.001A: hidraw0: HID v0.83 Device [syz0] on syz1 [ 138.210049][ T30] audit: type=1326 audit(1727032332.864:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 138.246167][ T30] audit: type=1326 audit(1727032332.864:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6403731890 code=0x7ffc0000 [ 138.270700][ T311] usb 5-1: USB disconnect, device number 16 [ 138.321825][ T30] audit: type=1326 audit(1727032332.864:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6403732afb code=0x7ffc0000 [ 138.415654][ T2773] loop2: detected capacity change from 0 to 2048 [ 138.483624][ T2770] loop3: detected capacity change from 0 to 256 [ 138.500353][ T2773] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.511065][ T2773] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 138.519902][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 138.532994][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 138.545109][ T2770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.598975][ T327] usb 2-1: Using ep0 maxpacket: 16 [ 138.656196][ T2785] loop3: detected capacity change from 0 to 256 [ 138.865692][ T2785] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 138.939011][ T327] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.950477][ T327] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 138.963081][ T327] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 138.979201][ T327] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.988109][ T327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.039578][ T2758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.059635][ T327] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 139.705451][ T2793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 139.930190][ T2758] loop1: detected capacity change from 0 to 16 [ 139.955504][ T2804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'. [ 139.966795][ T2804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 139.987652][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.004966][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.011871][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.094243][ T2758] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.131702][ T2813] loop0: detected capacity change from 0 to 256 [ 140.140941][ T2758] attempt to access beyond end of device [ 140.140941][ T2758] loop1: rw=524288, want=524992, limit=16 [ 140.198056][ T2758] attempt to access beyond end of device [ 140.198056][ T2758] loop1: rw=524288, want=304, limit=16 [ 140.253973][ T2758] attempt to access beyond end of device [ 140.253973][ T2758] loop1: rw=524288, want=1049352, limit=16 [ 140.300495][ T2758] attempt to access beyond end of device [ 140.300495][ T2758] loop1: rw=524288, want=696, limit=16 [ 140.343268][ T2758] attempt to access beyond end of device [ 140.343268][ T2758] loop1: rw=524288, want=525104, limit=16 [ 140.389576][ T2758] attempt to access beyond end of device [ 140.389576][ T2758] loop1: rw=524288, want=720, limit=16 [ 140.414113][ T2807] loop3: detected capacity change from 0 to 40427 [ 140.452209][ T2758] attempt to access beyond end of device [ 140.452209][ T2758] loop1: rw=524288, want=525144, limit=16 [ 140.492230][ T2758] attempt to access beyond end of device [ 140.492230][ T2758] loop1: rw=524288, want=720, limit=16 [ 140.518545][ T2807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.522314][ T2758] attempt to access beyond end of device [ 140.522314][ T2758] loop1: rw=524288, want=19328, limit=16 [ 140.534653][ T2811] loop2: detected capacity change from 0 to 40427 [ 140.552251][ T327] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 140.571178][ T327] usb 2-1: USB disconnect, device number 18 [ 140.585383][ T2807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.600682][ T2811] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.609046][ T2811] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.618291][ T2811] F2FS-fs (loop2): invalid crc value [ 140.628190][ T2811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.666581][ T2811] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.673907][ T2811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.033899][ T2275] F2FS-fs (loop3): access invalid blkaddr:2048 [ 141.043882][ T2275] CPU: 1 PID: 2275 Comm: syz-executor Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 141.053777][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.063673][ T2275] Call Trace: [ 141.066795][ T2275] [ 141.069570][ T2275] dump_stack_lvl+0x151/0x1c0 [ 141.074086][ T2275] ? io_uring_drop_tctx_refs+0x190/0x190 [ 141.079723][ T2275] ? mempool_free+0x310/0x310 [ 141.084246][ T2275] dump_stack+0x15/0x20 [ 141.088315][ T2275] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 141.093532][ T2275] f2fs_map_blocks+0x1622/0x3ab0 [ 141.098311][ T2275] ? f2fs_do_map_lock+0x70/0x70 [ 141.102986][ T2275] f2fs_mpage_readpages+0xc9a/0x21a0 [ 141.108105][ T2275] ? dquot_release_reservation_block+0xa0/0xa0 [ 141.114090][ T2275] ? workingset_activation+0x3f0/0x3f0 [ 141.119393][ T2275] f2fs_readahead+0xfd/0x250 [ 141.123811][ T2275] ? blk_start_plug+0x5a/0x170 [ 141.128412][ T2275] read_pages+0x15e/0xb00 [ 141.132581][ T2275] ? lru_cache_add+0x279/0x540 [ 141.137179][ T2275] ? page_cache_ra_unbounded+0x920/0x920 [ 141.142645][ T2275] ? add_to_page_cache_lru+0x225/0x2c0 [ 141.147939][ T2275] ? add_to_page_cache_locked+0x40/0x40 [ 141.153320][ T2275] ? __stack_depot_save+0x34/0x470 [ 141.158269][ T2275] page_cache_ra_unbounded+0x6cb/0x920 [ 141.163566][ T2275] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 141.169903][ T2275] ? _raw_spin_unlock+0x4d/0x70 [ 141.174586][ T2275] ondemand_readahead+0x9c8/0xfa0 [ 141.179501][ T2275] ? do_wp_page+0x979/0xb60 [ 141.183791][ T2275] ? page_cache_sync_ra+0x4d0/0x4d0 [ 141.189512][ T2275] ? debug_smp_processor_id+0x17/0x20 [ 141.194718][ T2275] ? kasan_quarantine_put+0x34/0x1a0 [ 141.199841][ T2275] ? selinux_inode_getattr+0x11f/0x3f0 [ 141.205133][ T2275] ? fault_around_bytes_set+0xc0/0xc0 [ 141.210343][ T2275] page_cache_sync_ra+0x2e9/0x4d0 [ 141.215204][ T2275] ? force_page_cache_ra+0x420/0x420 [ 141.220324][ T2275] ? do_handle_mm_fault+0x1807/0x2400 [ 141.225532][ T2275] f2fs_readdir+0x52d/0xba0 [ 141.229875][ T2275] ? f2fs_fill_dentries+0xd60/0xd60 [ 141.234904][ T2275] ? avc_policy_seqno+0x1b/0x70 [ 141.239592][ T2275] ? __kasan_check_read+0x11/0x20 [ 141.244456][ T2275] ? security_file_permission+0x86/0xb0 [ 141.249832][ T2275] iterate_dir+0x265/0x610 [ 141.254089][ T2275] ? f2fs_fill_dentries+0xd60/0xd60 [ 141.259122][ T2275] __se_sys_getdents64+0x1c1/0x460 [ 141.264068][ T2275] ? __x64_sys_getdents64+0x90/0x90 [ 141.269101][ T2275] ? filldir+0x680/0x680 [ 141.273179][ T2275] __x64_sys_getdents64+0x7b/0x90 [ 141.278038][ T2275] x64_sys_call+0x5ae/0x9a0 [ 141.282380][ T2275] do_syscall_64+0x3b/0xb0 [ 141.286630][ T2275] ? clear_bhb_loop+0x35/0x90 [ 141.291146][ T2275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.296872][ T2275] RIP: 0033:0x7f9090683093 [ 141.301128][ T2275] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 141.320579][ T2275] RSP: 002b:00007ffe0b5368d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 141.328815][ T2275] RAX: ffffffffffffffda RBX: 0000555555e5a4e0 RCX: 00007f9090683093 [ 141.336623][ T2275] RDX: 0000000000008000 RSI: 0000555555e5a4e0 RDI: 0000000000000005 [ 141.344436][ T2275] RBP: 0000555555e5a4b4 R08: 0000000000000000 R09: 0000000000000000 [ 141.352245][ T2275] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 141.360057][ T2275] R13: 0000000000000010 R14: 0000555555e5a4b0 R15: 00007ffe0b538b80 [ 141.367872][ T2275] [ 141.381715][ T330] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 141.413015][ T330] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 141.472219][ T2840] loop4: detected capacity change from 0 to 1024 [ 141.562288][ T2840] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 141.598525][ T8] tipc: Disabling bearer [ 141.609817][ T8] tipc: Left network mode [ 141.789992][ T2854] syz.4.584[2854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.790410][ T2854] syz.4.584[2854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.189467][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 142.189663][ T30] audit: type=1400 audit(1727032337.454:1394): avc: denied { integrity } for pid=2839 comm="syz.4.584" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 142.230341][ T30] audit: type=1400 audit(1727032337.474:1395): avc: denied { write } for pid=2839 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.255148][ T30] audit: type=1400 audit(1727032337.484:1396): avc: denied { append } for pid=2839 comm="syz.4.584" path="/75/file1/cpuacct.usage_percpu_user" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.299028][ T435] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 142.325127][ T30] audit: type=1400 audit(1727032337.984:1397): avc: denied { append } for pid=2858 comm="syz.4.587" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 142.399398][ T30] audit: type=1400 audit(1727032338.054:1398): avc: denied { mounton } for pid=2862 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 142.423436][ T30] audit: type=1400 audit(1727032338.054:1399): avc: denied { mount } for pid=2862 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 142.446691][ T30] audit: type=1400 audit(1727032338.054:1400): avc: denied { read } for pid=2862 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.468104][ T30] audit: type=1400 audit(1727032338.054:1401): avc: denied { open } for pid=2862 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.546587][ T2867] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.556825][ T2867] 9pnet: Insufficient options for proto=fd [ 142.777613][ T30] audit: type=1400 audit(1727032338.054:1402): avc: denied { mounton } for pid=2862 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 142.799985][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.806975][ T2862] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.809013][ T30] audit: type=1400 audit(1727032338.434:1403): avc: denied { read write } for pid=2868 comm="syz.1.591" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 142.814849][ T2862] device bridge_slave_0 entered promiscuous mode [ 142.836893][ T435] usb 1-1: Using ep0 maxpacket: 32 [ 142.843881][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.855278][ T2862] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.862767][ T2862] device bridge_slave_1 entered promiscuous mode [ 142.918979][ T20] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.936887][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.943784][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.969016][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.988955][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.008705][ T435] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 143.027541][ T2862] device veth0_vlan entered promiscuous mode [ 143.033468][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.049644][ T435] usb 1-1: config 0 descriptor?? [ 143.054572][ T2862] device veth1_macvtap entered promiscuous mode [ 143.065085][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.074499][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.082953][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.090924][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.100264][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.108151][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.115590][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.123034][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.131322][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.138678][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.146127][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.154433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.162933][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.169803][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.183863][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 143.192576][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.201235][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.229494][ T8] device bridge_slave_1 left promiscuous mode [ 143.240789][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.245411][ T2875] loop3: detected capacity change from 0 to 512 [ 143.251036][ T2876] loop2: detected capacity change from 0 to 512 [ 143.260377][ T8] device bridge_slave_0 left promiscuous mode [ 143.266761][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.275616][ T8] device veth1_macvtap left promiscuous mode [ 143.281590][ T8] device veth0_vlan left promiscuous mode [ 143.292609][ T2869] loop1: detected capacity change from 0 to 131072 [ 143.299160][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.305451][ T2876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.309963][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.329344][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.333793][ T2876] EXT4-fs (loop2): 1 truncate cleaned up [ 143.342462][ T20] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 143.357159][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.357713][ T2869] F2FS-fs (loop1): Test dummy encryption mode enabled [ 143.365633][ T2876] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 143.395747][ T20] usb 5-1: config 0 descriptor?? [ 143.404513][ T2869] F2FS-fs (loop1): invalid crc value [ 143.430291][ T2869] F2FS-fs (loop1): Invalid segment type: 16, segno: 21 [ 143.439394][ T2869] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 143.451655][ T2875] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.463165][ T2875] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 143.476421][ T2875] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz.3.589: corrupted inode contents [ 143.488289][ T2875] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz.3.589: mark_inode_dirty error [ 143.500024][ T2875] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz.3.589: corrupted inode contents [ 143.512663][ T2875] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.589: mark_inode_dirty error [ 143.747407][ T2859] loop4: detected capacity change from 0 to 1024 [ 143.799938][ T435] hkems 0003:2006:0118.001B: unbalanced delimiter at end of report description [ 143.809012][ T435] hkems 0003:2006:0118.001B: parse failed [ 143.814567][ T435] hkems: probe of 0003:2006:0118.001B failed with error -22 [ 143.820174][ T2838] UDC core: couldn't find an available UDC or it's busy: -16 [ 143.838542][ T2859] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.859187][ T2838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.881118][ T310] usb 1-1: USB disconnect, device number 23 [ 143.900152][ T2859] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,dioread_nolock,,errors=continue. Quota mode: none. [ 143.920310][ T2859] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 144.170313][ T20] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 144.178501][ T20] hid-steam 0003:28DE:1102.001C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 144.206686][ T20] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 144.216530][ T20] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 144.263198][ T2890] loop3: detected capacity change from 0 to 40427 [ 144.297473][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.299040][ T20] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected [ 144.304979][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.316362][ T20] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.001C/input/input35 [ 144.320871][ T2890] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.335459][ T2893] device bridge_slave_0 entered promiscuous mode [ 144.350652][ T2890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.352278][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.366223][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.373437][ T2890] F2FS-fs (loop3): invalid crc value [ 144.379115][ T2893] device bridge_slave_1 entered promiscuous mode [ 144.394541][ T435] usb 5-1: USB disconnect, device number 17 [ 144.407290][ T2890] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 144.419419][ T435] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected [ 144.451959][ T2901] loop0: detected capacity change from 0 to 2048 [ 144.458670][ T2890] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.465614][ T2890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.509882][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.516784][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.523907][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.530759][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.568119][ T2901] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.578040][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.586511][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.591186][ T2903] handle_bad_sector: 284 callbacks suppressed [ 144.591211][ T2903] attempt to access beyond end of device [ 144.591211][ T2903] loop3: rw=10241, want=45104, limit=40427 [ 144.610800][ T2903] attempt to access beyond end of device [ 144.610800][ T2903] loop3: rw=2049, want=45104, limit=40427 [ 144.614421][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.641349][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.650442][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.657308][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.665057][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.673828][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.680725][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.700176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.708347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.716164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.723446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.732234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.740721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.900943][ T2893] device veth0_vlan entered promiscuous mode [ 144.911660][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.919850][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.928783][ T2893] device veth1_macvtap entered promiscuous mode [ 144.938400][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.946566][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.958348][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.992018][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.000449][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.008980][ T2862] attempt to access beyond end of device [ 145.008980][ T2862] loop3: rw=2049, want=40968, limit=40427 [ 145.021452][ T330] device bridge_slave_1 left promiscuous mode [ 145.027423][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.049706][ T330] device bridge_slave_0 left promiscuous mode [ 145.056044][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.080138][ T330] device veth1_macvtap left promiscuous mode [ 145.085982][ T330] device veth0_vlan left promiscuous mode [ 145.225291][ T2914] loop2: detected capacity change from 0 to 512 [ 145.260595][ T2916] device bridge_slave_1 left promiscuous mode [ 145.272486][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.287763][ T2916] device bridge_slave_0 left promiscuous mode [ 145.301987][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.310590][ T2914] EXT4-fs (loop2): Unrecognized mount option "smackfsdef=/dev/loop" or missing value [ 145.362537][ T2920] loop4: detected capacity change from 0 to 1024 [ 145.440981][ T2920] JBD2: no valid journal superblock found [ 145.447998][ T2920] EXT4-fs (loop4): error loading journal [ 145.949277][ T2931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 145.966123][ T2931] device vlan2 entered promiscuous mode [ 146.410188][ T2938] FAULT_INJECTION: forcing a failure. [ 146.410188][ T2938] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.423805][ T2938] CPU: 0 PID: 2938 Comm: +}[@ Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 146.433087][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 146.442990][ T2938] Call Trace: [ 146.446114][ T2938] [ 146.448881][ T2938] dump_stack_lvl+0x151/0x1c0 [ 146.453397][ T2938] ? io_uring_drop_tctx_refs+0x190/0x190 [ 146.458865][ T2938] ? __stack_depot_save+0x34/0x470 [ 146.463815][ T2938] dump_stack+0x15/0x20 [ 146.467804][ T2938] should_fail+0x3c6/0x510 [ 146.472057][ T2938] should_fail_alloc_page+0x5a/0x80 [ 146.477089][ T2938] prepare_alloc_pages+0x15c/0x700 [ 146.482045][ T2938] ? __alloc_pages_bulk+0xe40/0xe40 [ 146.487074][ T2938] __alloc_pages+0x18c/0x8f0 [ 146.491494][ T2938] ? prep_new_page+0x110/0x110 [ 146.496099][ T2938] ? __kasan_check_read+0x11/0x20 [ 146.500956][ T2938] ? __vm_enough_memory+0x119/0x2f0 [ 146.505993][ T2938] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 146.511464][ T2938] ? shmem_swapin_page+0x1520/0x1520 [ 146.516583][ T2938] ? xas_start+0x32c/0x3f0 [ 146.520840][ T2938] ? xas_load+0x2b7/0x2d0 [ 146.524994][ T2938] ? pagecache_get_page+0xdc2/0xeb0 [ 146.530030][ T2938] ? page_cache_prev_miss+0x410/0x410 [ 146.535349][ T2938] ? _raw_spin_lock_irqsave+0x210/0x210 [ 146.540812][ T2938] ? lru_cache_add+0x279/0x540 [ 146.545400][ T2938] shmem_getpage_gfp+0x1388/0x23c0 [ 146.550353][ T2938] ? shmem_getpage+0xa0/0xa0 [ 146.554776][ T2938] ? fault_in_safe_writeable+0x240/0x240 [ 146.560242][ T2938] shmem_write_begin+0xca/0x1b0 [ 146.564941][ T2938] generic_perform_write+0x2bc/0x5a0 [ 146.570058][ T2938] ? grab_cache_page_write_begin+0xa0/0xa0 [ 146.575693][ T2938] ? file_remove_privs+0x610/0x610 [ 146.580814][ T2938] ? rwsem_write_trylock+0x153/0x340 [ 146.585944][ T2938] ? rwsem_mark_wake+0x770/0x770 [ 146.590705][ T2938] __generic_file_write_iter+0x25b/0x4b0 [ 146.596173][ T2938] generic_file_write_iter+0xaf/0x1c0 [ 146.601469][ T2938] vfs_write+0xd5d/0x1110 [ 146.605645][ T2938] ? file_end_write+0x1c0/0x1c0 [ 146.610320][ T2938] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 146.616831][ T2938] ? __kasan_check_read+0x11/0x20 [ 146.621689][ T2938] ? __fdget_pos+0x209/0x3a0 [ 146.626117][ T2938] ksys_write+0x199/0x2c0 [ 146.630282][ T2938] ? exc_page_fault+0x47a/0x7f0 [ 146.634975][ T2938] ? __ia32_sys_read+0x90/0x90 [ 146.640004][ T2938] __x64_sys_write+0x7b/0x90 [ 146.644430][ T2938] x64_sys_call+0x2f/0x9a0 [ 146.648682][ T2938] do_syscall_64+0x3b/0xb0 [ 146.652936][ T2938] ? clear_bhb_loop+0x35/0x90 [ 146.657457][ T2938] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.663176][ T2938] RIP: 0033:0x7f64037319df [ 146.667437][ T2938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 146.686874][ T2938] RSP: 002b:00007f64023abdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 146.695114][ T2938] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f64037319df [ 146.703107][ T2938] RDX: 0000000000040000 RSI: 00007f63f9f8c000 RDI: 000000000000000e [ 146.710911][ T2938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000433 [ 146.718819][ T2938] R10: 00000000000003bc R11: 0000000000000293 R12: 000000000000000e [ 146.726796][ T2938] R13: 00007f64023abef0 R14: 00007f64023abeb0 R15: 00007f63f9f8c000 [ 146.734610][ T2938] [ 146.838201][ T2953] loop1: detected capacity change from 0 to 256 [ 147.052532][ T1294] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 147.069691][ T20] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.227194][ T2953] FAT-fs (loop1): Directory bread(block 64) failed [ 147.234054][ T2953] FAT-fs (loop1): Directory bread(block 65) failed [ 147.243568][ T2953] FAT-fs (loop1): Directory bread(block 66) failed [ 147.250453][ T2953] FAT-fs (loop1): Directory bread(block 67) failed [ 147.256880][ T2953] FAT-fs (loop1): Directory bread(block 68) failed [ 147.263243][ T2953] FAT-fs (loop1): Directory bread(block 69) failed [ 147.269711][ T2953] FAT-fs (loop1): Directory bread(block 70) failed [ 147.276101][ T2953] FAT-fs (loop1): Directory bread(block 71) failed [ 147.282651][ T2953] FAT-fs (loop1): Directory bread(block 72) failed [ 147.289030][ T2953] FAT-fs (loop1): Directory bread(block 73) failed [ 147.355560][ T30] kauditd_printk_skb: 1696 callbacks suppressed [ 147.355587][ T30] audit: type=1400 audit(1727032343.014:3100): avc: denied { create } for pid=2950 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.381873][ T30] audit: type=1400 audit(1727032343.024:3101): avc: denied { write } for pid=2950 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.409136][ T1294] usb 1-1: device descriptor read/64, error -71 [ 147.431491][ T2962] loop2: detected capacity change from 0 to 512 [ 147.500809][ T2962] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 147.514922][ T2962] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 147.529911][ T30] audit: type=1400 audit(1727032343.194:3102): avc: denied { mounton } for pid=2961 comm="syz.2.614" path="/proc/14/task" dev="proc" ino=27040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.530376][ T2962] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 147.569081][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.589083][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.633844][ T30] audit: type=1400 audit(1727032343.284:3103): avc: denied { write } for pid=2961 comm="syz.2.614" name="task" dev="proc" ino=27040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.664493][ T20] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 147.673625][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.681816][ T30] audit: type=1400 audit(1727032343.284:3104): avc: denied { add_name } for pid=2961 comm="syz.2.614" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.683139][ T20] usb 4-1: config 0 descriptor?? [ 147.705015][ T30] audit: type=1400 audit(1727032343.284:3105): avc: denied { create } for pid=2961 comm="syz.2.614" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 147.730187][ T30] audit: type=1400 audit(1727032343.284:3106): avc: denied { associate } for pid=2961 comm="syz.2.614" name="cgroup.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 147.810743][ T2973] loop2: detected capacity change from 0 to 512 [ 147.819812][ T30] audit: type=1400 audit(1727032343.474:3107): avc: denied { setopt } for pid=2971 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.860948][ T2973] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 147.878953][ T1294] usb 1-1: device descriptor read/64, error -71 [ 147.911881][ T2973] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000004,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 147.932632][ T2973] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 148.158974][ T1294] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 148.209927][ T20] hid-multitouch 0003:0EEF:72D0.001E: unknown main item tag 0x0 [ 148.217429][ T20] hid-multitouch 0003:0EEF:72D0.001E: unknown main item tag 0x0 [ 148.225599][ T20] hid-multitouch 0003:0EEF:72D0.001E: unknown main item tag 0x0 [ 148.233582][ T20] hid-multitouch 0003:0EEF:72D0.001E: unknown main item tag 0x0 [ 148.241080][ T20] hid-multitouch 0003:0EEF:72D0.001E: unknown main item tag 0x0 [ 148.250042][ T20] hid-multitouch 0003:0EEF:72D0.001E: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 148.408958][ T39] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 148.469044][ T1294] usb 1-1: device descriptor read/64, error -71 [ 148.627584][ T30] audit: type=1400 audit(1727032344.284:3108): avc: denied { name_bind } for pid=2984 comm="syz.4.620" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 148.649237][ T30] audit: type=1400 audit(1727032344.284:3109): avc: denied { node_bind } for pid=2984 comm="syz.4.620" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 148.681924][ T2988] loop1: detected capacity change from 0 to 512 [ 148.709086][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 148.760366][ T2988] EXT4-fs (loop1): quotafile must be on filesystem root [ 148.839041][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.849853][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.852960][ T2988] loop1: detected capacity change from 0 to 2048 [ 148.859686][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 148.878458][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 148.887930][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.896432][ T39] usb 3-1: config 0 descriptor?? [ 148.901311][ T1294] usb 1-1: device descriptor read/64, error -71 [ 148.910484][ T2988] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.621: casefold flag without casefold feature [ 148.923248][ T2988] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 148.933452][ T2988] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 148.940869][ T2988] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.029030][ T1294] usb usb1-port1: attempt power cycle [ 149.399884][ T39] apple 0003:05AC:0274.001F: unexpected long global item [ 149.503503][ T39] apple 0003:05AC:0274.001F: parse failed [ 149.509632][ T39] apple: probe of 0003:05AC:0274.001F failed with error -22 [ 149.635586][ T39] usb 4-1: USB disconnect, device number 20 [ 149.772801][ T26] usb 3-1: USB disconnect, device number 20 [ 149.977341][ T3018] loop1: detected capacity change from 0 to 256 [ 150.140483][ T2994] loop0: detected capacity change from 0 to 131072 [ 150.372978][ T2994] F2FS-fs (loop0): Wrong segment_count / block_count (65567 > 16384) [ 150.412671][ T3025] loop4: detected capacity change from 0 to 1024 [ 150.428637][ T2994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.468086][ T2994] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.505483][ T2994] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.513336][ T2994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.740391][ T3025] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.753985][ T3025] FAULT_INJECTION: forcing a failure. [ 150.753985][ T3025] name failslab, interval 1, probability 0, space 0, times 0 [ 150.766919][ T3025] CPU: 1 PID: 3025 Comm: syz.4.630 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 150.776534][ T3025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.786431][ T3025] Call Trace: [ 150.789551][ T3025] [ 150.792331][ T3025] dump_stack_lvl+0x151/0x1c0 [ 150.796929][ T3025] ? io_uring_drop_tctx_refs+0x190/0x190 [ 150.802407][ T3025] dump_stack+0x15/0x20 [ 150.806392][ T3025] should_fail+0x3c6/0x510 [ 150.810646][ T3025] __should_failslab+0xa4/0xe0 [ 150.815246][ T3025] ? security_file_alloc+0x29/0x120 [ 150.820284][ T3025] should_failslab+0x9/0x20 [ 150.824615][ T3025] slab_pre_alloc_hook+0x37/0xd0 [ 150.829391][ T3025] ? security_file_alloc+0x29/0x120 [ 150.834421][ T3025] kmem_cache_alloc+0x44/0x200 [ 150.839024][ T3025] security_file_alloc+0x29/0x120 [ 150.843883][ T3025] __alloc_file+0xb2/0x2a0 [ 150.848138][ T3025] alloc_empty_file+0x95/0x180 [ 150.852750][ T3025] alloc_file+0x5a/0x4e0 [ 150.856814][ T3025] alloc_file_pseudo+0x259/0x2f0 [ 150.861938][ T3025] ? alloc_empty_file_noaccount+0x80/0x80 [ 150.867576][ T3025] ? memcpy+0x56/0x70 [ 150.871397][ T3025] ? alloc_anon_inode+0x273/0x380 [ 150.876258][ T3025] aio_setup_ring+0x1da/0xba0 [ 150.880772][ T3025] ? free_ioctx_reqs+0x180/0x180 [ 150.885543][ T3025] ioctx_alloc+0x335/0x710 [ 150.889796][ T3025] ? __ia32_sys_read+0x90/0x90 [ 150.894395][ T3025] __se_sys_io_setup+0x72/0x230 [ 150.899082][ T3025] __x64_sys_io_setup+0x5b/0x70 [ 150.903768][ T3025] x64_sys_call+0x576/0x9a0 [ 150.908109][ T3025] do_syscall_64+0x3b/0xb0 [ 150.912361][ T3025] ? clear_bhb_loop+0x35/0x90 [ 150.916882][ T3025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.922778][ T3025] RIP: 0033:0x7f9a91eafef9 [ 150.927031][ T3025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.946482][ T3025] RSP: 002b:00007f9a90b29038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 150.954721][ T3025] RAX: ffffffffffffffda RBX: 00007f9a92067f80 RCX: 00007f9a91eafef9 [ 150.962529][ T3025] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000004 [ 150.970510][ T3025] RBP: 00007f9a90b29090 R08: 0000000000000000 R09: 0000000000000000 [ 150.978321][ T3025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.986134][ T3025] R13: 0000000000000000 R14: 00007f9a92067f80 R15: 00007ffda2ca9978 [ 150.993949][ T3025] [ 151.179959][ T3041] loop1: detected capacity change from 0 to 1024 [ 151.226900][ T3041] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.237986][ T3041] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 151.890182][ T3041] JBD2: no valid journal superblock found [ 151.895787][ T3041] EXT4-fs (loop1): error loading journal [ 151.915382][ T3047] loop2: detected capacity change from 0 to 512 [ 152.032015][ T3047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.808998][ T20] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 152.812375][ T3050] loop4: detected capacity change from 0 to 40427 [ 152.920665][ T3050] F2FS-fs (loop4): invalid crc value [ 152.948345][ T3050] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.089014][ T20] usb 1-1: device descriptor read/64, error -71 [ 153.123216][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 153.123233][ T30] audit: type=1400 audit(1727032348.784:3129): avc: denied { setattr } for pid=3074 comm="syz.2.642" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.309691][ T3050] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.323610][ T3075] fuse: Bad value for 'fd' [ 153.339862][ T30] audit: type=1400 audit(1727032348.984:3130): avc: denied { mounton } for pid=3074 comm="syz.2.642" path="/11/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.414399][ T1197] attempt to access beyond end of device [ 153.414399][ T1197] loop4: rw=2049, want=45104, limit=40427 [ 153.439111][ T30] audit: type=1400 audit(1727032349.024:3131): avc: denied { ioctl } for pid=3049 comm="syz.4.637" path="/87/file2/file1" dev="loop4" ino=10 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.589950][ T20] usb 1-1: device descriptor read/64, error -71 [ 153.618949][ T39] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 153.683682][ T3078] loop3: detected capacity change from 0 to 2048 [ 153.723266][ T3078] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.728927][ T30] audit: type=1400 audit(1727032349.384:3132): avc: denied { lock } for pid=3082 comm="syz.4.643" path="socket:[27223]" dev="sockfs" ino=27223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 153.734262][ T3078] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 153.869604][ T20] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 154.038935][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.102250][ T3096] device pim6reg1 entered promiscuous mode [ 154.108440][ T3096] FAULT_INJECTION: forcing a failure. [ 154.108440][ T3096] name failslab, interval 1, probability 0, space 0, times 0 [ 154.121249][ T3096] CPU: 0 PID: 3096 Comm: syz.1.647 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 154.121704][ T30] audit: type=1400 audit(1727032349.784:3133): avc: denied { write } for pid=3077 comm="syz.3.644" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.130823][ T3096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 154.130835][ T3096] Call Trace: [ 154.130841][ T3096] [ 154.130848][ T3096] dump_stack_lvl+0x151/0x1c0 [ 154.130870][ T3096] ? io_uring_drop_tctx_refs+0x190/0x190 [ 154.130895][ T3096] ? pcpu_alloc+0xda0/0x13e0 [ 154.183425][ T3096] dump_stack+0x15/0x20 [ 154.187505][ T3096] should_fail+0x3c6/0x510 [ 154.191970][ T3096] __should_failslab+0xa4/0xe0 [ 154.196569][ T3096] ? __alloc_skb+0xbe/0x550 [ 154.200916][ T3096] should_failslab+0x9/0x20 [ 154.205245][ T3096] slab_pre_alloc_hook+0x37/0xd0 [ 154.210018][ T3096] ? __alloc_skb+0xbe/0x550 [ 154.214359][ T3096] kmem_cache_alloc+0x44/0x200 [ 154.218961][ T3096] __alloc_skb+0xbe/0x550 [ 154.223127][ T3096] inet6_rt_notify+0x2db/0x550 [ 154.227726][ T3096] ? x64_sys_call+0x98/0x9a0 [ 154.232153][ T3096] ? rt6_nh_dump_exceptions+0x650/0x650 [ 154.237553][ T3096] fib6_add+0x23ac/0x3df0 [ 154.241703][ T3096] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 154.247686][ T3096] ? ipv6_addr_prefix+0x42/0x180 [ 154.252462][ T3096] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 154.257937][ T3096] ? __kasan_check_write+0x14/0x20 [ 154.262880][ T3096] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 154.267735][ T3096] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 154.272770][ T3096] ip6_route_add+0x8a/0x130 [ 154.277108][ T3096] addrconf_add_dev+0x415/0x610 [ 154.281793][ T3096] ? ____kasan_kmalloc+0xdb/0x110 [ 154.286659][ T3096] ? __kasan_kmalloc+0x9/0x10 [ 154.289014][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 154.291170][ T3096] ? local_bh_enable+0x30/0x30 [ 154.291193][ T3096] ? __dev_notify_flags+0x304/0x610 [ 154.302238][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 154.306548][ T3096] ? __kasan_check_read+0x11/0x20 [ 154.306574][ T3096] addrconf_init_auto_addrs+0xad0/0x1060 [ 154.331531][ T3096] ? addrconf_dad_run+0x610/0x610 [ 154.336387][ T3096] ? __local_bh_enable_ip+0x58/0x80 [ 154.341423][ T3096] ? _raw_write_unlock_bh+0x32/0x48 [ 154.346454][ T3096] ? addrconf_permanent_addr+0xb40/0xba0 [ 154.351922][ T3096] ? __kasan_check_write+0x14/0x20 [ 154.356870][ T3096] ? addrconf_notify+0xdd0/0xdd0 [ 154.361641][ T3096] ? igmpv3_del_delrec+0x740/0x740 [ 154.366589][ T3096] ? __local_bh_enable_ip+0x58/0x80 [ 154.371626][ T3096] ? __kasan_check_write+0x14/0x20 [ 154.376572][ T3096] ? mutex_unlock+0xb2/0x260 [ 154.380999][ T3096] ? tun_device_event+0x3ef/0xf80 [ 154.385859][ T3096] ? __mutex_lock_slowpath+0x10/0x10 [ 154.390978][ T3096] ? macsec_notify+0x101/0x4c0 [ 154.395579][ T3096] ? addrconf_link_ready+0xfb/0x1e0 [ 154.400615][ T3096] addrconf_notify+0x91d/0xdd0 [ 154.405215][ T3096] raw_notifier_call_chain+0x8c/0xf0 [ 154.410424][ T3096] __dev_notify_flags+0x304/0x610 [ 154.415282][ T3096] ? __dev_change_flags+0x6e0/0x6e0 [ 154.420329][ T3096] ? __dev_change_flags+0x569/0x6e0 [ 154.425349][ T3096] ? avc_denied+0x1b0/0x1b0 [ 154.429686][ T3096] ? dev_get_flags+0x1e0/0x1e0 [ 154.434300][ T3096] ? _kstrtoull+0x3a0/0x4a0 [ 154.438627][ T3096] dev_change_flags+0xf0/0x1a0 [ 154.443235][ T3096] dev_ifsioc+0x147/0x10c0 [ 154.447483][ T3096] ? dev_ioctl+0xe70/0xe70 [ 154.451819][ T3096] ? mutex_lock+0xb6/0x1e0 [ 154.456073][ T3096] ? wait_for_completion_killable_timeout+0x10/0x10 [ 154.462500][ T3096] dev_ioctl+0x54d/0xe70 [ 154.466579][ T3096] sock_do_ioctl+0x34f/0x5a0 [ 154.471001][ T3096] ? sock_show_fdinfo+0xa0/0xa0 [ 154.475695][ T3096] ? selinux_file_ioctl+0x3cc/0x540 [ 154.480838][ T3096] sock_ioctl+0x455/0x740 [ 154.485005][ T3096] ? sock_poll+0x400/0x400 [ 154.489257][ T3096] ? __fget_files+0x31e/0x380 [ 154.493790][ T3096] ? security_file_ioctl+0x84/0xb0 [ 154.498721][ T3096] ? sock_poll+0x400/0x400 [ 154.502990][ T3096] __se_sys_ioctl+0x114/0x190 [ 154.507485][ T3096] __x64_sys_ioctl+0x7b/0x90 [ 154.511915][ T3096] x64_sys_call+0x98/0x9a0 [ 154.516164][ T3096] do_syscall_64+0x3b/0xb0 [ 154.520414][ T3096] ? clear_bhb_loop+0x35/0x90 [ 154.524929][ T3096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.530654][ T3096] RIP: 0033:0x7f6403732ef9 [ 154.534909][ T3096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.554524][ T3096] RSP: 002b:00007f64023ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.562772][ T3096] RAX: ffffffffffffffda RBX: 00007f64038eaf80 RCX: 00007f6403732ef9 [ 154.570585][ T3096] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000008 [ 154.578389][ T3096] RBP: 00007f64023ac090 R08: 0000000000000000 R09: 0000000000000000 [ 154.586200][ T3096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.594014][ T3096] R13: 0000000000000000 R14: 00007f64038eaf80 R15: 00007ffef3568f48 [ 154.601829][ T3096] [ 154.606052][ T20] usb 1-1: device descriptor read/64, error -71 [ 154.653473][ T30] audit: type=1326 audit(1727032350.314:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3097 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 154.676822][ T39] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 154.686003][ T30] audit: type=1326 audit(1727032350.314:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3097 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 154.686021][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.709120][ T30] audit: type=1326 audit(1727032350.314:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3097 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 154.717382][ T39] usb 3-1: Product: syz [ 154.741947][ T30] audit: type=1326 audit(1727032350.314:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3097 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 154.744895][ T39] usb 3-1: Manufacturer: syz [ 154.767468][ T30] audit: type=1326 audit(1727032350.314:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3097 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6403732ef9 code=0x7ffc0000 [ 154.772074][ T39] usb 3-1: SerialNumber: syz [ 154.799960][ T39] usb 3-1: config 0 descriptor?? [ 154.808977][ T6] usb 5-1: device descriptor read/64, error -71 [ 154.839760][ T39] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 154.960452][ T3103] loop3: detected capacity change from 0 to 40427 [ 155.018976][ T20] usb 1-1: device descriptor read/64, error -71 [ 155.039363][ T3103] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 155.047150][ T3103] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.054531][ T39] usb 3-1: USB disconnect, device number 21 [ 155.056921][ T3103] F2FS-fs (loop3): invalid crc value [ 155.068100][ T3103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.090376][ T3103] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.097324][ T3103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.139017][ T20] usb usb1-port1: attempt power cycle [ 155.405501][ T6] usb 5-1: device descriptor read/64, error -71 [ 155.471896][ T3112] attempt to access beyond end of device [ 155.471896][ T3112] loop3: rw=2049, want=79904, limit=40427 [ 155.487682][ T3112] attempt to access beyond end of device [ 155.487682][ T3112] loop3: rw=2049, want=81920, limit=40427 [ 155.503444][ T3112] attempt to access beyond end of device [ 155.503444][ T3112] loop3: rw=2049, want=51200, limit=40427 [ 155.519617][ T3112] attempt to access beyond end of device [ 155.519617][ T3112] loop3: rw=2049, want=53248, limit=40427 [ 155.535628][ T3112] attempt to access beyond end of device [ 155.535628][ T3112] loop3: rw=2049, want=59400, limit=40427 [ 155.540917][ T3110] loop0: detected capacity change from 0 to 40427 [ 155.551393][ T3112] attempt to access beyond end of device [ 155.551393][ T3112] loop3: rw=2049, want=61576, limit=40427 [ 155.586189][ T3112] attempt to access beyond end of device [ 155.586189][ T3112] loop3: rw=2049, want=77824, limit=40427 [ 155.606020][ T3112] attempt to access beyond end of device [ 155.606020][ T3112] loop3: rw=2049, want=85880, limit=40427 [ 155.611016][ T3110] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.627667][ T3110] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.637273][ T3110] F2FS-fs (loop0): invalid crc value [ 155.643778][ T3110] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.666264][ T3110] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.673410][ T3110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.678950][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 155.745262][ T2862] attempt to access beyond end of device [ 155.745262][ T2862] loop3: rw=2049, want=40968, limit=40427 [ 155.766689][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 155.784341][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 155.803710][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 155.815571][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 155.978933][ T6] usb 5-1: device descriptor read/64, error -71 [ 156.030865][ T3123] FAULT_INJECTION: forcing a failure. [ 156.030865][ T3123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.031884][ T3120] loop2: detected capacity change from 0 to 4096 [ 156.054062][ T3123] CPU: 0 PID: 3123 Comm: syz.3.653 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 156.063788][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 156.073683][ T3123] Call Trace: [ 156.076799][ T3123] [ 156.079575][ T3123] dump_stack_lvl+0x151/0x1c0 [ 156.084089][ T3123] ? io_uring_drop_tctx_refs+0x190/0x190 [ 156.089558][ T3123] dump_stack+0x15/0x20 [ 156.093547][ T3123] should_fail+0x3c6/0x510 [ 156.097804][ T3123] should_fail_alloc_page+0x5a/0x80 [ 156.102854][ T3123] prepare_alloc_pages+0x15c/0x700 [ 156.107792][ T3123] ? __alloc_pages+0x8f0/0x8f0 [ 156.112388][ T3123] ? __alloc_pages_bulk+0xe40/0xe40 [ 156.117415][ T3123] ? __kasan_check_write+0x14/0x20 [ 156.122361][ T3123] ? _raw_spin_lock+0xa4/0x1b0 [ 156.126966][ T3123] __alloc_pages+0x18c/0x8f0 [ 156.131389][ T3123] ? prep_new_page+0x110/0x110 [ 156.135998][ T3123] ? lru_cache_add+0x279/0x540 [ 156.140606][ T3123] wp_page_copy+0x1d4/0x1b00 [ 156.145019][ T3123] ? __kasan_check_write+0x14/0x20 [ 156.149963][ T3123] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 156.155778][ T3123] ? __pte_map_lock+0x442/0x620 [ 156.160463][ T3123] ? vm_normal_page+0x1e1/0x1f0 [ 156.165150][ T3123] do_wp_page+0x6fa/0xb60 [ 156.169319][ T3123] handle_pte_fault+0x7c0/0x24d0 [ 156.174092][ T3123] ? fault_around_bytes_set+0xc0/0xc0 [ 156.179309][ T3123] do_handle_mm_fault+0x20bc/0x2400 [ 156.184336][ T3123] ? numa_migrate_prep+0xe0/0xe0 [ 156.189111][ T3123] ? arch_stack_walk+0xf3/0x140 [ 156.193794][ T3123] ? stack_trace_save+0x113/0x1c0 [ 156.198660][ T3123] ? down_read_trylock+0x3d6/0x7d0 [ 156.203687][ T3123] ? __init_rwsem+0x1d0/0x1d0 [ 156.208198][ T3123] ? vmacache_find+0x21f/0x4d0 [ 156.212810][ T3123] ? __find_vma+0x30/0x150 [ 156.217051][ T3123] exc_page_fault+0x3b5/0x7f0 [ 156.221573][ T3123] asm_exc_page_fault+0x27/0x30 [ 156.226341][ T3123] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 156.232761][ T3123] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 156.252203][ T3123] RSP: 0018:ffffc90000957358 EFLAGS: 00050206 [ 156.258117][ T3123] RAX: ffffffff82638001 RBX: 0000000020002374 RCX: 0000000000005374 [ 156.265915][ T3123] RDX: 0000000000008000 RSI: ffff8881163b2c8c RDI: 0000000020005000 [ 156.273728][ T3123] RBP: ffffc900009574b8 R08: dffffc0000000000 R09: ffffed1022c77000 [ 156.281639][ T3123] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000957828 [ 156.289438][ T3123] R13: 0000000000008000 R14: ffff8881163b0000 R15: 00007ffffffff000 [ 156.297343][ T3123] ? _copy_to_iter+0x271/0xde0 [ 156.301937][ T3123] ? _copy_to_iter+0x2a3/0xde0 [ 156.306625][ T3123] ? iov_iter_init+0x190/0x190 [ 156.311229][ T3123] ? zap_page_range+0x682/0x770 [ 156.315915][ T3123] ? __kasan_check_read+0x11/0x20 [ 156.320769][ T3123] ? __check_object_size+0x2ec/0x3d0 [ 156.325904][ T3123] simple_copy_to_iter+0x50/0x70 [ 156.330750][ T3123] __skb_datagram_iter+0x300/0x760 [ 156.335698][ T3123] ? skb_copy_datagram_iter+0x170/0x170 [ 156.341082][ T3123] skb_copy_datagram_iter+0x43/0x170 [ 156.346285][ T3123] tcp_getsockopt+0x5ad5/0x7030 [ 156.350979][ T3123] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 156.356445][ T3123] ? 0xffffffffa0018778 [ 156.360487][ T3123] ? is_bpf_text_address+0x172/0x190 [ 156.365553][ T3123] ? stack_trace_save+0x1c0/0x1c0 [ 156.370418][ T3123] ? stack_trace_save+0x113/0x1c0 [ 156.375279][ T3123] ? stack_trace_snprint+0xf0/0xf0 [ 156.380232][ T3123] ? avc_has_perm_noaudit+0x348/0x430 [ 156.385440][ T3123] ? memcpy+0x56/0x70 [ 156.389248][ T3123] ? avc_has_perm_noaudit+0x2dd/0x430 [ 156.394456][ T3123] ? avc_denied+0x1b0/0x1b0 [ 156.398793][ T3123] ? __kasan_check_write+0x14/0x20 [ 156.403742][ T3123] ? proc_fail_nth_write+0x20b/0x290 [ 156.408861][ T3123] ? avc_has_perm+0x16f/0x260 [ 156.413378][ T3123] ? avc_has_perm_noaudit+0x430/0x430 [ 156.418584][ T3123] ? vfs_write+0x9ec/0x1110 [ 156.422936][ T3123] ? selinux_socket_getsockopt+0x243/0x340 [ 156.428570][ T3123] sock_common_getsockopt+0x99/0xb0 [ 156.433600][ T3123] ? sock_recv_errqueue+0x4b0/0x4b0 [ 156.438629][ T3123] __sys_getsockopt+0x290/0x4f0 [ 156.443319][ T3123] __x64_sys_getsockopt+0xbf/0xd0 [ 156.448184][ T3123] x64_sys_call+0x1a9/0x9a0 [ 156.452518][ T3123] do_syscall_64+0x3b/0xb0 [ 156.456766][ T3123] ? clear_bhb_loop+0x35/0x90 [ 156.461323][ T3123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.467010][ T3123] RIP: 0033:0x7fde47b5bef9 [ 156.471264][ T3123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.490703][ T3123] RSP: 002b:00007fde467d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 156.498947][ T3123] RAX: ffffffffffffffda RBX: 00007fde47d13f80 RCX: 00007fde47b5bef9 [ 156.506759][ T3123] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 156.514568][ T3123] RBP: 00007fde467d5090 R08: 0000000020000000 R09: 0000000000000000 [ 156.522379][ T3123] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 156.530277][ T3123] R13: 0000000000000000 R14: 00007fde47d13f80 R15: 00007fffa389b528 [ 156.538094][ T3123] [ 156.550200][ T3125] FAULT_INJECTION: forcing a failure. [ 156.550200][ T3125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.571174][ T3125] CPU: 0 PID: 3125 Comm: syz.0.654 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 156.580814][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 156.590706][ T3125] Call Trace: [ 156.593829][ T3125] [ 156.596610][ T3125] dump_stack_lvl+0x151/0x1c0 [ 156.601120][ T3125] ? io_uring_drop_tctx_refs+0x190/0x190 [ 156.606590][ T3125] dump_stack+0x15/0x20 [ 156.610676][ T3125] should_fail+0x3c6/0x510 [ 156.614930][ T3125] should_fail_alloc_page+0x5a/0x80 [ 156.619958][ T3125] prepare_alloc_pages+0x15c/0x700 [ 156.624903][ T3125] ? __alloc_pages+0x8f0/0x8f0 [ 156.629503][ T3125] ? __alloc_pages_bulk+0xe40/0xe40 [ 156.634540][ T3125] __alloc_pages+0x18c/0x8f0 [ 156.638965][ T3125] ? prep_new_page+0x110/0x110 [ 156.643563][ T3125] ? __kasan_kmalloc+0x9/0x10 [ 156.648257][ T3125] ? __kmalloc_track_caller+0x139/0x260 [ 156.653633][ T3125] ? __kasan_check_write+0x14/0x20 [ 156.658578][ T3125] ? __alloc_skb+0x355/0x550 [ 156.663005][ T3125] alloc_skb_with_frags+0x1fe/0x680 [ 156.668049][ T3125] sock_alloc_send_pskb+0x915/0xa50 [ 156.669791][ T3132] loop3: detected capacity change from 0 to 1024 [ 156.673078][ T3125] ? sock_kzfree_s+0x60/0x60 [ 156.673104][ T3125] ? avc_has_perm_noaudit+0x348/0x430 [ 156.688871][ T3125] ? memcpy+0x56/0x70 [ 156.692689][ T3125] packet_sendmsg+0x3cb5/0x6350 [ 156.697373][ T3125] ? avc_denied+0x1b0/0x1b0 [ 156.701716][ T3125] ? avc_has_perm+0x16f/0x260 [ 156.706226][ T3125] ? xfeature_is_aligned+0xe0/0xf0 [ 156.711174][ T3125] ? selinux_socket_sendmsg+0x243/0x340 [ 156.716553][ T3125] ? selinux_socket_accept+0x5b0/0x5b0 [ 156.721852][ T3125] ? packet_getsockopt+0xea0/0xea0 [ 156.726795][ T3125] ? check_stack_object+0x114/0x130 [ 156.731830][ T3125] ? security_socket_sendmsg+0x82/0xb0 [ 156.737215][ T3125] ? packet_getsockopt+0xea0/0xea0 [ 156.742159][ T3125] ____sys_sendmsg+0x59e/0x8f0 [ 156.746845][ T3125] ? __sys_sendmsg_sock+0x40/0x40 [ 156.751706][ T3125] ? import_iovec+0xe5/0x120 [ 156.756393][ T3125] ___sys_sendmsg+0x252/0x2e0 [ 156.760916][ T3125] ? __sys_sendmsg+0x260/0x260 [ 156.765516][ T3125] ? __fdget+0x1bc/0x240 [ 156.769585][ T3125] __se_sys_sendmsg+0x19a/0x260 [ 156.774271][ T3125] ? __x64_sys_sendmsg+0x90/0x90 [ 156.779046][ T3125] ? ksys_write+0x260/0x2c0 [ 156.783472][ T3125] ? debug_smp_processor_id+0x17/0x20 [ 156.788679][ T3125] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 156.794578][ T3125] __x64_sys_sendmsg+0x7b/0x90 [ 156.799180][ T3125] x64_sys_call+0x16a/0x9a0 [ 156.803522][ T3125] do_syscall_64+0x3b/0xb0 [ 156.807771][ T3125] ? clear_bhb_loop+0x35/0x90 [ 156.812286][ T3125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.818012][ T3125] RIP: 0033:0x7fd106ccbef9 [ 156.822269][ T3125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.841707][ T3125] RSP: 002b:00007fd105945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.849953][ T3125] RAX: ffffffffffffffda RBX: 00007fd106e83f80 RCX: 00007fd106ccbef9 [ 156.857764][ T3125] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000005 [ 156.865575][ T3125] RBP: 00007fd105945090 R08: 0000000000000000 R09: 0000000000000000 [ 156.873385][ T3125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.881295][ T3125] R13: 0000000000000000 R14: 00007fd106e83f80 R15: 00007ffd33174628 [ 156.889106][ T3125] [ 156.914304][ T3120] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 156.914304][ T3120] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 156.914304][ T3120] [ 156.946405][ T3120] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 156.959370][ T3132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.971142][ T3120] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,i_version,noacl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 157.020376][ T3136] loop0: detected capacity change from 0 to 40427 [ 157.099295][ T3136] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 157.107082][ T3136] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.116820][ T3136] F2FS-fs (loop0): invalid crc value [ 157.118971][ T6] usb 5-1: device descriptor read/64, error -71 [ 157.134993][ T3136] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.165330][ T3136] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 157.172332][ T3136] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.186607][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 157.198592][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 157.212800][ T3147] netlink: 104 bytes leftover after parsing attributes in process `syz.2.658'. [ 157.237957][ T3149] loop2: detected capacity change from 0 to 128 [ 157.238993][ T6] usb usb5-port1: attempt power cycle [ 157.247836][ T3149] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.264211][ T3149] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.377768][ T3151] loop0: detected capacity change from 0 to 2048 [ 157.559893][ T3151] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,. Quota mode: writeback. [ 157.659064][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 157.714149][ T3151] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.659: bg 0: block 234: padding at end of block bitmap is not set [ 157.728446][ T3151] EXT4-fs (loop0): Remounting filesystem read-only [ 157.753756][ T3160] EXT4-fs (loop0): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -30 [ 157.797368][ T3163] loop1: detected capacity change from 0 to 512 [ 157.830331][ T3163] EXT4-fs (loop1): quotafile must be on filesystem root [ 157.839083][ T6] usb 5-1: device descriptor read/8, error -71 [ 157.931529][ T3163] loop1: detected capacity change from 0 to 2048 [ 157.979045][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 158.249045][ T3163] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.663: casefold flag without casefold feature [ 158.262024][ T3163] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 158.272735][ T3163] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 158.278984][ T6] usb 5-1: device descriptor read/8, error -71 [ 158.280702][ T3163] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.299131][ T39] usb 4-1: device descriptor read/64, error -71 [ 158.376461][ T3171] loop2: detected capacity change from 0 to 40427 [ 158.566872][ T3171] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 158.590638][ T3171] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.611902][ T3171] F2FS-fs (loop2): invalid crc value [ 158.618679][ T3171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.658029][ T3171] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.665324][ T3171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.678970][ T6] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.809316][ T39] usb 4-1: device descriptor read/64, error -71 [ 158.818920][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 158.827994][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 158.848985][ T6] usb 5-1: device descriptor read/8, error -71 [ 158.945109][ T3190] loop1: detected capacity change from 0 to 1024 [ 159.032495][ T3190] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.043293][ T3190] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.060591][ T3190] JBD2: no valid journal superblock found [ 159.066153][ T3190] EXT4-fs (loop1): error loading journal [ 159.118981][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 159.218999][ T6] usb 5-1: device descriptor read/8, error -71 [ 159.225129][ T435] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 159.349526][ T6] usb usb5-port1: unable to enumerate USB device [ 159.418958][ T39] usb 4-1: device descriptor read/64, error -71 [ 159.418958][ T310] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 159.468947][ T435] usb 1-1: Using ep0 maxpacket: 32 [ 159.589026][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.600046][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.610314][ T435] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.612558][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 159.612572][ T30] audit: type=1400 audit(1727032355.274:3159): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.622105][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.627471][ T30] audit: type=1400 audit(1727032355.274:3160): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.678012][ T30] audit: type=1400 audit(1727032355.274:3161): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.700431][ T30] audit: type=1400 audit(1727032355.274:3162): avc: denied { add_name } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.703658][ T435] usb 1-1: config 0 descriptor?? [ 159.722936][ T30] audit: type=1400 audit(1727032355.274:3163): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.750074][ T30] audit: type=1400 audit(1727032355.274:3164): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.771318][ T435] hub 1-1:0.0: USB hub found [ 159.809217][ T310] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.820271][ T310] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.829930][ T310] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 159.838869][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.868956][ T39] usb 4-1: device descriptor read/64, error -71 [ 159.989026][ T39] usb usb4-port1: attempt power cycle [ 159.989227][ T435] hub 1-1:0.0: 1 port detected [ 160.048943][ T20] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.408965][ T39] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.409039][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.429680][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.439404][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 160.448239][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.456699][ T20] usb 2-1: config 0 descriptor?? [ 160.528140][ T30] audit: type=1400 audit(1727032356.184:3165): avc: denied { getopt } for pid=3199 comm="syz.2.671" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.619035][ T39] usb 4-1: device descriptor read/8, error -71 [ 160.639001][ T435] hub 1-1:0.0: activate --> -90 [ 160.688427][ T3208] loop3: detected capacity change from 0 to 256 [ 160.759055][ T310] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 160.766566][ T310] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input37 [ 160.775645][ T3208] FAT-fs (loop3): Unrecognized mount option "shortwin95" or missing value [ 160.784193][ T310] input: failed to attach handler kbd to device input37, error: -5 [ 160.793853][ T310] usb 3-1: USB disconnect, device number 22 [ 160.799678][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 160.805355][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 160.817055][ T20] usb 2-1: USB disconnect, device number 19 [ 160.839017][ T39] usb 4-1: device descriptor read/8, error -71 [ 160.882374][ T3210] syz.3.675[3210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.882466][ T3210] syz.3.675[3210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.938997][ T435] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 161.383689][ T310] usb 1-1: USB disconnect, device number 30 [ 161.681723][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.798953][ T30] audit: type=1326 audit(1727032357.454:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde47b5bef9 code=0x7ffc0000 [ 161.805230][ T3222] loop3: detected capacity change from 0 to 1024 [ 161.828307][ T30] audit: type=1326 audit(1727032357.464:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde47b5bef9 code=0x7ffc0000 [ 161.851597][ T30] audit: type=1326 audit(1727032357.464:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde47b5bef9 code=0x7ffc0000 [ 161.912064][ T3222] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 161.980953][ T3230] device batadv_slave_1 entered promiscuous mode [ 161.987595][ T3229] device batadv_slave_1 left promiscuous mode [ 162.051894][ T3225] loop0: detected capacity change from 0 to 40427 [ 162.129521][ T3225] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 162.137073][ T3225] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.159772][ T3225] F2FS-fs (loop0): invalid crc value [ 162.170533][ T3225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.285612][ T3225] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.307930][ T3225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.319536][ T310] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 162.830451][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 162.936759][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.095574][ T3255] input: syz0 as /devices/virtual/input/input38 [ 163.101720][ T311] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 163.109938][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.120828][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.130949][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.143705][ T310] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 163.152525][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.160885][ T310] usb 3-1: config 0 descriptor?? [ 163.378942][ T435] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 163.378965][ T311] usb 4-1: device descriptor read/64, error -71 [ 163.401876][ T3233] loop2: detected capacity change from 0 to 1024 [ 163.479447][ T3233] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.500151][ T3233] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,dioread_nolock,,errors=continue. Quota mode: none. [ 163.512678][ T3233] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 163.583943][ T384] tipc: Disabling bearer [ 163.589234][ T384] tipc: Disabling bearer [ 163.599430][ T384] tipc: Left network mode [ 163.640810][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.647793][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.655314][ T3261] device bridge_slave_0 entered promiscuous mode [ 163.666958][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.674031][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.681385][ T3261] device bridge_slave_1 entered promiscuous mode [ 163.699183][ T3259] loop0: detected capacity change from 0 to 40427 [ 163.731315][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.738297][ T3261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.745419][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.748976][ T435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.752262][ T3261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.763445][ T310] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 163.769480][ T311] usb 4-1: device descriptor read/64, error -71 [ 163.776258][ T435] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.792249][ T310] hid-steam 0003:28DE:1102.0020: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 163.794189][ T3259] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 163.803898][ T310] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 163.816911][ T310] hid-steam 0003:28DE:1102.0021: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 163.820043][ T3259] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 163.838690][ T3259] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 163.849793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.857517][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.865000][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.866214][ T3259] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 163.878831][ T3259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.889866][ T310] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected [ 163.894717][ T3259] syz.0.686[3259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.898173][ T435] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.900290][ T3259] syz.0.686[3259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.910015][ T310] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0020/input/input39 [ 163.940986][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.948965][ T435] usb 2-1: SerialNumber: syz [ 163.991703][ T310] usb 3-1: USB disconnect, device number 23 [ 164.005992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.014086][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.014968][ T310] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' disconnected [ 164.020957][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.021150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.044893][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.051833][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.190201][ T3255] ================================================================== [ 164.198178][ T3255] BUG: KASAN: slab-out-of-bounds in __mutex_lock+0x122d/0x1870 [ 164.201058][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.205561][ T3255] Read of size 4 at addr ffff88810778ce6c by task syz.1.685/3255 [ 164.213100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.220478][ T3255] [ 164.220485][ T3255] CPU: 0 PID: 3255 Comm: syz.1.685 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 164.228363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.230196][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.230208][ T3255] Call Trace: [ 164.230214][ T3255] [ 164.230221][ T3255] dump_stack_lvl+0x151/0x1c0 [ 164.248541][ T3261] device veth0_vlan entered promiscuous mode [ 164.257281][ T3255] ? io_uring_drop_tctx_refs+0x190/0x190 [ 164.257310][ T3255] ? panic+0x760/0x760 [ 164.282885][ T3255] print_address_description+0x87/0x3b0 [ 164.288262][ T3255] kasan_report+0x179/0x1c0 [ 164.292603][ T3255] ? __mutex_lock+0x122d/0x1870 [ 164.297289][ T3255] ? __mutex_lock+0x122d/0x1870 [ 164.301974][ T3255] __asan_report_load4_noabort+0x14/0x20 [ 164.307442][ T3255] __mutex_lock+0x122d/0x1870 [ 164.311957][ T3255] ? __kasan_slab_alloc+0x63/0xe0 [ 164.316818][ T3255] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 164.323415][ T3255] ? ____kasan_kmalloc+0xed/0x110 [ 164.328273][ T3255] ? ____kasan_kmalloc+0xdb/0x110 [ 164.333133][ T3255] ? __kasan_kmalloc+0x9/0x10 [ 164.337644][ T3255] ? __kmalloc+0x13a/0x270 [ 164.341899][ T3255] ? kvmalloc_node+0x1f0/0x4d0 [ 164.346499][ T3255] ? evdev_open+0xed/0x620 [ 164.350757][ T3255] ? chrdev_open+0x4f7/0x620 [ 164.355186][ T3255] ? do_dentry_open+0x81c/0xfd0 [ 164.359867][ T3255] ? vfs_open+0x73/0x80 [ 164.363863][ T3255] ? path_openat+0x26f0/0x2f40 [ 164.368461][ T3255] ? do_filp_open+0x21c/0x460 [ 164.373134][ T3255] ? do_sys_openat2+0x13f/0x830 [ 164.377807][ T3255] ? __x64_sys_openat+0x243/0x290 [ 164.382679][ T3255] ? do_syscall_64+0x3b/0xb0 [ 164.387097][ T3255] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.393262][ T3255] __mutex_lock_slowpath+0xe/0x10 [ 164.398127][ T3255] mutex_lock+0x135/0x1e0 [ 164.402284][ T3255] ? wait_for_completion_killable_timeout+0x10/0x10 [ 164.408796][ T3255] steam_input_open+0x91/0x1a0 [ 164.413390][ T3255] ? steam_input_register+0xa70/0xa70 [ 164.418609][ T3255] ? __kasan_check_write+0x14/0x20 [ 164.423556][ T3255] ? mutex_lock_interruptible+0xb6/0x1e0 [ 164.429014][ T3255] ? __kasan_check_write+0x14/0x20 [ 164.433964][ T3255] input_open_device+0x1a5/0x310 [ 164.438745][ T3255] ? kobject_get_unless_zero+0x229/0x320 [ 164.444300][ T3255] evdev_open+0x3df/0x620 [ 164.448462][ T3255] chrdev_open+0x4f7/0x620 [ 164.452711][ T3255] ? cd_forget+0x170/0x170 [ 164.456960][ T3255] ? fsnotify_perm+0x4ba/0x5d0 [ 164.461566][ T3255] ? cd_forget+0x170/0x170 [ 164.465821][ T3255] do_dentry_open+0x81c/0xfd0 [ 164.470330][ T3255] vfs_open+0x73/0x80 [ 164.474145][ T3255] path_openat+0x26f0/0x2f40 [ 164.478574][ T3255] ? __kasan_slab_alloc+0xb1/0xe0 [ 164.483431][ T3255] ? kmem_cache_alloc+0xf5/0x200 [ 164.488203][ T3255] ? getname_flags+0xba/0x520 [ 164.493241][ T3255] ? __x64_sys_openat+0x243/0x290 [ 164.498104][ T3255] ? do_filp_open+0x460/0x460 [ 164.502702][ T3255] do_filp_open+0x21c/0x460 [ 164.507048][ T3255] ? vfs_tmpfile+0x2c0/0x2c0 [ 164.511474][ T3255] do_sys_openat2+0x13f/0x830 [ 164.515980][ T3255] ? selinux_bpf+0xd2/0x100 [ 164.520326][ T3255] ? do_sys_open+0x220/0x220 [ 164.524746][ T3255] __x64_sys_openat+0x243/0x290 [ 164.529442][ T3255] ? __ia32_sys_open+0x270/0x270 [ 164.534205][ T3255] ? __kasan_check_read+0x11/0x20 [ 164.539064][ T3255] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 164.544532][ T3255] x64_sys_call+0x6bf/0x9a0 [ 164.548885][ T3255] do_syscall_64+0x3b/0xb0 [ 164.553124][ T3255] ? clear_bhb_loop+0x35/0x90 [ 164.557770][ T3255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.563476][ T3255] RIP: 0033:0x7f6403731890 [ 164.567722][ T3255] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 164.587245][ T3255] RSP: 002b:00007f64023abb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 164.595578][ T3255] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6403731890 [ 164.603387][ T3255] RDX: 0000000000000000 RSI: 00007f64023abc10 RDI: 00000000ffffff9c [ 164.611358][ T3255] RBP: 00007f64023abc10 R08: 0000000000000000 R09: 0000000000000000 [ 164.619151][ T3255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.627043][ T3255] R13: 0000000000000000 R14: 00007f64038eaf80 R15: 00007ffef3568f48 [ 164.634862][ T3255] [ 164.637718][ T3255] [ 164.639889][ T3255] Allocated by task 100: [ 164.643969][ T3255] ____kasan_kmalloc+0xdb/0x110 [ 164.648657][ T3255] __kasan_kmalloc+0x9/0x10 [ 164.653161][ T3255] __kmalloc+0x13a/0x270 [ 164.657237][ T3255] kernfs_fop_write_iter+0x151/0x410 [ 164.662354][ T3255] vfs_write+0xd5d/0x1110 [ 164.666520][ T3255] ksys_write+0x199/0x2c0 [ 164.670693][ T3255] __x64_sys_write+0x7b/0x90 [ 164.675118][ T3255] x64_sys_call+0x2f/0x9a0 [ 164.679454][ T3255] do_syscall_64+0x3b/0xb0 [ 164.683704][ T3255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.689892][ T3255] [ 164.692063][ T3255] The buggy address belongs to the object at ffff88810778ce60 [ 164.692063][ T3255] which belongs to the cache kmalloc-8 of size 8 [ 164.705687][ T3255] The buggy address is located 4 bytes to the right of [ 164.705687][ T3255] 8-byte region [ffff88810778ce60, ffff88810778ce68) [ 164.718988][ T3255] The buggy address belongs to the page: [ 164.724450][ T3255] page:ffffea00041de300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810778c370 pfn:0x10778c [ 164.735812][ T3255] flags: 0x4000000000000200(slab|zone=1) [ 164.741280][ T3255] raw: 4000000000000200 ffffea00048fe108 ffffea00041cf908 ffff888100042300 [ 164.749706][ T3255] raw: ffff88810778c370 0000000000660031 00000001ffffffff 0000000000000000 [ 164.758109][ T3255] page dumped because: kasan: bad access detected [ 164.764474][ T3255] page_owner tracks the page as allocated [ 164.770010][ T3255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1186702992, free_ts 0 [ 164.784766][ T3255] post_alloc_hook+0x1a3/0x1b0 [ 164.789449][ T3255] prep_new_page+0x1b/0x110 [ 164.793788][ T3255] get_page_from_freelist+0x3550/0x35d0 [ 164.799172][ T3255] __alloc_pages+0x27e/0x8f0 [ 164.803597][ T3255] new_slab+0x9a/0x4e0 [ 164.807500][ T3255] ___slab_alloc+0x39e/0x830 [ 164.811930][ T3255] __slab_alloc+0x4a/0x90 [ 164.816095][ T3255] __kmalloc_track_caller+0x16c/0x260 [ 164.821302][ T3255] kstrdup_const+0x55/0x90 [ 164.825570][ T3255] __kernfs_new_node+0x99/0x700 [ 164.830240][ T3255] kernfs_new_node+0x130/0x230 [ 164.834844][ T3255] kernfs_create_dir_ns+0x44/0x130 [ 164.839799][ T3255] sysfs_create_dir_ns+0x185/0x390 [ 164.844737][ T3255] kobject_add_internal+0x763/0xd90 [ 164.849771][ T3255] kobject_init_and_add+0x120/0x190 [ 164.854893][ T3255] locate_module_kobject+0xe4/0x170 [ 164.859925][ T3255] page_owner free stack trace missing [ 164.865134][ T3255] [ 164.867314][ T3255] Memory state around the buggy address: [ 164.872778][ T3255] ffff88810778cd00: fc fc fc fc 03 fc fc fc fc 05 fc fc fc fc fb fc [ 164.880670][ T3255] ffff88810778cd80: fc fc fc fb fc fc fc fc fb fc fc fc fc fb fc fc [ 164.889352][ T3255] >ffff88810778ce00: fc fc 06 fc fc fc fc 05 fc fc fc fc fb fc fc fc [ 164.897245][ T3255] ^ [ 164.904542][ T3255] ffff88810778ce80: fc 04 fc fc fc fc 05 fc fc fc fc 00 fc fc fc fc [ 164.912525][ T3255] ffff88810778cf00: fb fc fc fc fc fb fc fc fc fc fb fc fc fc fc fb [ 164.920420][ T3255] ================================================================== [ 164.929101][ T3255] Disabling lock debugging due to kernel taint [ 164.935398][ T3255] BUG: unable to handle page fault for address: 0000000000027051 [ 164.942919][ T3255] #PF: supervisor read access in kernel mode [ 164.948734][ T3255] #PF: error_code(0x0000) - not-present page [ 164.954547][ T3255] PGD 120f3b067 P4D 120f3b067 PUD 1157e9067 PMD 0 [ 164.960884][ T3255] Oops: 0000 [#1] PREEMPT SMP KASAN [ 164.965918][ T3255] CPU: 0 PID: 3255 Comm: syz.1.685 Tainted: G B 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 164.977027][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.986921][ T3255] RIP: 0010:__raw_callee_save___kvm_vcpu_is_preempted+0x8/0x20 [ 164.994299][ T3255] Code: e8 4d 68 51 01 bf 21 10 01 c0 be 0e 00 00 00 e8 3e 68 51 01 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 fd 20 d8 25 86 <80> b8 50 70 02 00 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f [ 165.013830][ T3255] RSP: 0018:ffffc90000ddf2d8 EFLAGS: 00010286 [ 165.019725][ T3255] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff84e48523 [ 165.027538][ T3255] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 0000000000000064 [ 165.035349][ T3255] RBP: ffffc90000ddf500 R08: ffffffff814194db R09: 0000000000000003 [ 165.043160][ T3255] R10: fffffbfff0e99c4c R11: dffffc0000000001 R12: 1ffff110234e94f0 [ 165.050972][ T3255] R13: 1ffff920001bbe88 R14: 1ffff920001bbe6c R15: 0000000000000064 [ 165.058780][ T3255] FS: 00007f64023ac6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 165.067549][ T3255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.073970][ T3255] CR2: 0000000000027051 CR3: 000000011eb18000 CR4: 00000000003506b0 [ 165.081784][ T3255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.089594][ T3255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.097404][ T3255] Call Trace: [ 165.100529][ T3255] [ 165.103309][ T3255] ? __die_body+0x62/0xb0 [ 165.107474][ T3255] ? __die+0x7e/0x90 [ 165.111205][ T3255] ? page_fault_oops+0x7f9/0xa90 [ 165.115978][ T3255] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 165.121360][ T3255] ? __wake_up_klogd+0xde/0x110 [ 165.126047][ T3255] ? vprintk_emit+0x16b/0x340 [ 165.130565][ T3255] ? vprintk_store+0x1620/0x1620 [ 165.135334][ T3255] ? exc_page_fault+0x510/0x7f0 [ 165.140025][ T3255] ? asm_exc_page_fault+0x27/0x30 [ 165.144879][ T3255] ? check_panic_on_warn+0x5b/0xb0 [ 165.149827][ T3255] ? __mutex_lock+0x1273/0x1870 [ 165.154516][ T3255] ? __raw_callee_save___kvm_vcpu_is_preempted+0x8/0x20 [ 165.161284][ T3255] ? __mutex_lock+0x2e8/0x1870 [ 165.165882][ T3255] ? __kasan_slab_alloc+0x63/0xe0 [ 165.170745][ T3255] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 165.177339][ T3255] ? ____kasan_kmalloc+0xed/0x110 [ 165.182200][ T3255] ? ____kasan_kmalloc+0xdb/0x110 [ 165.187060][ T3255] ? __kasan_kmalloc+0x9/0x10 [ 165.191572][ T3255] ? __kmalloc+0x13a/0x270 [ 165.195826][ T3255] ? kvmalloc_node+0x1f0/0x4d0 [ 165.200598][ T3255] ? evdev_open+0xed/0x620 [ 165.204850][ T3255] ? chrdev_open+0x4f7/0x620 [ 165.209277][ T3255] ? do_dentry_open+0x81c/0xfd0 [ 165.213965][ T3255] ? vfs_open+0x73/0x80 [ 165.217956][ T3255] ? path_openat+0x26f0/0x2f40 [ 165.222556][ T3255] ? do_filp_open+0x21c/0x460 [ 165.227069][ T3255] ? do_sys_openat2+0x13f/0x830 [ 165.231757][ T3255] ? __x64_sys_openat+0x243/0x290 [ 165.236620][ T3255] ? do_syscall_64+0x3b/0xb0 [ 165.241042][ T3255] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.246950][ T3255] __mutex_lock_slowpath+0xe/0x10 [ 165.251806][ T3255] mutex_lock+0x135/0x1e0 [ 165.255972][ T3255] ? wait_for_completion_killable_timeout+0x10/0x10 [ 165.262397][ T3255] steam_input_open+0x91/0x1a0 [ 165.266997][ T3255] ? steam_input_register+0xa70/0xa70 [ 165.272203][ T3255] ? __kasan_check_write+0x14/0x20 [ 165.277149][ T3255] ? mutex_lock_interruptible+0xb6/0x1e0 [ 165.282616][ T3255] ? __kasan_check_write+0x14/0x20 [ 165.287564][ T3255] input_open_device+0x1a5/0x310 [ 165.292339][ T3255] ? kobject_get_unless_zero+0x229/0x320 [ 165.297806][ T3255] evdev_open+0x3df/0x620 [ 165.301974][ T3255] chrdev_open+0x4f7/0x620 [ 165.306226][ T3255] ? cd_forget+0x170/0x170 [ 165.310477][ T3255] ? fsnotify_perm+0x4ba/0x5d0 [ 165.315079][ T3255] ? cd_forget+0x170/0x170 [ 165.319336][ T3255] do_dentry_open+0x81c/0xfd0 [ 165.323847][ T3255] vfs_open+0x73/0x80 [ 165.327664][ T3255] path_openat+0x26f0/0x2f40 [ 165.332229][ T3255] ? __kasan_slab_alloc+0xb1/0xe0 [ 165.337034][ T3255] ? kmem_cache_alloc+0xf5/0x200 [ 165.341810][ T3255] ? getname_flags+0xba/0x520 [ 165.346322][ T3255] ? __x64_sys_openat+0x243/0x290 [ 165.351183][ T3255] ? do_filp_open+0x460/0x460 [ 165.355700][ T3255] do_filp_open+0x21c/0x460 [ 165.360035][ T3255] ? vfs_tmpfile+0x2c0/0x2c0 [ 165.364467][ T3255] do_sys_openat2+0x13f/0x830 [ 165.368977][ T3255] ? selinux_bpf+0xd2/0x100 [ 165.373313][ T3255] ? do_sys_open+0x220/0x220 [ 165.377743][ T3255] __x64_sys_openat+0x243/0x290 [ 165.382428][ T3255] ? __ia32_sys_open+0x270/0x270 [ 165.387199][ T3255] ? __kasan_check_read+0x11/0x20 [ 165.392061][ T3255] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 165.397530][ T3255] x64_sys_call+0x6bf/0x9a0 [ 165.401878][ T3255] do_syscall_64+0x3b/0xb0 [ 165.406122][ T3255] ? clear_bhb_loop+0x35/0x90 [ 165.410815][ T3255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.416537][ T3255] RIP: 0033:0x7f6403731890 [ 165.420791][ T3255] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 165.440230][ T3255] RSP: 002b:00007f64023abb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.448475][ T3255] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6403731890 [ 165.456632][ T3255] RDX: 0000000000000000 RSI: 00007f64023abc10 RDI: 00000000ffffff9c [ 165.464445][ T3255] RBP: 00007f64023abc10 R08: 0000000000000000 R09: 0000000000000000 [ 165.472516][ T3255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.480328][ T3255] R13: 0000000000000000 R14: 00007f64038eaf80 R15: 00007ffef3568f48 [ 165.488144][ T3255] [ 165.491088][ T3255] Modules linked in: [ 165.494838][ T3255] CR2: 0000000000027051 [ 165.498822][ T3255] ---[ end trace 618d4878ee1ae3e4 ]--- [ 165.504111][ T3255] RIP: 0010:__raw_callee_save___kvm_vcpu_is_preempted+0x8/0x20 [ 165.511488][ T3255] Code: e8 4d 68 51 01 bf 21 10 01 c0 be 0e 00 00 00 e8 3e 68 51 01 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 fd 20 d8 25 86 <80> b8 50 70 02 00 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f [ 165.531024][ T3255] RSP: 0018:ffffc90000ddf2d8 EFLAGS: 00010286 [ 165.536924][ T3255] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff84e48523 [ 165.544738][ T3255] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 0000000000000064 [ 165.552547][ T3255] RBP: ffffc90000ddf500 R08: ffffffff814194db R09: 0000000000000003 [ 165.560360][ T3255] R10: fffffbfff0e99c4c R11: dffffc0000000001 R12: 1ffff110234e94f0 [ 165.568175][ T3255] R13: 1ffff920001bbe88 R14: 1ffff920001bbe6c R15: 0000000000000064 [ 165.575987][ T3255] FS: 00007f64023ac6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 165.584748][ T3255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.591173][ T3255] CR2: 0000000000027051 CR3: 000000011eb18000 CR4: 00000000003506b0 [ 165.598983][ T3255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.606794][ T3255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.614617][ T3255] Kernel panic - not syncing: Fatal exception [ 165.620684][ T3255] Kernel Offset: disabled [ 165.624801][ T3255] Rebooting in 86400 seconds..