last executing test programs: 3m11.038558702s ago: executing program 3 (id=289): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x81ff) 3m9.885622609s ago: executing program 3 (id=291): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080140001004abee33957edf8aaae14574df404000005000200070000000800030006ac0f"], 0x44}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) 3m8.101158902s ago: executing program 3 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x100000, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000380)="3f03", 0xfffffffffffffde0, 0x80000000000000, 0x0, 0x0) 3m6.26734732s ago: executing program 3 (id=302): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x802, 0xff, 0x232b, 0x402}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$isdn(0x22, 0x3, 0x11) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010005"], 0x44}}, 0x54) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000340)={[{@uid={'uid', 0x3d, 0xee01}}, {@barrier}, {@gid}, {@uid}, {@part={'part', 0x3d, 0x7}}, {@part={'part', 0x3d, 0x2}}, {@gid}, {@type={'type', 0x3d, "0da5b329"}}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000c00)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x563, &(0x7f0000000d00)="$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") getrandom(&(0x7f0000002640)=""/23, 0x17, 0x2) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) sendmmsg(r4, &(0x7f00000025c0), 0x0, 0x4000) 3m4.964790809s ago: executing program 3 (id=305): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000000380)='s', 0x1, 0x135}) 3m3.915464132s ago: executing program 3 (id=308): syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000004, 0x2) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x6020c0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m1.34001688s ago: executing program 32 (id=308): syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000004, 0x2) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x6020c0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 13.482043205s ago: executing program 0 (id=652): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x30}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x312}, &(0x7f00000005c0), &(0x7f0000000100)) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000940)={{0x1}}) tkill(0x0, 0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000000}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f8ffd7fe00000000002300"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file3\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x2, 0x6276, &(0x7f0000003680)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d9bea440830447374d52000000010902581e01000000000904"], 0x0) ioctl$sock_netdev_private(r7, 0x89f4, &(0x7f0000000000)) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r6, 0x1}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$SW_SYNC_IOC_INC(r10, 0x40045701, &(0x7f0000000040)) 11.361138285s ago: executing program 1 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xe4, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x401, 0x95d3, 0x800, 0x3, 0x8, 0x4, 0x10001, 0x6, 0x2]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008080}, 0x4040044) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xb, 0xffffffff, 0x4, 0x800}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc567", 0x9e}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0d", 0x16}, {&(0x7f00000000c0)='c', 0x1}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) writev(0xffffffffffffffff, 0x0, 0x0) 10.419409531s ago: executing program 2 (id=656): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe800000000000000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80e21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.168247271s ago: executing program 1 (id=659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@remote, @default, @netrom, @null, @remote, @null, @null, @default]}, &(0x7f0000000180)=0x48, 0x180800) bind$netrom(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default]}, 0x48) syz_mount_image$ntfs3(&(0x7f000001f6c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7370617273652c7379735f696d6d757461626c652c6c6973636172642c696f636861727365743d6d616367610a160da18d4246d195be656c69632c7370617273652c696f636861727365743d63703933", @ANYRESHEX=0x0, @ANYBLOB=',nohidden,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nohidden,showmeta,nohidden,nohidden,prealloc,acl,iocharset=cp850,\x00'], 0x0, 0x1f260, &(0x7f000001f700)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1031c3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000001c0)={0x40, 0x15, 0x55, "ff0b1a95cfeed1eb13ca8af02556941f84547ac8f27ab95d2779affe733918da2000062c5f9e92bcb9030b7cac856dc15a6f11fff0e6991e3659957fb99e6a6d04a0b415ffecffbd593929d35bdee8fcee8711f7d6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000005000000df7f00006e45002041"], 0x50) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x2023, 0x2, 0x17, 0x870}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.739367956s ago: executing program 0 (id=660): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8.973707009s ago: executing program 2 (id=662): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[], 0x1, 0x374, &(0x7f0000000440)="$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") r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000030000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5"], 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={0x0, 0x0, 0x62}) creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./bus\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) 8.344376671s ago: executing program 4 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.446377048s ago: executing program 5 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d836465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x210, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_ACT={0xf8, 0x6, [@m_skbedit={0xf4, 0xf, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd5, 0xfffffff7, 0x8, 0x3, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xffbc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2e7}]}, {0x5d, 0x6, "a21d420dc648cc7b58776b3ea0135c405b78dd626effc55401f46bc669fb66480e33deb05086000e76be0634c1c93e14ecb67d5c2a8d3ba4ddb690a112e73d9a09df79a37966345e6e45a781549f6248fa3963cd76d5c2e040"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x50, 0x1, [@m_simple={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x15, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x44, 0x1, [@m_ctinfo={0x40, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0x9, 0x6, "c04874b480"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.247727008s ago: executing program 0 (id=665): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 7.07567376s ago: executing program 4 (id=666): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0x0, "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"}) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f0000311000/0x4000)=nil, &(0x7f00000a6000/0x2000)=nil, 0x7, 0x0, 0x0, 0x2, 0x60, 0x4, 0x20, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_clone(0x4000, &(0x7f0000000080)="85e14053a4daa4e23b14055697d3f9ff2d6a3a1cb01d11ac4bb76106ccb79b9b7d629849494306969b00f7a2ee8b3c0f67c40617039a7428582e7840ce85225c373ae036562361591bfbced59dea34bca3f70f6f6be680495e1a0c785839d9283edc", 0x62, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="8ae2d701fb11f191ba9df84889c87b4f9821875758f47216f23892ed7acec3c87236badc33d12e23b6a9ff7a1cc0225b20a397b22f8fda656b47a0c3a6ea8547754b8ee3d750c958fc127ad5da805bc6641663180162af53bac59ca891bfc18ba584a9debc351f31fd839d2cf4631afe46855b38f0520e8b36f90cddf9be4282") (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) (rerun: 32) 6.688349307s ago: executing program 1 (id=667): r0 = socket$inet6(0x10, 0x2, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x8) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0xfe, 0x625a, &(0x7f0000006680)="$eJzs3ctvXFcdB/DfPP0ITa0uqhIh5KblUUqTOCkhUKDtAhZsuqiyRYlct4pIASUBpZVFXHnDghV/AQiJJUIsEQv+gC7YsmOFhEQkGwnUFReNfU58ZzJTO3E8d+zz+UjOvb977tjnzneeuY8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB8/3tvr7Qi4trP0oKliM9EJ6IdsTColyNiYXkpr9+NiOdipzmejYjeXMTg9jv/PB3xakR8fDpia3t9dbD44gH78d0//O23Pzj11l9/3zv/3z/e6bw2ab27d3/5nz/dO9w2AwAAQGmqqqpa6Wv+mfT9vt10pwCAqcjv/1WSl5/4+lf/eOvPs9Qf9Qmt52asP2q1uvS6rhrvXr2IiI36bQafGeyOB4BjZiM+aboLNEj+RetGxKmmOwHMtFbTHeBIbG2vr7ZSvq36+8Hybns+FmQo/43Wg/M7Jk33M3qMybQeX5vRiWcm9GdhSn2YJTn/9mj+13bb+2m9o85/Wibl39899ak4Of/OaP4jTk7+7bH5lyrn332k/DvyBwAAAACAGZb//3+p4f2/c4fflAP5tP2/y1PqAwAAAAAAAAA8aYcd/+8B4/8BAADAzBp8Vx/49em9ZZOuxTZYfrUV8dTI+kBh0skyi033AwAAAAAAAAAAAABK0t09hvdqK6IXEU8tLlZVNfipG60f1WFvf9yVvv1QsqZf5AEAYNfHp0fO5W9FzEfE1XStv97i4mJVzS8sVovVwlz+PNufm68Wat9r83SwbK5/gA/E3X41+GXztdvV7fd9eb/20d83+Fv9qnOAjj0hvXRvTmhuKGwASHbfjba8I50wVfX0pA8fMMTz/wRaiqWmH1fMvqYfpgAAAMDRq6qqaqXLeZ9J+/zbTXcKAJiK/P4/ul/gUHV7qP7n23mViCfz+9VqtVqtVj9WXVeNd69eRMRG/TaDzwyG4weAY2YjPmm6CzRI/kXrRsRzTXcCmGmtpjvAkdjaXl9tpXxb9feDNL57PhZkKP+N1s7t8u3HTfczeozJtB5fm9GJZyb059kp9WGW5Pzbo/lf223vp/WOOv9pmZR/f+eUufLk/Duj+Y84Ofm3x+Zfqpx/95Hy78gfAAAAAABmWP7//yX7f/MmAwAAAAAAAMCxs7W9vprPe837/z83Zj3nf55MOf/Wo+a/kOblf6zl/Nsj+X95ZL1Obf7+m3vP/39vr6/+7s6/PpunB81/Ls+00iOrlR4RrfSXWt00PczWPWyz1+kP/lKv1e500zE/Ve/duBE3Yy0uDK3bTvfHXvvKUPugp72h9otD7d2H2i8NtffSdQeqhdx+Llbjx3Ez3tlp7w/f7WPN73P/VPu05/w7Xv+LlPPv1n4G+S+m9tbIdOD+R+2Hnvf16bi/88aNz//iwtFvzr42o/Ng2+oG23e2gf7s3Cen+vHT22u3zt29fufOrZVIk6GlFyNNnrCcf2/nZ27v9f+F3fb8AlR/vt7/qP/I+c+KzehOzP+F2vxge1+act+akPPvp5+c/zupffzz/zjnP/n5/3ID/QEAAAAAAAAAAAAAAIBPU1XVzimib0TE5XT+T1PnZgIA05Xf/6skL1er1UN15OtlzUh/1Gq1+rHqumq81+tFRPylfpvBZ4afj/tlAMAs+19E/L3pTtAY+RcsX+9vMH2x6c4AU3X7gw9/eP3mzbVbt5vuCQAAAAAAAADwuPL4n8u18Z9fjBg6xylGx399M5YPO/5nN888GGD0CQ/0PcFmu99p14Ybfz52xuc+N2n877Px8PjfeUzcTn07Jujt097fp31un/b5sUv30hp7okdNzv/52njng/zPjAy/XsL4r6Nj3pcg53+29nge5P+lkfXq+Ve/mbn8Nw664ma0h/I/f+f9n5y//cGHr9x4//p7a++t/ejSysqFS5cvX7ly5fy7N26uXdj992h6PQNy/nnsa8eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf/68J/+y5Pzzdx/5lyXn/1Kq5V+WnP9XUi3/smxtr88N8n851fIvS37+fzXV8i9Lzv+VVMu/LDn/c6mWf1ly/udTfYD8XR7+BMn55z1cnv9lyfmvpFr+Zcn5X0y1/MuS87+UavmXJef/aqrlX5ac/9dSLf+y5Pwvp1r+Zcn5fz3V8i9Lzv9KquVflpz/N1It/7Lk/L+ZavmXJef/WqrlX5ac/7dSLf+y5Py/nWr5lyXn/51Uy78sOf/XUy3/suxd/9+MGTNm8kzTr0wAAAAAAAAAAAAAwKhpHE7c9DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNUaus74f+Jm9ee0QYkgITv4G1o4xxlmy60t84V8XE64NUAokFHrBdr1rs+BbvHZJ0kg2DZRIOCqqqJq+aAsoaiNVFVbFC1qlNC+qXl417Qv6pqKthNSoClFARWormq1mzvM8npmdnbNrz+7OnvP5SPZvd+acOc+cec7Z+a39nQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM22vGv6S7Usy+p/Gn9tzLJX1b9eP7axcdvbV3uEAAAAwI3638bfL9+Sbji8iJWalvmbN/79t+bm5uayTwz+9vBX5+bSHWNZNrwuyxr3RVf/7ZO15mWCx7PR2kDT9wMFmx8suH+o4P7hgvtHCu5fV3D/aMH983bAPOvz38c0Hmxb48uN+S7NbsuGG/dt67DW47V1AwPxdzkNtcY6c8MnspnsVDadTbYsny9bayz/7Jb6tt6fxW0NNG1rc32G/PCx43EMtbCPt7Vs69pjRj94Zzb2ox8+dvwPL7x4R6dauBtaHi8f546t9XF+IdySj7WWrUv7JI5zoGmcmzu8JoMt46w11qt/3T7Olxc5zsFrw1xR7a/5aDbQ+Pr5xn4aav61XtpPm8Nt/3VXlmWXrw27fZl528oGsg0ttwxce31G8xlZf4z6VHptNrSkebplEfO0Xqe2tc7T9mMivv5bwnpDC4yh+WX6wedH5r3uS52nUf1ZL3SstM/BXh8r/TIH47x4vvGkn+g4B7eF5//Y9oXnYMe502EOpufdNAe3Fs3BgZHBxpjTi1BrrHNtDu5qWX6wsaVao76wvfscnLhw+tzE7COPvm3m9LGT0yenz+zZtWtyz759Bw4cmDgxc2p6Mv/7Ovd2/9uQDaRjYGvYd/EYeEvbss1Tde7rvTsOR7schxvblu31cTjU/uRqHQ7IojcJ12H+nM6PjQfqO330ykC2wDHWeH123vhxmJ5303E41HQcdvyZ0uE4HFrEcVhf5tzOxb1nGWr602kMy/WzYGPTHGx/P9I+B3v9fmRRc3AZtL+eo2Fe/PPOhX8WbA7jfWJ8qe9HBufNwfR0w7mnfkt6vz96oFE6zcs763fcNJJdnJ0+f8/Dxy5cOL8rC2VF3No0V9rn64am55TNm68DS56vh2fe+MSdHW7fGPbV6Nvqf40u+FrVl9l7T/fXqvHTrfP+bLl1dxZKj630/uz007y+P1Mv2WV/1pf5wsSNvxdPfWnT+Xd4gfNv7PtfybeXHurxweGh/PgdTHtnuOV83PpSDTXOXbXGtl+eWNz5eDj8Wenz8W1dzseb2pbt9fl4uP3JxfNxrei3HTem/fUcDfPk1GT383F9mU27lzonh7qej+8KtRb2/1tDp5DeCjXNnYXmbdrW0NBweF5DcQut83RPy/LDoTerb+uZ3dc3T3fclT/WYHp216zUPB1rW7bX8zSdrxaap7Wi375dn/bXczTMi9v2dJ+n9WWe23vj58718cumc+dI0RwcHhypj3k4TcL8fD+3Ps7Be7Lj2dnsVDbVuHekMZ9qjW2N37u4OTgS/qz0uXJTlzm4o23ZXs/B9HNsoblXG5r/5Hug/fUcDfPiqXu7z8H6Mu/ev6Q5eGvRe9cd4Za0TNN71/bfry30O68723bTcv7Oqz7Ov9rf/Xez9WVOHVhqn9l9P90dbrmpw35qP34XOqamspXZT5vCOF88sPB+qo+nvsxXDy5yPh3OsuzSQ/c1ft8b/n3lTy9+91st/+7S6d90Lj1030s3n/jrpYwfgLXvlbxsyH/WNf0yejH//g8AAACsCbHvHwg10f8DAABAacS+P/6v8ET/DwAAAKUR+/6hUJOK9P+b3v3izCuXspTMnwvi/Wk33J8vFzOuk+H7sblr6rff9/T0j//80uK2PZBl2U/u/7WOy2+6P44rNxbGefU9rbfPX/HSorZ/9MFryzXn178WHj8+n8VOg04R3Mksy5695cnGdsY+eaVRn7v/aKN+9PITj9eXeflg/n1c/4Vb8+V/L4R/D5841rL+C2E/fD/UyQ903h9xvW9eeevm/R+/tr24Xm3rqxtP+6lP5Y8bPyfnK4/ny8f9vND4/+LLz3yzvvzDb+48/ksDncf/THjcp0P97zfkyze/BvXv43pfDOOP24vr3fON73Qc/9Uv5cufe2++3NFQ4/Z3hO+3vffFmeb99XDtWMvzyt6XLxe3P/nd32zcHx8vPn77+EePXGnZH+3z47l/zB9nom35eHvcTvRnbduvP07z/Izbf+Y3jrbs56LtX/3oC2+oP2779u9uW26wbf32T2z6/S8+2XF7cTyH/+Rcy/M5/JFwHIftP/WpMB/D/f9z9cmW7UZHP9J6/onLf23jpZbnE73/R/n2r77jZKP++9iPf/emV9386stvqu+7LHv+Y/njFW3/5B+cbRn/12/f2Xg94v0xo9++/YXE7Z//3PiZs7MXZ6aa9mrjs3M+mI9n3ej6DfXx3hLOre3fHzl74dPT58cmxyazbKy8H6F33b4R6kt5ubzU9Xc+GF7PO3/n2Q3b/+HL8fZ/eiC//coH8p9bbwnLfSXcvjF//eZqN7j9p7bc3ji+a8/l37fk2Htg87b/OLCoBcPzb39fEOf7udd9urEf6vc1fm7E4/oGx/+9qfxxvh3261z4ZOatt1/bXvPy8bMRrnwsP95veP+F01x8Xf8ovN4f+n7++HFc8fl+L7yP+c6m1vNdnB/fvjTQ/viNT/G4HM4n2eX8/rhU3N9XXr694/Di55Bkl+9ofP9b6XHuWNLTXMjsI7MTp2bOXHx44sL07IWJ2UcePXL67MUzF440PsvzyGeK1r92ftrQOD9NTe/bm02uz7LsbDa5Aies5Rl//avFjf/cg8en9k9un5o+ceziiQsPnps+f/L47Ozx6anZ7cdOnJj+XNH6M1OHdu0+uGf/7vGTM1OHDhw8uOfg+MyZs/Vh5IMqsG/ys+Nnzh9prDJ7aO/BXffeu3dy/PTZqelD+ycnxy8Wrd/42TReX/tXx89Pnzp2Yeb09PjszKPTh3Yd3Ldvd+GnAZ4+d2J2bOL8xTMTF2enz0/kz2XsQuPm+s++ovUpp9l/yd/PtqvlH8SXffjufenzWeue/vyCD5Uv0vYBoi+Gz6L5u9ecO7CY72PfPxxqUpH+HwAAAKog9v0joSb6fwAAACiN2PevCzXR/wMAAEBpxL5/NNSkIv2//L/8/+Ly//n98v/Vyv+feyjPla71/H/Mz8v/V8Mq5/9vePvy//L/5cv/Lz4/vzLjH1i28cv/y/8zX7/l/2Pfvz7LKtn/AwAAQBXEvn9DqIn+HwAAAEoj9v03hZro/wEAAKA0Yt//qlCTivT/8v+Lyv/vLgpclT//7/r/8v/Z2sz/xxdH/r8ylpy///gDLd/K/wfy//L/pc3/L9/45f/l/2k3vOA9q5X/j33/zaEmFen/AQAAoApi3//qUBP9PwAAAJRG7PtvCTXR/wMAAEBpxL5/Y6hJRfp/+X/X/5f/l/8vdf7/Rq//3zQY+f+1wfX/u1ty/n+d/P/i8v+j8v9rMf8/3Nvxr3b+P8u65f+L15b/Zzn02/X/Y9//mlCTivT/AAAAUAWx739tqIn+HwAAAEoj9v23hpro/wEAAKA0Yt9/W6hJRfp/+X/5f/l/+X/5/87bL77+f/6V/H9/kf/vzvX/C6zQ9f9rl+X/l8Nqj3+18/8re/3/4fe0ry//Tyf9lv+Pff/rQk0q0v8DAABAFcS+//ZQE/0/AAAAlEbs+18faqL/BwAAgNKIff+mUJOK9P/y//L/8v/y//L/nbdfnP/Pyf/3F/n/7uT/C6xQ/t/1/5fHao+/Uvn/Dm9+5f/ppN/y/7HvvyPUpCL9PwAAAFRB7PvvDDXR/wMAAEBpxL7//4Wa6P8BAACgNGLfvznUpCL9v/y//L/8f7Xy/3ePyP/L/5eb/H938v8F5P/l/yua/z+z5Ov/z7eU/P+6ogejNPot/x/7/jeEmlSk/wcAAIAqiH3/G0NN9P8AAABQGrHvf1Ooif4fAAAASiP2/WOhJhXp/+X/y5X//+O/fOpNmfy//H/B9kua/4/TQP6/4uT/u5P/LyD/L/+/XPn/rL/z/9kK5/+pjn7L/8e+f0uoSUX6fwAAAKiC2PdvDTXR/wMAAEBpxL7/rlAT/T8AAACURuz7t4WaVKT/l/8vV/4/kv+X/++2/ZLm/xP5/2qT/++g6SCV/y8g/y//X9Hr/2cp/x/f/cr/0xv9lv+Pff+bQ00q0v8DAABAFcS+f3uoif4fAAAASiP2/W8JNdH/AwAAQGnEvn9HqElF+n/5f/l/+X/5f/n/ztuX/1+b5P+7W2r+f0T+X/5f/r9i+X/X/6e3+i3/H/v+t4aaVKT/BwAAgCqIff/OUBP9PwAAAJRG/P+b+f971f8DAABAGcW+fzzUpCL9v/y//H+V8v81+X/5f/n/0pP/7871/wsU5v9H5P+7kP+X/5f/p12/5f9j3/+2UJOK9P8AAABQBbHvvyfURP8PAAAApRH7/olQE/0/AAAAlEbs+ydDTSrS/8v/y/9XKf/v+v/y//L/5Sf/3538fwHX/5f/L1v+P8vk/1lV/Zb/j33/rlCTivT/AAAAUAWx798daqL/BwAAgNKIff+eUBP9PwAAAJRG7Pv3hppUpP+X/y9r/n8uk/+X/19o+/L/8v9lJv/fnfx/Afl/+f+y5f9d/59V1m/5/9j33xtqUpH+HwAAAKog9v37Qk30/wAAAFAase/fH2oS+v9O/68bAAAAWFti338g1KQi//4v/1+S/P+v/23Ltl3/X/6/2/Z7k/9fL/8fqvx/fylp/r/9sLhu8v8F5P/l/+X/5f/pqX7L/8e+/2CoSUX6fwAAAKiC2Pe/PdRE/w8AAAClEfv+/x9qov8HAACA0oh9/0+FmlSk/5f/L0n+v438v/x/t+27/r/8f5mVNP/fM6XK/w/I/8v/dx1/PL3L/8v/s4qWP/8fv1pc/j/2/YdCTSrS/wMAAEAVxL7/p0NN9P8AAABQGrHvf0eoif4fAAAASiP2/YdDTSrS/8v/y//L/8v/L0/+/x1Zu37M/9cnj/x/ucj/d1eq/L/r/8v/99n45f/l/5kv5v//te321br+f+z73xlqUpH+HwAAAKog9v33hZro/wEAAKA0Yt//rlAT/T8AAACURuz73x1qUpH+X/5f/l/+X/7f9f87b1/+f22S/+9O/r+A/L/8v/y//D89FfP/7VYr/x/7/veEmlSk/wcAAIAqiH3/e0NN9P8AAABQGrHvf1+oif4fAAAASiP2/e8PNalI/y//L/8v/y//v2z5/4FM/r+J/P/KkP/vTv6/gPy//L/8v/w/PdWU/1/XfPtq5f9j3/8zoSYV6f8BAACgCmLff3+oif4fAAAASiP2/R8INdH/AwAAQGnEvv+DoSYV6f/l/+X/5f/l/13/v/P25f/XJvn/7uT/C8j/y//L/8v/01NN+f8Wq5X/j33/h0JNKtL/AwAAQBXEvv9nQ030/wAAAFAase//cKiJ/h8AAABKI/b9PxdqUpH+X/5f/r+/8v9zl5rXk/+X/896lf+vryT/Xwny/93J/xfokP9fJ/8v/y//L//Pdeu3/H/s+z8SalKR/h8AAACqIPb9Hw010f8DAABAacS+/2OhJvp/AAAAKI3Y9z8QalKR/l/+v5L5//SU+y//7/r/8v+u/y//f2Pk/7uT/y/g+v/y//L/8v/0VL/l/2Pf/2CoSUX6fwAAAKiC2Pd/PNRE/w8AAAClEfv+nw810f8DAABAacS+/xOhJhXp/+X/K5n/7+Pr/5ct/z/UMj+qlP8fbXo907yU/5f/XwHy/93J/xeQ/5f/7+f8f5jN6xdYX/6fftRv+f/Y938y1KQi/T8AAABUQez7fyHURP8PAAAApRH7/l8MNdH/AwAAQGnEvv+XQk0q0v/L/8v/y/+7/r/r/3fevvz/2iT/3538fwH5f/n/fs7/F5D/px/1W/4/9v2/HGqyYOP30n8u4mkCAAAAfST2/Z8KNanIv/8DAABAFcS+/0ioif4fAAAASiP2/UdDTSrS/8v/t+f/4xVV5f/l/+X/5f/l/9ei3uX/X39zlsn/y//L/8v/r2T+f0D+n9Lpt/x/7PuPhZpUpP8HAACAKoh9/6+Emuj/AQAAoDRi33881ET/DwAAAKUR+/6pUJMy9v/todrVzf8P92f+3/X/rzf//xP5f/n/QP6/M/n/leH6/93J/xeQ/5f/d/1/+X96qt/y/7Hvnw41KWP/DwAAANWSfh0c+/4ToSb6fwAAACiN2PefDDXR/wMAAEBpxL7/06EmFen/Xf9/Tef/hxYaj+v/93v+f6hlefn/nPy//H8vyP93J/9fQP5f/l/+X/6fnuq3/H/s+2dCTSrS/wMAAEAVxL7/M6Em+n8AAAAojdj3fzbURP8PAAAApRH7/lOhJhXp/+X/13T+v6+u/5+t0fx/Lcsuu/6//H+n7cv/r03y/93J/xeQ/5f/l///P/bu48mus8zj+JUsK9RM1cyfMOtZsYSV/SewZUEVVaxNNDnYJpkMBkyOJkeTczA555xNzmAw0VCIUut5HnW4fW5Lffrec97389k8Y480fYXbnvqh+vrV/zOqqfX/ufuvils62f8AAADQg9z994pb7H8AAABoRu7+e8ct9j8AAAA0I3f/feKWTva//l//33v/v9jI+/87f7z+/zz9v/5/DHv6+xPLf9x+Ufi+/f+d7nz1PfT/+n/9/yD9v/5f/89uU+v/c/ffN27pZP8DAABAD3L33y9usf8BAACgGbn77x+32P8AAADQjNz9V8ctnex//b/+X/+v/9/R/9+i/9f/z5v3/4fp/1fQ/+v/9f/6f0Y1tf4/d/8D4pZO9j8AAAD0IHf/A+MW+x8AAACakbv/QXGL/Q8AAADNyN3/4Lilk/2v/9f/6//n0v+f9P7/rl+P/l//v4z+f5j+fwX9v/5f/6//Z1RT6/9z9z8kbulk/wMAAEAPcvc/NG6x/wEAAKAZufsfFrfY/wAAANCM3P0Pj1s62f/6f/2//n8u/f+a3v/X/+v/Z+6mxYV/Jqy7/z85wr9/QP8/7f5/sdD/DzlwP7/8lzefz78P/b/+n72m1v/n7n9E3HLlYnHyUn+RAAAAwKTk7n9k3NLJ7/8DAABAD3L3XxO32P8AAADQjNz918Ytnex//b/+X/9/oP7/pP5/of/X/8+C9/+HHb7/////veqe/fb/3v8f5v3/sfv/c98Z+n/mbWr9f+7+6+KWTvY/AAAA9CB3/6PiFvsfAAAAmpG7/9Fxi/0PAAAAzcjd/5i4pZP9r/9vrf+/bMfP29b/b9Uu+n/v/+v/9f+t0/8P8/7/Clv/mDtTf6j/1/97/1//z+FMrf/P3f/YuKWT/Q8AAAA9yN3/uLjF/gcAAIBm5O6/Pm6x/wEAAKAZufsfH7d0sv/1/631/zt/nvf/9f/Lvr7+X//fMv3/MP3/Cq28/3+J3zWb7ucPa9OfX/+v/2evqfX/ufufELd0sv8BAACgB7n7nxi32P8AAADQjNz9T4pb7H8AAABoRu7+J8ctnex//b/+fx79f34F/b/+/+j7/6T/nyf9/zD9/wqt9P+XaNP9/Nw/v/5f/89eU+v/c/c/JW7pZP8DAABAD3L3PzVusf8BAACgGbn7nxa32P8AAADQjNz9T49bOtn/+n/9/zz6f+//6/+9/6//Pxj9/zD9/wr6f/2//l//z6im1v/n7r8hbulk/wMAAEAPcvc/I26x/wEAAKAZufufGbfY/wAAANCM3P3Pils62f/6f/2//l//r/9f/vX1//Ok/x+m/19B/6//1//r/xnVhPr/bT/r9OLGuKWT/Q8AAAA9yN3/7LjF/gcAAIBm5O5/Ttxi/wMAAEAzcvc/N27pZP/r/yfT/2/lfG31/2cWi4X+f9Fp/39m21/P+r7U/+v/10D/P0z/v4L+X/+v/9f/M6r19v/n/pk//O8DyN3/vLilk/0PAAAAPcjd//y4xf4HAACAZuTuf0HcYv8DAABAM3L3vzBu6WT/6/8n0/9vaav/9/7/7u+Pnvp/7//vpf9fj3n0/yf3/fr6f/2//n++n1//r/9nr/X2/6v/OHf/i+Kmk5df8i8RAAAAmJjc/S+OWzr5/X8AAADoQe7+l8Qt9j8AAABM2X/9977/qxv2/Jnc/S+NWzrZ//r/cfv/7UWn/l//v/v7Q/+v/9f/H7159P/70//r//X/8/38+n/9P3tNrf/P3f+yuKWT/Q8AAAA9yN1/U9xi/wMAAEAzcve/PG6x/wEAAGCKjl/KT8rd/4q4pZP9r//3/r/+X/+v/1/+9fX/86T/H6b/X0H/r//fbP9/6sL/qP+nDRfR/589e/aaI+//c/e/Mm7pZP8DAABAD3L3vypusf8BAACgGbn7Xx232P8AAADQjNz9r4lbOtn/+v9O+//8Vr/I/v/0Zvv/axcL/b/+X/+v/x+m/x+m/19B/6//9/6//p9RTe39/9z9r41bOtn/AAAA0IPc/a+LW+x/AAAAaEbu/tfHLfY/AAAANCN3/xvilk72v/6/0/7f+//6f/3/uvv/Oxb6/7WYRf9/Zv+vP/X+/zr9v/5/QHf9/13vsuMP9f/6f/a4+9T6/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/pvjFvsfAAAAmpG7/81x04lO9r/+X/+v/9f/6/+Xf/01v/9/crFY6P9HMIv+f8A0+/9/16cY5/3/3X+XX6D/1//P+fNvoP/f8W8T0f8zRVPr/3P3vyVu6WT/AwAAQA9y9781brH/AQAAoBm5+98Wt9j/AAAA0Izc/W+PWzrZ//p//b/+X//ffP9/3Sz6f+//j0T/P+yw7/+P0//vT/+v/5/z5/f+v/6fg9tU/5+7/x1xSyf7HwAAAHqQu/+dcYv9DwAAAM3I3f+uuMX+BwAAgGbk7n933NLJ/tf/6/8vpv/Pz6n/b6v/PzW5/v/0jv97nbz/r/8fif5/mP5/Bf2//l//f4P+nzFN7f3/3P3viVs62f8AAADQg9z9741b/9Wt/Q8AAADNyN3/vrjF/gcAAIBm5O5/f9zSyf7X/+v/x3j//392fX79//Lvj6n2/82//6//74r+f5j+fwX9v/5f/+/9f0Y1tf4/d/8H4pZO9j8AAAD0IHf/B+MW+x8AAACakbv/Q3GL/Q8AAADNyN1/S9zSyf7X/+v/x+j/vf9/3vr6//yK+v+x+v/j+v9m6P+Hraf/P6P/1/9XP38s/i7Q/+v/V/182jS1/j93/4fjlk72PwAAAPQgd/9H4hb7HwAAAJqRu/+jcYv9DwAAALN0Ysmfy93/sbilk/2v/9f/T7r/zz+p/5/A+//Hbmu5/1/29fX/87SR/j+/KfT/3v8P/fT//7fjj+b2/v/u//+l/9f/M76p9f+5+z8et3Sy/wEAAKAHufs/EbfY/wAAANCM3P2fjFvsfwAAAGhG7v5PxS2d7H/9v/5/0v2/9/8n1P8vmn7/f9nX1//Pk/f/h+n/V9D/b/T9/Ll/fv2//p+9ptb/5+7/dNzSyf4HAACAHuTu/0zcYv8DAADAxF1/4B+Zu/+zcYv9DwAAAM3Y2v0Zl3W4//X/+n/9v/5f/7/86+v/50n/P0z/v4L+X/+v/9f/M6qp9f+f2/pZpxefj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0I3f/l+KWTva//l//P4/+/+zZs9fo//X/O389F/r/W/X/FP3/MP3/Cvp//b/+f5T+/zL9P2Fq/X/u/i/HLZ3sfwAAAOhB7v6vxC32PwAAADQjd/9X4xb7HwAAAJqRu/9rcUsn+1//P4H+/7T+3/v/+v+F9//1/yPR/w/T/6/QYv9/+uC//E3384e16c+v//f+P3tNrf/P3f/1uKWT/Q8AAAA9yN3/jbjF/gcAAIBm5O7/Ztxi/wMAAEAzcvd/K27pZP/r/9fX/5/7z66X9//PLJZ/fv3/1Pr/E/p//X9z9P/D9P8rXHr/v6Oyn1T/fxE23c/P/fPr//X/7DW1/j93/7fjlp3D7/KL+1UCAAAAU5K7/ztxSye//w8AAAA9yN3/3bjF/gcAAIBm5O7/XtzSyf7X/0/g/f8G+3/v/y///phe/+/9/21f/7j+vw36/2H6/xVafP//Imy6n5/759f/b+//87tZ/9+7qfX/ufu/H7d0sv8BAACgB7n7fxC32P8AAADQjNz9P4xb7H8AAABoRu7+W+OWbft/WdvdCv2//l//r/8fof/f0TjPtP/3/n8j9P/DDtr/n1ocrv9P+n/9v/6/1/7f+/+cN7X+P3f/j+IWv/8PAAAAs3P5Pn8+d/+P4xb7HwAAAJqRu/8ncYv9DwAAAM3I3f/TuOX245v6SGul/9f/6//1/97/X/71j6r/Xxxb6P+PkP5/mPf/V9D/j9HPX6H/b6P/Xyz0/xze1Pr/3P0/i1v8/j8AAAA0I3f/z+MW+x8AAACakbv/F3GL/Q8AAADNyN3/y7ilk/2v/9f/H7L/30oz9f/n6f/P0/8v5/3/9dD/D9P/r7CG/v9Y+/2/9/8b6f+9/88Yptb/5+7/VdzSyf4HAACAHuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3XLlY3LypD7VGG+v/4z9q/f/s+3/v/x95/3/uV6f/76r/v1H/fxj6/2H6/xW8/39k/Xz+tTxK+n/9P9Mztf4/d//v4ha//w8AAADNyN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvffFrd0sv+9/6//1/9Pvf/3/n93/b/3/w9F/z9M/79c/YXS/3v/X/+v/2dUU+v/c/f/MW7pZP8DAABAD3L3/ylusf8BAACgGbn7b49b7H8AAABoRu7+P8ctnex//b/+X/+v/9f/L//6+v950v8P22T/f7cDvP/u/f+N9//5EfT/+n/9P6OYWv+fu/8vcUsn+x8AAAB6kLv/r3GL/Q8AAADNyN3/t7jF/gcAAIBm5O7/e9zSyf5f0f+fqh+o/x+k/9/5+fX/y78/9P/6f/3/0dP/Dxvu/7f93dzZ+/9F/+/9f/2//p9RTa3/z93/j7ilk/0PAAAAPcjdf0fcYv8DAABAM3L3/zNusf8BAACgGbn7/xW3dLL/vf8/p/7/Cv2//l//r//X/6+g/x+2yff/D0L/r/+f8+fX/+v/2Wtq/X/u/v8EAAD///zePkg=") symlink(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000200)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8cffffffffffffff) 5.92728788s ago: executing program 2 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0xf, 0x0, @val=@iter={0x0}}, 0x20) r2 = syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff}) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) flock(r2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x7, @raw_data="869ee3fdae5a6ed03d548580ba7b010aec5545e586175a5de5b0ab09d3a64f569c31f6c12f488a97393e2adef597e8bb5904ea0083a825711c6b0ec0334628074a3efb5284a26d06fc295eb4a4cfdf5fb9ab716f704ded41c052fa5605359cc1899cfb80231d81de54d761f1bd62ac0cb51c268f1178be06cc6e6e1e0b58827a340bbc4c1f0344d2453c8d89e73666a949eb3048396f53d46364a0814fd61a893240c8fc4ec19da3e158e157ee8fa935d59449f5099b90b56678320f23cff1bec87b866219ebf743"}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) preadv(r3, &(0x7f00000056c0)=[{0x0}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x2, 0x8, 0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) close(0x3) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x9}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe157505d}, 0x94) 4.989449216s ago: executing program 1 (id=671): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/119) sendmmsg$inet6(r0, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00\x00\x00'], 0x28}}], 0x1, 0x81) 4.777926261s ago: executing program 5 (id=672): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe800000000000000000040000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80e21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.546673782s ago: executing program 4 (id=673): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24020811}, 0x40000) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}, @GTPA_FAMILY={0x5, 0xd, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x8010) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000005c0), 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000600)={0xa, 0x0, 0xd5b9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x3}, 0x20) (async) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, r0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}}, 0x20000002) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x400040) write$sndseq(r7, &(0x7f0000000880)=[{0x2, 0x6, 0xf2, 0x1, @tick, {0x9}, {0x0, 0xe}, @ext={0x4a, &(0x7f0000000800)="9c33ac0a058573964ab4f3b39be6bce085660402aa679019b44e77de0037bbb1c9d8f4bbad1861bf0b2262d634473e91eefb3bd9458732c790d73b492a2b3559e3ca149dae9e852752ac"}}, {0x4, 0x20, 0x40, 0x36, @time={0x7, 0x3}, {0x5, 0x2}, {0x7, 0x8}, @result={0x5, 0x3ff}}], 0x38) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a00)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r10, 0xc00464af, &(0x7f0000000b00)=r11) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf327}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xecad}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8080) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000c40)={0x6, r6, 'id0\x00'}) ioctl$KVM_SET_SIGNAL_MASK(r12, 0x4004ae8b, &(0x7f0000000cc0)={0x7e, "2d1b9773fccf4c9aa8bf9a6d1f074fc0c75b97bd9429ab98c6ee58470d2431d2ea3d216bccf34c5ab39ea3978e0d97fe5e0f2200759616e8ceac6affa715149f42a00a3737c44f595ba3f8524ae337c57d534947cd7376f1b80c45913841d7367846edec84c80330145c674afce4400b885f5d609aba52c1de9e5eacc4e7"}) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000000e00)={0x25c, r13, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "b85c0ca0168b898e9e6083513aaa140e33785d659af3c21f790cc17bc6761aab8de6200bda2a1a3e116827acffe1f6c6e310ad326fbb885026bc3d6d1b010523870778e0fc4192f0ff90fa8d547dee6b92de0dbe3284d305aec0468a1206658d23178bedb39c000ebd945891ed1f70b1988e47498f545943f213fb0c9ef6f537fc460c4273c45abffe16b6dbf8609ec94153ae0e1482f2d7b577feb29bf1e9cce0692cd92138beed4c6db73a8f65fef0dbbfda3a4f9f754ed27fcabf57cf9a7d5b13d2ab"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "106a243046f54bdaa323d91b50935bd22dd0f30d82253bfc91413c2b5ebcd2f208d12f"}]}, @ETHTOOL_A_WOL_MODES={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, ';'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef38}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ecc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.$/@\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&*.[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x24000014}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001100)={'wpan1\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000001140)) 3.154094868s ago: executing program 5 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x8}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', 0x0}) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="04190000eaffffff5d800400000000005c550c000000000000000000f0ffffff18210000baaff4b85c692648c297216de876bdc7fa237a3355c40b", @ANYRES32, @ANYBLOB="0000000001010000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0xff, 0x10, 0x3e3, 0x40}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x1, 0x5, 0x9, 0xc}, {0x2, 0x2, 0x7, 0xc}, {0x0, 0x3, 0xc, 0xb}, {0x1, 0x3, 0x0, 0x6}, {0x4, 0x3, 0xf, 0xc}], 0x10, 0x5}, 0x94) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000380)={0x1, 0x100, 0x4, {0x4, 0x7, 0x780000, 0xfcad}}) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x0, 0x7fff0003}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x2, 0x168, 0xc, "fe94f37074d00b1b32d8000000020000000100"}) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 3.077922836s ago: executing program 2 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newsa={0x140, 0x10, 0x1, 0x0, 0x24, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {}, {0x0, 0xb63, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'sha3-384\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 2.639464046s ago: executing program 0 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.508682893s ago: executing program 4 (id=677): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10000, 0x401, 0xf52, 0x1, 0x80000000, 0xc80}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2c45}]}, 0x54}}, 0x40000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000240)={[{@noblock_validity}, {@dioread_lock}, {@nombcache}, {@nojournal_checksum}, {@nouid32}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@data_ordered}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x45c, &(0x7f0000000480)="$eJzs20tvG1UbAOB3Jknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFNq1K3QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2BBRo09tgYxw6O7cRp/TzSxOfMjH3e1zMnPjPHDmBgjed/kog9EfFTRIxGxFDjDuOVh5VbV+f+uHV1Lokse/W3JH9a/H7r6lx116R43F1UJtKI9IMkDjVpd/HylfOzpdL8paI+tXThranFy1eeOndh9uz82fmLMydOHD82/ewzM0/3JM+9eawH3104fODk6zdenjt1441vP8/j3VNsr8+jYqzrNsdjvPaeNHq061ffWvYWj63yZWvK+/pwRIyU+/9oDJVrFaPx0vt9DQ7YUFmWZdtXra2NAJYz4A6WRL8jAPqj+kGfX/9Wl00cfvTdzecrF0B53ivFUtkyHGmxz0jd9W2vjUfEqeU/P86XaHofAgCgt77Mxz9PNhv/pXFP3X7/K+aGxiLi/xGxLyLuioj9EXF3RHnfeyPivnW2P95QXz3++WFnR4m1KR//PVfMbf17/Fcd/cXYUFHbW85/JDlzrjR/tHhPJmJke16fXqONr1788aNW2+rHf/mSt18dCxZx/DrccIPu9OzSbDc517v5Xvke4LXV+Se1mYAkIg5ExMEOXn9HRJx7/LPDrbb/d/5rGO4goAbZpxGPVY7/cjTkX5WsPT85tSNK80enqmfFat99f/2VVu13lX8P5Md/V9Pzv5b/WFI/X7u4/jau//xhy2uaTs//bclr5fK2Yt07s0tLl6YjtiXLq9fP/PPcar26f57/xJHm/X9fxF+fFM87FBH5SXx/RDwQEQ8WsT8UEQ9HxJE18v/mhUfe7Dz/jZXnf3pdx3/9haHzX3/Rqv32jv/xcmmiWNPO/792A+zmvQMAAIDbRVr+DnySTtbKaTo5WfkO//7YlZYWFpeeOLPw9sXTle/Kj8VIWr3TNVp3P3S6uDdcrc801I+V7xtnWZbtLNcn5xZKGzWnDrRnd4v+n/tlqN/RARtuXfNofuEFd5QezKMDtyn9HwaX/g+DS/+HwdWs/1+LWOlDKMAm8/kPg0v/h8Gl/8Pg0v9hIHXzu/61CvtObtQrb1IhiU1qa6jfmXZYiHRLhNFWYaQ422tr0i0SWLmwPaLtk+1abFZgff7HBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CN/BwAA//+WHOfg") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000900)=""/4105, 0x1009) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$MRT6(r4, 0x29, 0x1, 0x0, &(0x7f0000002040)) (async) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async) r6 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r5, r6, r6}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r8) sendmsg$NFC_CMD_DISABLE_SE(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) (async) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x44, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xc0080, 0x62) getdents64(r10, &(0x7f00000000c0)=""/85, 0x55) getdents64(r10, &(0x7f0000001940)=""/4096, 0x1000) 2.302768321s ago: executing program 2 (id=678): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[], 0x1, 0x374, &(0x7f0000000440)="$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") r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000030000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5"], 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={0x0, 0x0, 0x62}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./bus\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) 2.215383069s ago: executing program 1 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d836465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x210, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_ACT={0xf8, 0x6, [@m_skbedit={0xf4, 0xf, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd5, 0xfffffff7, 0x8, 0x3, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xffbc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2e7}]}, {0x5d, 0x6, "a21d420dc648cc7b58776b3ea0135c405b78dd626effc55401f46bc669fb66480e33deb05086000e76be0634c1c93e14ecb67d5c2a8d3ba4ddb690a112e73d9a09df79a37966345e6e45a781549f6248fa3963cd76d5c2e040"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x50, 0x1, [@m_simple={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x15, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x44, 0x1, [@m_ctinfo={0x40, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0x9, 0x6, "c04874b480"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.806868675s ago: executing program 0 (id=680): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) 1.752628567s ago: executing program 5 (id=681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x20000000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x20000000) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) 1.502932703s ago: executing program 4 (id=682): sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16, @ANYBLOB="14062dbd7000fddbdf254a00000008000100790000000c009900060000000000000004007580d80075800c00128006009800ff00000004000200040008000400090064030700b8000e897a0006002137e2ec223d09945a2ccf9fc9"], 0x118}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x800009, 0x1ff, 0x0, 0x0, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x2, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x9, 0x1, 0xfffffffc, 0xe, 0x7ff, 0x7, 0x2, 0xbde, 0x7, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) fchdir(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x21800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) 1.049487539s ago: executing program 1 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8891}, 0x24000000) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r11, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r12, 0x4, {0x2, 0xf0}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004084) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="340000001000010028bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="100a0c010009707600"/28], 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x20040040) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) 553.578053ms ago: executing program 0 (id=684): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe800000000000000000040000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80e21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.755ms ago: executing program 5 (id=685): mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f000000ac40)=ANY=[@ANYBLOB="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"/2574, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xfffffffd}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0xf) write(r3, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0x12) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="636f6465706167653d69736f38383539c44dbfce66696c655f756d61736b3d303030303030303030301f20303030303030303030303030222c696f636861727365743d6370ffd78d31e655911b986a67b91d14d639b6177a03fac2ec519c27df6214f2c7065a949cab81361b4a92ae98a1cc4919"], 0x1, 0x309, &(0x7f0000000b40)="$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") socket$kcm(0x21, 0x2, 0x2) r4 = open(0x0, 0x0, 0x0) getdents(r4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x200, 0xfffffff7) close(0x3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbcfbb0800450000380000000000019078ac1e0001ac1414aa03009078030000004500000000d58b4c8c4f96a8312d76b22b3fefef00ac1e0001ac141435e1cf000000009c97"], 0x0) syz_pidfd_open(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x2}) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x2000001, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0xfffffffffffffdc6) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x10000, &(0x7f0000000400)={[], [{@pcr={'pcr', 0x3d, 0x38}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffd}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x559d, &(0x7f0000005680)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000002300), 0x600) socket$kcm(0x2, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 2 (id=686): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setpgid(0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) kernel console output (not intermixed with test programs): [ 394.323411][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 394.374957][ T5870] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 394.382806][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 394.394402][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 394.404653][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 394.702000][ T7290] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.743651][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 394.753811][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.762007][ T5870] usb 3-1: Product: syz [ 394.766951][ T5870] usb 3-1: Manufacturer: syz [ 394.771744][ T5870] usb 3-1: SerialNumber: syz [ 395.041094][ T5870] usb 3-1: config 0 descriptor?? [ 395.057466][ T7794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.065438][ T7794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.190740][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 395.197684][ T5870] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 395.198160][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 395.438620][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.448572][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.483996][ T5870] usb 3-1: USB disconnect, device number 12 [ 395.492730][ T5870] mcba_usb 3-1:0.0 can0: device disconnected [ 396.514394][ T7821] loop0: detected capacity change from 0 to 4096 [ 396.625277][ T7821] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 397.260956][ T7833] loop4: detected capacity change from 0 to 32768 [ 397.438176][ T7833] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 397.568691][ T7835] nbd: must specify a device to reconfigure [ 397.936184][ T7821] ntfs3(loop0): Failed to read $UpCase (-4). [ 398.520709][ T7833] XFS (loop4): Ending clean mount [ 398.681021][ T7833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 398.690265][ T7833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 398.888735][ T5820] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.199566][ T5817] Bluetooth: hci2: Malformed Event: 0x02 [ 401.012336][ T7864] pim6reg: entered allmulticast mode [ 401.094865][ T7865] pim6reg: left allmulticast mode [ 402.265007][ T7878] loop5: detected capacity change from 0 to 256 [ 402.392288][ T7878] vfat: Bad value for 'shortname' [ 402.886789][ T7879] loop1: detected capacity change from 0 to 32768 [ 402.923263][ T7879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.439 (7879) [ 402.947276][ T7879] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.958753][ T7879] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 403.416965][ T7879] BTRFS info (device loop1): setting nodatasum [ 403.424196][ T7879] BTRFS info (device loop1): enabling free space tree [ 403.431158][ T7879] BTRFS info (device loop1): force zlib compression, level 3 [ 403.442309][ T7879] BTRFS info (device loop1): max_inline set to 0 [ 403.701410][ T7902] nbd: must specify a device to reconfigure [ 403.723029][ T1549] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 403.994605][ T1549] usb 2-1: Using ep0 maxpacket: 16 [ 404.102647][ T1549] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 404.110121][ T1549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 404.121670][ T1549] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 404.131941][ T1549] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 404.319690][ T7900] loop4: detected capacity change from 0 to 32768 [ 404.440782][ T7900] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 404.696802][ T1549] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 404.706990][ T1549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.715466][ T1549] usb 2-1: Product: syz [ 404.719798][ T1549] usb 2-1: Manufacturer: syz [ 404.724716][ T1549] usb 2-1: SerialNumber: syz [ 404.800310][ T7900] XFS (loop4): Ending clean mount [ 404.860769][ T7900] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.870114][ T7900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 404.906470][ T1549] usb 2-1: config 0 descriptor?? [ 404.914411][ T7879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.922081][ T7879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.009253][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 405.016257][ T1549] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 405.016730][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 405.431473][ T5820] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 405.646239][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.656208][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.480787][ T5907] usb 2-1: USB disconnect, device number 10 [ 406.489492][ T5907] mcba_usb 2-1:0.0 can0: device disconnected [ 406.554846][ T7925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 408.210264][ T5823] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.692802][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.892958][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.899860][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.917925][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 408.940055][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.009049][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 409.015548][ T7954] loop2: detected capacity change from 0 to 4096 [ 409.021261][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 409.039267][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.049317][ T5870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 409.059299][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 409.069412][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 36985, setting to 1024 [ 409.085910][ T5870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 409.157537][ T7954] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 409.416840][ T5870] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 409.426473][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.436090][ T5870] usb 6-1: Product: syz [ 409.440432][ T5870] usb 6-1: Manufacturer: syz [ 409.445477][ T5870] usb 6-1: SerialNumber: syz [ 409.605213][ T5870] usb 6-1: config 0 descriptor?? [ 409.615268][ T7955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 409.644399][ T7955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 409.683721][ T5870] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.247514][ T7960] loop4: detected capacity change from 0 to 32768 [ 410.410791][ T7960] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.579035][ T7960] XFS (loop4): Ending clean mount [ 410.678733][ T7960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 410.688543][ T7960] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 410.902918][ T5820] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 411.404084][ T5907] usb 6-1: USB disconnect, device number 3 [ 411.677465][ T7984] FAULT_INJECTION: forcing a failure. [ 411.677465][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 411.691233][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT(none) [ 411.691387][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.691467][ T7984] Call Trace: [ 411.691516][ T7984] [ 411.691562][ T7984] __dump_stack+0x26/0x30 [ 411.691724][ T7984] dump_stack_lvl+0x1df/0x270 [ 411.691888][ T7984] dump_stack+0x1e/0x25 [ 411.692034][ T7984] should_fail_ex+0x7dc/0x8a0 [ 411.692188][ T7984] should_failslab+0x15b/0x200 [ 411.692350][ T7984] kmem_cache_alloc_noprof+0xf0/0xec0 [ 411.692519][ T7984] ? skb_clone+0x3ca/0x580 [ 411.692681][ T7984] ? stack_depot_save_flags+0x35/0x7b0 [ 411.692814][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.692975][ T7984] skb_clone+0x3ca/0x580 [ 411.693140][ T7984] nfnetlink_rcv+0x79c/0x5420 [ 411.693290][ T7984] ? kmsan_get_metadata+0x31/0x160 [ 411.693444][ T7984] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 411.693592][ T7984] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 411.693746][ T7984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.693907][ T7984] ? __dev_queue_xmit+0x30c/0x5e60 [ 411.694079][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.694227][ T7984] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 411.694369][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.694524][ T7984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.694686][ T7984] ? __netlink_deliver_tap+0xda9/0xdd0 [ 411.694866][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.695014][ T7984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.695169][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.695317][ T7984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.695472][ T7984] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.695607][ T7984] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.695739][ T7984] netlink_unicast+0xf01/0x12b0 [ 411.695922][ T7984] netlink_sendmsg+0x10b3/0x1250 [ 411.696112][ T7984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.696276][ T7984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.696457][ T7984] __sock_sendmsg+0x333/0x3d0 [ 411.696598][ T7984] ____sys_sendmsg+0x7e0/0xd80 [ 411.696801][ T7984] ___sys_sendmsg+0x271/0x3b0 [ 411.696997][ T7984] ? __rcu_read_unlock+0x6d/0xd0 [ 411.697129][ T7984] ? __fget_files+0x3b4/0x4a0 [ 411.697293][ T7984] ? __fget_files+0x3b9/0x4a0 [ 411.697467][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.697616][ T7984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.697782][ T7984] __x64_sys_sendmsg+0x211/0x3e0 [ 411.697966][ T7984] ? kmsan_get_metadata+0xfb/0x160 [ 411.698133][ T7984] x64_sys_call+0x1dfd/0x3e20 [ 411.698304][ T7984] do_syscall_64+0xd9/0x210 [ 411.698438][ T7984] ? irqentry_exit+0x16/0x60 [ 411.698598][ T7984] ? clear_bhb_loop+0x40/0x90 [ 411.698741][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.698879][ T7984] RIP: 0033:0x7f60aa98ec29 [ 411.698979][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.699091][ T7984] RSP: 002b:00007f60ab755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.699216][ T7984] RAX: ffffffffffffffda RBX: 00007f60aabd5fa0 RCX: 00007f60aa98ec29 [ 411.699313][ T7984] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 411.699397][ T7984] RBP: 00007f60ab755090 R08: 0000000000000000 R09: 0000000000000000 [ 411.699497][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.699577][ T7984] R13: 00007f60aabd6038 R14: 00007f60aabd5fa0 R15: 00007ffe595a1ca8 [ 411.699703][ T7984] [ 412.438664][ T7982] loop4: detected capacity change from 0 to 32768 [ 412.538368][ T7982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.463 (7982) [ 412.566160][ T7982] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 412.576827][ T7982] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 413.051945][ T7982] BTRFS info (device loop4): setting nodatasum [ 413.059176][ T7982] BTRFS info (device loop4): enabling free space tree [ 413.069460][ T7982] BTRFS info (device loop4): force zlib compression, level 3 [ 413.077210][ T7982] BTRFS info (device loop4): max_inline set to 0 [ 413.133071][ T8001] nbd: must specify a device to reconfigure [ 413.835953][ T8001] loop5: detected capacity change from 0 to 32768 [ 413.850601][ T8001] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.465 (8001) [ 413.894884][ T8007] loop0: detected capacity change from 0 to 164 [ 413.933770][ T8001] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 413.944521][ T8001] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 413.968689][ T8007] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 413.977966][ T5907] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 414.253768][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 414.300679][ T8001] BTRFS info (device loop5): enabling ssd optimizations [ 414.310011][ T8001] BTRFS info (device loop5): enabling free space tree [ 414.311339][ T5907] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 414.325156][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 414.336574][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 414.346967][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 414.556049][ T30] audit: type=1800 audit(1758427872.792:236): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.465" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 414.979266][ T5817] Bluetooth: hci2: hardware error 0x00 [ 415.337287][ T5907] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 415.346789][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.392141][ T5820] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.184521][ T5907] usb 5-1: config 0 descriptor?? [ 416.193167][ T5907] usb 5-1: can't set config #0, error -71 [ 416.223797][ T5907] usb 5-1: USB disconnect, device number 15 [ 416.288384][ T8031] loop0: detected capacity change from 0 to 2048 [ 416.463889][ T8031] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 416.481684][ T8031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.033696][ T5817] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 417.107220][ T7290] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 418.092054][ T8047] FAULT_INJECTION: forcing a failure. [ 418.092054][ T8047] name failslab, interval 1, probability 0, space 0, times 0 [ 418.105378][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(none) [ 418.105515][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.105592][ T8047] Call Trace: [ 418.105642][ T8047] [ 418.105690][ T8047] __dump_stack+0x26/0x30 [ 418.105859][ T8047] dump_stack_lvl+0x1df/0x270 [ 418.106028][ T8047] dump_stack+0x1e/0x25 [ 418.106172][ T8047] should_fail_ex+0x7dc/0x8a0 [ 418.106330][ T8047] should_failslab+0x15b/0x200 [ 418.106491][ T8047] kmem_cache_alloc_lru_noprof+0xf7/0xed0 [ 418.106662][ T8047] ? shmem_alloc_inode+0x5a/0xd0 [ 418.106785][ T8047] ? kmsan_slab_alloc+0xde/0x160 [ 418.106923][ T8047] ? __se_sys_memfd_create+0x51d/0x11f0 [ 418.107061][ T8047] ? __x64_sys_memfd_create+0x78/0xb0 [ 418.107196][ T8047] ? x64_sys_call+0x3500/0x3e20 [ 418.107359][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 418.107523][ T8047] shmem_alloc_inode+0x5a/0xd0 [ 418.107645][ T8047] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 418.107770][ T8047] alloc_inode+0x87/0x4a0 [ 418.107922][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 418.108070][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 418.108218][ T8047] new_inode+0x39/0x460 [ 418.108379][ T8047] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 418.108528][ T8047] shmem_get_inode+0x663/0x1c20 [ 418.108680][ T8047] __shmem_file_setup+0x210/0x590 [ 418.108869][ T8047] shmem_file_setup+0x61/0x80 [ 418.109040][ T8047] __se_sys_memfd_create+0x844/0x11f0 [ 418.109204][ T8047] __x64_sys_memfd_create+0x78/0xb0 [ 418.109353][ T8047] x64_sys_call+0x3500/0x3e20 [ 418.109523][ T8047] do_syscall_64+0xd9/0x210 [ 418.109646][ T8047] ? irqentry_exit+0x16/0x60 [ 418.109813][ T8047] ? clear_bhb_loop+0x40/0x90 [ 418.109953][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.110090][ T8047] RIP: 0033:0x7f60aa98ec29 [ 418.110188][ T8047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.110302][ T8047] RSP: 002b:00007f60ab754e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 418.110427][ T8047] RAX: ffffffffffffffda RBX: 0000000000009ddb RCX: 00007f60aa98ec29 [ 418.110519][ T8047] RDX: 00007f60ab754ef0 RSI: 0000000000000000 RDI: 00007f60aaa12810 [ 418.110606][ T8047] RBP: 0000200000009e80 R08: 00007f60ab754bb7 R09: 00007f60ab754e40 [ 418.110699][ T8047] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000009e40 [ 418.110783][ T8047] R13: 00007f60ab754ef0 R14: 00007f60ab754eb0 R15: 00002000000002c0 [ 418.110913][ T8047] [ 418.649017][ T8045] loop2: detected capacity change from 0 to 32768 [ 418.944796][ T8045] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.170418][ T8060] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:8 [ 419.222679][ T8045] XFS (loop2): Ending clean mount [ 419.263818][ T8045] overlayfs: missing 'lowerdir' [ 419.283545][ T8060] netlink: 'syz.0.477': attribute type 11 has an invalid length. [ 419.457606][ T5811] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.505850][ T8060] overlayfs: workdir and upperdir must be separate subtrees [ 420.090313][ T8063] bridge0: entered promiscuous mode [ 420.096351][ T8063] macvtap1: entered allmulticast mode [ 420.101893][ T8063] bridge0: entered allmulticast mode [ 420.115743][ T8063] bridge0: port 3(macvtap1) entered blocking state [ 420.122935][ T8063] bridge0: port 3(macvtap1) entered disabled state [ 420.465067][ T8066] loop4: detected capacity change from 0 to 32768 [ 420.478305][ T8066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.479 (8066) [ 420.503629][ T8063] bridge0: left allmulticast mode [ 420.509016][ T8063] bridge0: left promiscuous mode [ 420.532104][ T8066] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 420.549880][ T8066] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 420.621826][ T8068] loop5: detected capacity change from 0 to 4096 [ 420.843091][ T8068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.905088][ T8066] BTRFS info (device loop4): setting nodatasum [ 420.911548][ T8066] BTRFS info (device loop4): enabling free space tree [ 420.918644][ T8066] BTRFS info (device loop4): force zlib compression, level 3 [ 420.926522][ T8066] BTRFS info (device loop4): max_inline set to 0 [ 421.265762][ T5870] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 421.445675][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 421.485610][ T5870] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 421.493261][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 421.504842][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 421.515619][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 421.553376][ T7290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.582085][ T5870] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 421.591613][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.601971][ T5870] usb 5-1: Product: syz [ 421.606455][ T5870] usb 5-1: Manufacturer: syz [ 421.611237][ T5870] usb 5-1: SerialNumber: syz [ 421.656332][ T5870] usb 5-1: config 0 descriptor?? [ 421.663654][ T8066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.671332][ T8066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.731825][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 421.738630][ T5870] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 421.739089][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 422.217122][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.227289][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.399782][ T8098] loop1: detected capacity change from 0 to 256 [ 422.504204][ T8098] vfat: Bad value for 'shortname' [ 422.612888][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 422.663810][ T8101] nbd: must specify a device to reconfigure [ 423.421589][ T8101] loop2: detected capacity change from 0 to 32768 [ 423.436529][ T8101] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.480 (8101) [ 423.459426][ T8101] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 423.470917][ T8101] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 423.588116][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 423.617568][ T5870] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 423.625983][ T5870] usb 6-1: config 0 has no interface number 0 [ 423.632257][ T5870] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 423.643620][ T5870] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 423.876246][ T5870] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 423.886163][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.894536][ T5870] usb 6-1: Product: syz [ 423.898868][ T5870] usb 6-1: Manufacturer: syz [ 423.903743][ T5870] usb 6-1: SerialNumber: syz [ 423.915147][ T8104] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 424.117128][ T11] usb 5-1: USB disconnect, device number 16 [ 424.130563][ T11] mcba_usb 5-1:0.0 can0: device disconnected [ 424.207361][ T5870] usb 6-1: config 0 descriptor?? [ 424.295209][ T5870] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 424.448622][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.458531][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.480043][ T8101] BTRFS info (device loop2): enabling ssd optimizations [ 424.487553][ T8101] BTRFS info (device loop2): enabling free space tree [ 424.553750][ T30] audit: type=1800 audit(1758427882.892:237): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.480" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 424.785721][ T8093] loop5: detected capacity change from 0 to 256 [ 425.188962][ T5870] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 425.287274][ T5820] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.334194][ T5870] usb 6-1: USB disconnect, device number 4 [ 425.463495][ T5870] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 425.476929][ T5870] cypress_m8 6-1:0.35: device disconnected [ 425.613482][ T8112] loop0: detected capacity change from 0 to 4096 [ 425.687842][ T5817] Bluetooth: hci0: hardware error 0x00 [ 425.819559][ T8111] loop1: detected capacity change from 0 to 8192 [ 425.996226][ T8111] loop1: p1 p4 [ 425.999903][ T8111] loop1: partition table partially beyond EOD, truncated [ 426.008932][ T8111] loop1: p1 start 65535 is beyond EOD, truncated [ 426.015685][ T8111] loop1: p4 start 65535 is beyond EOD, truncated [ 426.364072][ T5870] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 426.587716][ T5870] usb 5-1: device descriptor read/64, error -71 [ 426.849238][ T5811] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 426.905893][ T5870] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 427.119299][ T5870] usb 5-1: device descriptor read/64, error -71 [ 427.263994][ T5870] usb usb5-port1: attempt power cycle [ 427.684754][ T8137] loop5: detected capacity change from 0 to 32768 [ 427.754244][ T5817] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.779342][ T8137] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 427.830269][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 427.928519][ T5870] usb 5-1: device descriptor read/8, error -71 [ 428.202947][ T5870] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 428.249116][ T8137] XFS (loop5): Ending clean mount [ 428.271927][ T5907] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 428.296252][ T5870] usb 5-1: device descriptor read/8, error -71 [ 428.366117][ T8137] overlayfs: missing 'lowerdir' [ 428.417545][ T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 428.446326][ T5870] usb usb5-port1: unable to enumerate USB device [ 428.536100][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 428.555623][ T7290] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 428.638240][ T5907] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 428.646848][ T5907] usb 2-1: config 0 has no interface number 0 [ 428.653349][ T5907] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 428.663696][ T5907] usb 2-1: config 0 interface 196 has no altsetting 0 [ 428.692839][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 428.766822][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 428.776335][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.787094][ T5907] usb 2-1: Product: syz [ 428.791436][ T5907] usb 2-1: Manufacturer: syz [ 428.793786][ T11] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 428.796345][ T5907] usb 2-1: SerialNumber: syz [ 428.806328][ T11] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 428.820820][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 428.882929][ T5907] usb 2-1: config 0 descriptor?? [ 428.890222][ T8150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 429.113400][ T11] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 429.123594][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.131788][ T11] usb 1-1: Product: syz [ 429.136437][ T11] usb 1-1: Manufacturer: syz [ 429.146281][ T11] usb 1-1: SerialNumber: syz [ 429.456054][ T11] usb 1-1: config 0 descriptor?? [ 429.673417][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.684568][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.908729][ T5907] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 429.919049][ T5907] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 430.045916][ T1549] usb 1-1: USB disconnect, device number 24 [ 430.427179][ T8165] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 431.737028][ T5907] usb 2-1: USB disconnect, device number 11 [ 431.960947][ T1549] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 432.081589][ T8176] loop0: detected capacity change from 0 to 32768 [ 432.093722][ T8176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.497 (8176) [ 432.124307][ T8176] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 432.135826][ T8176] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 432.144874][ T8176] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 432.224199][ T8180] nbd: must specify a device to reconfigure [ 432.299588][ T1549] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 432.310134][ T1549] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.763913][ T8176] BTRFS info (device loop0): rebuilding free space tree [ 432.797155][ T8176] BTRFS info (device loop0): disabling free space tree [ 432.804750][ T8176] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 432.814749][ T8176] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 432.884569][ T8176] BTRFS info (device loop0): setting nodatasum [ 432.891134][ T8176] BTRFS info (device loop0): setting nodatacow [ 432.897656][ T8176] BTRFS info (device loop0): enabling ssd optimizations [ 432.905029][ T8176] BTRFS info (device loop0): turning off barriers [ 432.911615][ T8176] BTRFS info (device loop0): enabling disk space caching [ 432.918926][ T8176] BTRFS info (device loop0): force clearing of disk cache [ 432.922339][ T8180] loop5: detected capacity change from 0 to 32768 [ 432.926296][ T8176] BTRFS info (device loop0): enabling auto defrag [ 432.948133][ T1549] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.957633][ T1549] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 432.967141][ T1549] usb 3-1: Product: syz [ 432.971487][ T1549] usb 3-1: Manufacturer: syz [ 432.976514][ T1549] usb 3-1: SerialNumber: syz [ 432.982634][ T8180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.499 (8180) [ 433.025137][ T8180] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 433.039280][ T8180] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 433.077011][ T1549] usb 3-1: config 0 descriptor?? [ 433.147516][ T30] audit: type=1800 audit(1758427891.512:238): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.497" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 433.166945][ T1549] usb 3-1: selecting invalid altsetting 0 [ 433.298494][ T8184] loop1: detected capacity change from 0 to 1024 [ 433.425290][ T8184] hfsplus: Unknown parameter 'credecompose' [ 433.499462][ T8180] BTRFS info (device loop5): enabling ssd optimizations [ 433.507010][ T8180] BTRFS info (device loop5): enabling free space tree [ 433.524184][ T5814] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 433.571760][ T30] audit: type=1800 audit(1758427891.892:239): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.499" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 433.665154][ T8220] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.500' sets config #1 [ 433.802191][ T1549] usb 3-1: USB disconnect, device number 13 [ 433.818689][ T11] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 434.099947][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.212993][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 434.258904][ T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.274176][ T11] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 434.286280][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.329714][ T8214] loop2: detected capacity change from 0 to 512 [ 434.446950][ T8214] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.455105][ T8214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.481665][ T11] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 434.496081][ T11] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 434.505679][ T11] usb 5-1: Product: syz [ 434.510022][ T11] usb 5-1: Manufacturer: syz [ 434.514877][ T11] usb 5-1: SerialNumber: syz [ 434.690939][ T8214] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 434.753481][ T11] usb 5-1: config 0 descriptor?? [ 434.833990][ T8214] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 434.874374][ T8214] EXT4-fs (loop2): orphan cleanup on readonly fs [ 434.939780][ T8226] team_slave_0: entered promiscuous mode [ 434.945861][ T8226] team_slave_1: entered promiscuous mode [ 434.959331][ T8226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.007513][ T8214] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.498: Invalid block bitmap block 0 in block_group 0 [ 435.076446][ T8214] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.498: Invalid block bitmap block 0 in block_group 0 [ 435.112328][ T8214] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.498: Invalid block bitmap block 0 in block_group 0 [ 435.200914][ T8226] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 435.259243][ T7290] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 435.273672][ T8214] Quota error (device loop2): write_blk: dquota write failed [ 435.281628][ T8214] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 435.295457][ T8214] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.498: Failed to acquire dquot type 1 [ 435.373232][ T11] gs_usb 5-1:0.0: Configuring for 180 interfaces [ 435.379787][ T11] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 435.397469][ T11] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 435.421097][ T8214] EXT4-fs (loop2): 1 orphan inode deleted [ 435.464814][ T3712] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 435.475140][ T3712] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 1 [ 435.535621][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.643079][ T1549] usb 5-1: USB disconnect, device number 21 [ 436.124770][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.754960][ T8256] loop4: detected capacity change from 0 to 32768 [ 437.764879][ T8256] btrfs: Deprecated parameter 'usebackuproot' [ 437.771131][ T8256] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 437.821350][ T8256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.510 (8256) [ 437.882267][ T8256] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.892994][ T8256] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 438.594967][ T8256] BTRFS info (device loop4): rebuilding free space tree [ 438.624335][ T8256] BTRFS info (device loop4): allowing degraded mounts [ 438.631421][ T8256] BTRFS info (device loop4): enabling ssd optimizations [ 438.638825][ T8256] BTRFS info (device loop4): turning on flush-on-commit [ 438.646142][ T8256] BTRFS info (device loop4): enabling free space tree [ 438.653197][ T8256] BTRFS info (device loop4): force clearing of disk cache [ 438.660595][ T8256] BTRFS info (device loop4): trying to use backup root at mount time [ 438.674662][ T8256] BTRFS info (device loop4): use zstd compression, level 3 [ 438.966666][ T8284] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 438.981495][ T8284] vlan2: entered promiscuous mode [ 439.410983][ T8285] loop0: detected capacity change from 0 to 32768 [ 439.469793][ T8285] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.513 (8285) [ 439.723845][ T5820] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.197362][ T8287] loop2: detected capacity change from 0 to 32768 [ 440.231803][ T8285] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 440.242626][ T8285] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 440.318416][ T8287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.516 (8287) [ 440.377574][ T8287] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 440.388191][ T8287] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 440.397301][ T8287] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 440.747557][ T8285] BTRFS info (device loop0): enabling ssd optimizations [ 440.756155][ T8285] BTRFS info (device loop0): enabling free space tree [ 440.810653][ T30] audit: type=1800 audit(1758427899.142:240): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.513" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 440.955477][ T8287] BTRFS info (device loop2): rebuilding free space tree [ 441.029413][ T8287] BTRFS info (device loop2): disabling free space tree [ 441.037352][ T8287] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 441.047470][ T8287] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 441.080507][ T8287] BTRFS info (device loop2): setting nodatasum [ 441.089096][ T8287] BTRFS info (device loop2): setting nodatacow [ 441.097626][ T8287] BTRFS info (device loop2): enabling ssd optimizations [ 441.104767][ T8287] BTRFS info (device loop2): using spread ssd allocation scheme [ 441.112607][ T8287] BTRFS info (device loop2): turning off barriers [ 441.119349][ T8287] BTRFS info (device loop2): enabling disk space caching [ 441.131579][ T8287] BTRFS info (device loop2): force clearing of disk cache [ 441.192870][ T30] audit: type=1800 audit(1758427899.542:241): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 441.485126][ T5811] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 442.695283][ T8346] FAULT_INJECTION: forcing a failure. [ 442.695283][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 442.708657][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.4.524 Not tainted syzkaller #0 PREEMPT(none) [ 442.708798][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.708876][ T8346] Call Trace: [ 442.708927][ T8346] [ 442.708980][ T8346] __dump_stack+0x26/0x30 [ 442.709146][ T8346] dump_stack_lvl+0x1df/0x270 [ 442.709318][ T8346] dump_stack+0x1e/0x25 [ 442.709461][ T8346] should_fail_ex+0x7dc/0x8a0 [ 442.709617][ T8346] should_failslab+0x15b/0x200 [ 442.709778][ T8346] kmem_cache_alloc_noprof+0xf0/0xec0 [ 442.709945][ T8346] ? vm_area_alloc+0x5c/0x230 [ 442.710118][ T8346] ? kmsan_get_metadata+0xfb/0x160 [ 442.710287][ T8346] vm_area_alloc+0x5c/0x230 [ 442.710461][ T8346] mmap_region+0x2271/0x4ff0 [ 442.710770][ T8346] do_mmap+0x17a8/0x1d70 [ 442.710928][ T8346] vm_mmap_pgoff+0x40d/0x770 [ 442.711122][ T8346] ksys_mmap_pgoff+0x16c/0x7c0 [ 442.711258][ T8346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.711423][ T8346] __x64_sys_mmap+0x19c/0x260 [ 442.711585][ T8346] x64_sys_call+0x18a7/0x3e20 [ 442.711755][ T8346] do_syscall_64+0xd9/0x210 [ 442.711882][ T8346] ? irqentry_exit+0x16/0x60 [ 442.712048][ T8346] ? clear_bhb_loop+0x40/0x90 [ 442.712194][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.712333][ T8346] RIP: 0033:0x7f505438ec63 [ 442.712428][ T8346] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 442.712534][ T8346] RSP: 002b:00007f5055141d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 442.712658][ T8346] RAX: ffffffffffffffda RBX: 0000000000001068 RCX: 00007f505438ec63 [ 442.712751][ T8346] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 442.712834][ T8346] RBP: 0000200000000002 R08: 00000000ffffffff R09: 0000000000000000 [ 442.712919][ T8346] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 442.713001][ T8346] R13: 00007f5055141dec R14: 00007f5055141df0 R15: 00007fff0dd03c08 [ 442.713126][ T8346] [ 443.290796][ T5814] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 443.495171][ T1549] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.747001][ T1549] usb 3-1: Using ep0 maxpacket: 32 [ 443.813407][ T1549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.824927][ T1549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.835338][ T1549] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 443.844727][ T1549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.031239][ T1549] usb 3-1: config 0 descriptor?? [ 444.308046][ T8354] netlink: 100 bytes leftover after parsing attributes in process `syz.0.522'. [ 444.499581][ T1549] usbhid 3-1:0.0: can't add hid device: -71 [ 444.509800][ T1549] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 444.528708][ T8357] loop4: detected capacity change from 0 to 1024 [ 444.624713][ T1549] usb 3-1: USB disconnect, device number 14 [ 445.644926][ T8365] loop1: detected capacity change from 0 to 1024 [ 445.830306][ T8368] nbd: must specify a device to reconfigure [ 445.986334][ T8365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.999093][ T8365] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.516904][ T8368] loop2: detected capacity change from 0 to 32768 [ 446.527496][ T8368] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.532 (8368) [ 446.580932][ T8368] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 446.591476][ T8368] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 446.895957][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.954525][ T8368] BTRFS info (device loop2): enabling ssd optimizations [ 446.964394][ T8368] BTRFS info (device loop2): enabling free space tree [ 447.008471][ T30] audit: type=1800 audit(1758427905.362:242): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.532" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 447.577004][ T3739] hfsplus: b-tree write err: -5, ino 4 [ 448.448044][ T8403] loop0: detected capacity change from 0 to 164 [ 448.464094][ T5811] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 448.545998][ T8403] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 448.624240][ T8403] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 448.665020][ T8403] Symlink component flag not implemented [ 448.670837][ T8403] Symlink component flag not implemented [ 448.679319][ T8403] Symlink component flag not implemented (7) [ 448.687128][ T8403] Symlink component flag not implemented (116) [ 449.141249][ T8408] net_ratelimit: 4 callbacks suppressed [ 449.141331][ T8408] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 449.173142][ T1549] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 449.413311][ T1549] usb 1-1: Using ep0 maxpacket: 16 [ 449.428354][ T1549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.494945][ T1549] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 449.504574][ T1549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.513069][ T1549] usb 1-1: Product: syz [ 449.517405][ T1549] usb 1-1: Manufacturer: syz [ 449.524447][ T1549] usb 1-1: SerialNumber: syz [ 449.620199][ T1549] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 449.800854][ T5152] bcm5974 1-1:1.0: could not read from device [ 449.879338][ T5152] bcm5974 1-1:1.0: could not read from device [ 449.936561][ T5152] bcm5974 1-1:1.0: could not read from device [ 449.959584][ T1549] usb 1-1: USB disconnect, device number 25 [ 449.994061][ T5152] bcm5974 1-1:1.0: could not read from device [ 450.832843][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 450.941921][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 450.951387][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 451.035303][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 451.082065][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.093539][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.103903][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 451.113617][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.165150][ T11] usb 3-1: config 0 descriptor?? [ 451.632867][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 451.639417][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 451.736020][ T11] usb 3-1: USB disconnect, device number 15 [ 452.074796][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.547'. [ 452.087220][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.547'. [ 453.250016][ T8443] loop4: detected capacity change from 0 to 32768 [ 453.692697][ T8446] loop1: detected capacity change from 0 to 32768 [ 453.712901][ T8443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.550 (8443) [ 453.958242][ T8446] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 196bd06e-d4f7-48a2-8696-a31a2c78b99b [ 453.969780][ T8446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.551 (8446) [ 454.123897][ T8449] loop2: detected capacity change from 0 to 32768 [ 454.171470][ T8443] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.182232][ T8443] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 454.192182][ T8443] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 454.214815][ T8449] BTRFS info: device /dev/loop2 (7:2) using temp-fsid f3c71cca-e0e6-4772-bc18-841119bc811a [ 454.225291][ T8449] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.552 (8449) [ 454.235397][ T8446] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.248725][ T8446] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 454.266900][ T8449] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.277469][ T8449] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 454.836329][ T8449] BTRFS info (device loop2): enabling ssd optimizations [ 454.851909][ T8449] BTRFS info (device loop2): enabling free space tree [ 454.871392][ T8443] BTRFS info (device loop4): rebuilding free space tree [ 454.917490][ T8443] BTRFS info (device loop4): disabling free space tree [ 454.924918][ T8443] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 454.935514][ T8443] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 455.005097][ T8443] BTRFS info (device loop4): setting nodatasum [ 455.011468][ T8443] BTRFS info (device loop4): setting nodatacow [ 455.018368][ T8443] BTRFS info (device loop4): enabling ssd optimizations [ 455.025732][ T8443] BTRFS info (device loop4): turning off barriers [ 455.032646][ T8443] BTRFS info (device loop4): enabling disk space caching [ 455.039840][ T8443] BTRFS info (device loop4): force clearing of disk cache [ 455.047341][ T8443] BTRFS info (device loop4): enabling auto defrag [ 455.106038][ T8446] BTRFS info (device loop1): rebuilding free space tree [ 455.153781][ T8446] BTRFS info (device loop1): checking UUID tree [ 455.163485][ T30] audit: type=1800 audit(1758427913.492:243): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.550" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 455.244460][ T8446] BTRFS info (device loop1): enabling ssd optimizations [ 455.251619][ T8446] BTRFS info (device loop1): enabling free space tree [ 455.263694][ T8446] BTRFS info (device loop1): force clearing of disk cache [ 455.271271][ T8446] BTRFS info (device loop1): use zlib compression, level 3 [ 455.279656][ T8446] BTRFS info (device loop1): max_inline set to 0 [ 455.374328][ T5811] BTRFS info (device loop2): last unmount of filesystem f3c71cca-e0e6-4772-bc18-841119bc811a [ 455.474264][ T5820] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.544056][ T5823] BTRFS info (device loop1): last unmount of filesystem 196bd06e-d4f7-48a2-8696-a31a2c78b99b [ 456.842057][ T1549] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 457.058410][ T1549] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 457.067760][ T1549] usb 6-1: config 0 has no interface number 0 [ 457.074431][ T1549] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.084785][ T1549] usb 6-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.100741][ T1549] usb 6-1: config 0 interface 110 has no altsetting 0 [ 457.322102][ T1549] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 457.331778][ T1549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.340201][ T1549] usb 6-1: Product: syz [ 457.344653][ T1549] usb 6-1: Manufacturer: syz [ 457.349466][ T1549] usb 6-1: SerialNumber: syz [ 457.469494][ T1549] usb 6-1: config 0 descriptor?? [ 457.522704][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 457.532075][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 457.700007][ T1549] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -22 [ 457.944206][ T8521] trusted_key: encrypted_key: insufficient parameters specified [ 458.021332][ T8521] loop5: detected capacity change from 0 to 8 [ 458.126648][ T8521] unable to read id index table [ 458.360587][ T11] usb 6-1: USB disconnect, device number 5 [ 458.851709][ T8530] loop1: detected capacity change from 0 to 4096 [ 458.889022][ T8534] loop0: detected capacity change from 0 to 32768 [ 458.911677][ T8534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.566 (8534) [ 458.959762][ T8534] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 458.971877][ T8534] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 458.981116][ T8534] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 459.308080][ T8534] BTRFS info (device loop0): rebuilding free space tree [ 459.339915][ T8534] BTRFS info (device loop0): disabling free space tree [ 459.347356][ T8534] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 459.360632][ T8534] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 459.394289][ T8534] BTRFS info (device loop0): setting nodatasum [ 459.400801][ T8534] BTRFS info (device loop0): setting nodatacow [ 459.407593][ T8534] BTRFS info (device loop0): enabling ssd optimizations [ 459.415375][ T8534] BTRFS info (device loop0): turning off barriers [ 459.421965][ T8534] BTRFS info (device loop0): enabling disk space caching [ 459.429407][ T8534] BTRFS info (device loop0): force clearing of disk cache [ 459.437459][ T8534] BTRFS info (device loop0): enabling auto defrag [ 459.523198][ T30] audit: type=1800 audit(1758427917.882:244): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 459.698999][ T8554] FAULT_INJECTION: forcing a failure. [ 459.698999][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 459.713425][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.2.568 Not tainted syzkaller #0 PREEMPT(none) [ 459.713564][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.713641][ T8554] Call Trace: [ 459.713688][ T8554] [ 459.713734][ T8554] __dump_stack+0x26/0x30 [ 459.713902][ T8554] dump_stack_lvl+0x1df/0x270 [ 459.714066][ T8554] dump_stack+0x1e/0x25 [ 459.714212][ T8554] should_fail_ex+0x7dc/0x8a0 [ 459.714370][ T8554] should_failslab+0x15b/0x200 [ 459.714527][ T8554] kmem_cache_alloc_noprof+0xf0/0xec0 [ 459.714693][ T8554] ? skb_clone+0x3ca/0x580 [ 459.714879][ T8554] ? kmsan_get_metadata+0xfb/0x160 [ 459.715040][ T8554] skb_clone+0x3ca/0x580 [ 459.715217][ T8554] __netlink_deliver_tap+0x695/0xdd0 [ 459.715389][ T8554] ? kmsan_get_metadata+0xfb/0x160 [ 459.715541][ T8554] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.715698][ T8554] netlink_unicast+0x11b5/0x12b0 [ 459.715885][ T8554] netlink_sendmsg+0x10b3/0x1250 [ 459.716074][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.716236][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.716401][ T8554] __sock_sendmsg+0x333/0x3d0 [ 459.716539][ T8554] ____sys_sendmsg+0x7e0/0xd80 [ 459.716738][ T8554] ___sys_sendmsg+0x271/0x3b0 [ 459.716936][ T8554] ? __rcu_read_unlock+0x6d/0xd0 [ 459.717065][ T8554] ? __fget_files+0x3b4/0x4a0 [ 459.717229][ T8554] ? __fget_files+0x3b9/0x4a0 [ 459.717401][ T8554] ? kmsan_get_metadata+0xfb/0x160 [ 459.717548][ T8554] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.717706][ T8554] __x64_sys_sendmsg+0x211/0x3e0 [ 459.717897][ T8554] ? kmsan_get_metadata+0xfb/0x160 [ 459.718059][ T8554] x64_sys_call+0x1dfd/0x3e20 [ 459.718229][ T8554] do_syscall_64+0xd9/0x210 [ 459.718351][ T8554] ? irqentry_exit+0x16/0x60 [ 459.718511][ T8554] ? clear_bhb_loop+0x40/0x90 [ 459.718649][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.718787][ T8554] RIP: 0033:0x7f15de78ec29 [ 459.718892][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.719004][ T8554] RSP: 002b:00007f15df669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.719122][ T8554] RAX: ffffffffffffffda RBX: 00007f15de9d5fa0 RCX: 00007f15de78ec29 [ 459.719214][ T8554] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 459.719295][ T8554] RBP: 00007f15df669090 R08: 0000000000000000 R09: 0000000000000000 [ 459.719374][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.719465][ T8554] R13: 00007f15de9d6038 R14: 00007f15de9d5fa0 R15: 00007ffdb8872048 [ 459.719590][ T8554] [ 459.719661][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 459.855456][ T5814] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 460.218876][ T8554] hsr_slave_0: left promiscuous mode [ 460.308478][ T8554] hsr_slave_1: left promiscuous mode [ 460.402010][ T8530] ntfs3(loop1): Failed to read $UpCase (-4). [ 460.630673][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 460.883014][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 460.926808][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 460.984462][ T11] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.999331][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.010462][ T11] usb 6-1: Product: syz [ 461.015087][ T11] usb 6-1: Manufacturer: syz [ 461.019843][ T11] usb 6-1: SerialNumber: syz [ 461.189329][ T11] usb 6-1: config 0 descriptor?? [ 461.261463][ T11] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.271640][ T11] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 461.451167][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 461.853941][ T11] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 462.331824][ T8557] loop5: detected capacity change from 0 to 512 [ 462.383046][ T8557] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 462.474613][ T8557] EXT4-fs (loop5): 1 truncate cleaned up [ 462.482359][ T8557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.662809][ T11] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.691166][ T11] em28xx 6-1:0.0: board has no eeprom [ 462.843865][ T11] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.852076][ T11] em28xx 6-1:0.0: dvb set to bulk mode. [ 462.861207][ T5870] em28xx 6-1:0.0: Binding DVB extension [ 462.972318][ T11] usb 6-1: USB disconnect, device number 6 [ 462.979992][ T11] em28xx 6-1:0.0: Disconnecting em28xx [ 463.046443][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.578'. [ 463.055763][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.578'. [ 463.759154][ T8586] loop1: detected capacity change from 0 to 32768 [ 463.833260][ T8586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.579 (8586) [ 463.941492][ T8588] loop2: detected capacity change from 0 to 32768 [ 463.985763][ T8586] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 463.985893][ T8588] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.580 (8588) [ 463.996596][ T8586] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 464.064569][ T8588] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 464.077784][ T8588] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 464.088371][ T8588] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 464.122247][ T8590] loop0: detected capacity change from 0 to 1024 [ 464.169308][ T8590] EXT4-fs: Ignoring removed oldalloc option [ 464.175815][ T8590] EXT4-fs: Ignoring removed bh option [ 464.183828][ T5870] em28xx 6-1:0.0: Registering input extension [ 464.195123][ T11] em28xx 6-1:0.0: Closing input extension [ 464.231916][ T7290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.252161][ T11] em28xx 6-1:0.0: Freeing device [ 464.402877][ T8590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.506926][ T8586] BTRFS info (device loop1): setting nodatasum [ 464.513435][ T8586] BTRFS info (device loop1): enabling free space tree [ 464.520379][ T8586] BTRFS info (device loop1): force zlib compression, level 3 [ 464.528198][ T8586] BTRFS info (device loop1): max_inline set to 0 [ 464.534192][ T8588] BTRFS info (device loop2): rebuilding free space tree [ 464.569339][ T8588] BTRFS info (device loop2): disabling free space tree [ 464.583918][ T8588] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 464.593951][ T8588] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 464.634631][ T8588] BTRFS info (device loop2): setting nodatasum [ 464.641002][ T8588] BTRFS info (device loop2): setting nodatacow [ 464.647478][ T8588] BTRFS info (device loop2): enabling ssd optimizations [ 464.654770][ T8588] BTRFS info (device loop2): turning off barriers [ 464.661362][ T8588] BTRFS info (device loop2): enabling disk space caching [ 464.668801][ T8588] BTRFS info (device loop2): force clearing of disk cache [ 464.683797][ T8588] BTRFS info (device loop2): enabling auto defrag [ 464.691039][ T8590] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 464.872357][ T30] audit: type=1800 audit(1758427923.182:245): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.580" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 464.907098][ T1549] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 464.963098][ T5811] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 465.025868][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.117285][ T1549] usb 2-1: Using ep0 maxpacket: 16 [ 465.188936][ T1549] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 465.203195][ T1549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 465.216054][ T1549] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 465.226381][ T1549] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 465.267185][ T1549] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 465.278465][ T1549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.287439][ T1549] usb 2-1: Product: syz [ 465.295098][ T1549] usb 2-1: Manufacturer: syz [ 465.299877][ T1549] usb 2-1: SerialNumber: syz [ 465.324457][ T1549] usb 2-1: config 0 descriptor?? [ 465.331990][ T8586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.340236][ T8586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.443887][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 465.450565][ T1549] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 465.451034][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 465.664100][ T8631] vlan3: entered promiscuous mode [ 465.685017][ T8626] loop5: detected capacity change from 0 to 4096 [ 465.969210][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.980161][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.871245][ T8626] ntfs3(loop5): ino=1a, mi_enum_attr [ 466.877982][ T8626] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 467.183253][ T8626] ntfs3(loop5): failed to convert "0080" to koi8-ru [ 467.267195][ T8626] ntfs3(loop5): failed to convert name for inode 1e. [ 467.484502][ T8626] ntfs3(loop5): ino=1f, mi_enum_attr [ 467.490175][ T8626] ntfs3(loop5): failed to convert "256c" to koi8-ru [ 468.443951][ T8646] FAULT_INJECTION: forcing a failure. [ 468.443951][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 468.457539][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(none) [ 468.457669][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.457733][ T8646] Call Trace: [ 468.457779][ T8646] [ 468.457826][ T8646] __dump_stack+0x26/0x30 [ 468.457981][ T8646] dump_stack_lvl+0x1df/0x270 [ 468.458149][ T8646] dump_stack+0x1e/0x25 [ 468.458294][ T8646] should_fail_ex+0x7dc/0x8a0 [ 468.458455][ T8646] should_failslab+0x15b/0x200 [ 468.458627][ T8646] kmem_cache_alloc_noprof+0xf0/0xec0 [ 468.458791][ T8646] ? getname_flags+0x102/0xac0 [ 468.458972][ T8646] ? kmsan_get_metadata+0xfb/0x160 [ 468.459123][ T8646] ? kmsan_get_metadata+0xfb/0x160 [ 468.459284][ T8646] getname_flags+0x102/0xac0 [ 468.459475][ T8646] do_sys_openat2+0xaa/0x2f0 [ 468.459623][ T8646] __x64_sys_creat+0xe1/0x150 [ 468.459770][ T8646] x64_sys_call+0x3a00/0x3e20 [ 468.459939][ T8646] do_syscall_64+0xd9/0x210 [ 468.460067][ T8646] ? irqentry_exit+0x16/0x60 [ 468.460226][ T8646] ? clear_bhb_loop+0x40/0x90 [ 468.460365][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.460499][ T8646] RIP: 0033:0x7f15de78ec29 [ 468.460598][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.460712][ T8646] RSP: 002b:00007f15df669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 468.460831][ T8646] RAX: ffffffffffffffda RBX: 00007f15de9d5fa0 RCX: 00007f15de78ec29 [ 468.460920][ T8646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d80 [ 468.461002][ T8646] RBP: 00007f15df669090 R08: 0000000000000000 R09: 0000000000000000 [ 468.461082][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.461161][ T8646] R13: 00007f15de9d6038 R14: 00007f15de9d5fa0 R15: 00007ffdb8872048 [ 468.461285][ T8646] [ 468.927718][ T1549] usb 2-1: USB disconnect, device number 12 [ 468.936235][ T1549] mcba_usb 2-1:0.0 can0: device disconnected [ 469.305060][ T8656] netlink: 104 bytes leftover after parsing attributes in process `syz.2.592'. [ 469.621387][ T5823] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.356044][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.362867][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.639864][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 470.649572][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 470.901962][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.591'. [ 471.025644][ T5907] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 471.272837][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 471.426461][ T5907] usb 5-1: config 0 has no interfaces? [ 471.434730][ T5907] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 471.445089][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.729890][ T8667] loop1: detected capacity change from 0 to 32768 [ 471.748395][ T5907] usb 5-1: config 0 descriptor?? [ 471.757973][ T8667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.593 (8667) [ 471.793954][ T8667] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.804855][ T8667] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 471.813854][ T8667] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 471.912719][ T8674] loop5: detected capacity change from 0 to 512 [ 471.923255][ T8674] EXT4-fs: Ignoring removed orlov option [ 471.932689][ T8674] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 471.992607][ T8667] BTRFS info (device loop1): rebuilding free space tree [ 472.067468][ T8667] BTRFS info (device loop1): disabling free space tree [ 472.076119][ T8667] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 472.086160][ T8667] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 472.092344][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'. [ 472.106999][ T8667] BTRFS info (device loop1): setting nodatasum [ 472.113989][ T8667] BTRFS info (device loop1): setting nodatacow [ 472.120311][ T8667] BTRFS info (device loop1): enabling ssd optimizations [ 472.127633][ T8667] BTRFS info (device loop1): turning off barriers [ 472.134332][ T8667] BTRFS info (device loop1): enabling disk space caching [ 472.141519][ T8667] BTRFS info (device loop1): force clearing of disk cache [ 472.154399][ T8667] BTRFS info (device loop1): enabling auto defrag [ 472.193618][ T8674] EXT4-fs: error -4 creating inode table initialization thread [ 472.202001][ T8674] EXT4-fs (loop5): mount failed [ 472.205005][ T30] audit: type=1800 audit(1758427930.562:246): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 472.377466][ T11] usb 5-1: USB disconnect, device number 22 [ 472.488319][ T5823] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 472.980274][ T8699] loop2: detected capacity change from 0 to 128 [ 473.468256][ T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 473.713341][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 473.763804][ T11] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 473.772206][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.784055][ T11] usb 3-1: config 0 has no interface number 0 [ 473.795520][ T11] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 473.807436][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 473.818776][ T11] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 473.830853][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 473.842882][ T11] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 473.853367][ T11] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 473.865359][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 473.876711][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 473.887355][ T11] usb 3-1: config 0 interface 239 has no altsetting 0 [ 474.296963][ T11] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 474.312288][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.323129][ T11] usb 3-1: Product: syz [ 474.327454][ T11] usb 3-1: Manufacturer: syz [ 474.332214][ T11] usb 3-1: SerialNumber: syz [ 474.393070][ T8705] loop4: detected capacity change from 0 to 4096 [ 474.461280][ T11] usb 3-1: config 0 descriptor?? [ 474.469037][ T8699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.494145][ T8699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.184670][ T5907] usb 3-1: USB disconnect, device number 16 [ 475.524000][ T8705] ntfs3(loop4): ino=1a, mi_enum_attr [ 475.533158][ T8705] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 475.746633][ T8714] loop0: detected capacity change from 0 to 32768 [ 475.790571][ T8714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.603 (8714) [ 475.830566][ T8714] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 475.846772][ T8714] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 475.990372][ T8705] ntfs3(loop4): failed to convert "0080" to koi8-ru [ 476.598875][ T8714] BTRFS info (device loop0): setting nodatasum [ 476.605374][ T8714] BTRFS info (device loop0): enabling free space tree [ 476.612318][ T8714] BTRFS info (device loop0): force zlib compression, level 3 [ 476.620229][ T8714] BTRFS info (device loop0): max_inline set to 0 [ 476.748732][ T8721] loop1: detected capacity change from 0 to 32768 [ 476.764283][ T8721] BTRFS info: device /dev/loop1 (7:1) using temp-fsid ba5fa511-fb08-4de4-901c-a4b60f7887ec [ 476.774764][ T8721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.598 (8721) [ 476.884419][ T8721] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.895056][ T8721] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 477.164625][ T11] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 477.286602][ T8721] BTRFS info (device loop1): setting nodatasum [ 477.293103][ T8721] BTRFS info (device loop1): enabling free space tree [ 477.300043][ T8721] BTRFS info (device loop1): force zlib compression, level 3 [ 477.307955][ T8721] BTRFS info (device loop1): max_inline set to 0 [ 477.363071][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 477.427765][ T11] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 477.435758][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 477.447333][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 477.457543][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 477.568281][ T11] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 477.583193][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.591387][ T11] usb 1-1: Product: syz [ 477.598027][ T11] usb 1-1: Manufacturer: syz [ 477.602998][ T11] usb 1-1: SerialNumber: syz [ 477.674086][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 477.703478][ T5907] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 477.805519][ T11] usb 1-1: config 0 descriptor?? [ 477.813330][ T8714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 477.821168][ T8714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 477.875621][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 477.882302][ T11] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 477.882835][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 477.913700][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 477.972958][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 477.978259][ T5907] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 477.988015][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 478.000850][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 478.011235][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 478.033352][ T5814] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 478.044610][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.055945][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.066068][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 478.075578][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.154017][ T11] usb 1-1: USB disconnect, device number 26 [ 478.163281][ T11] mcba_usb 1-1:0.0 can0: device disconnected [ 478.265831][ T5870] usb 3-1: config 0 descriptor?? [ 478.271495][ T1549] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 478.318137][ T5907] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 478.327881][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.337129][ T5907] usb 2-1: Product: syz [ 478.341462][ T5907] usb 2-1: Manufacturer: syz [ 478.346357][ T5907] usb 2-1: SerialNumber: syz [ 478.545392][ T1549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.556828][ T1549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.567126][ T1549] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 478.576532][ T1549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.616703][ T5907] usb 2-1: config 0 descriptor?? [ 478.624553][ T8721] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 478.632394][ T8721] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 478.706938][ T5907] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 478.716135][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 478.716666][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 478.864108][ T5870] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 478.885995][ T1549] usb 5-1: config 0 descriptor?? [ 479.096678][ T5870] usb 3-1: USB disconnect, device number 17 [ 479.273917][ T5907] usb 2-1: USB disconnect, device number 13 [ 479.286290][ T5907] mcba_usb 2-1:0.0 can0: device disconnected [ 479.342229][ T5823] BTRFS info (device loop1): last unmount of filesystem ba5fa511-fb08-4de4-901c-a4b60f7887ec [ 479.361174][ T1549] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 479.369105][ T1549] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 479.465363][ T1549] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0005/input/input15 [ 479.704860][ T1549] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 480.141891][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 480.151248][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 480.886185][ T5907] usb 5-1: USB disconnect, device number 23 [ 481.299220][ T8778] fido_id[8778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 481.608403][ T8797] FAULT_INJECTION: forcing a failure. [ 481.608403][ T8797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.625642][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(none) [ 481.625793][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.625871][ T8797] Call Trace: [ 481.625919][ T8797] [ 481.625966][ T8797] __dump_stack+0x26/0x30 [ 481.626125][ T8797] dump_stack_lvl+0x1df/0x270 [ 481.626288][ T8797] dump_stack+0x1e/0x25 [ 481.626426][ T8797] should_fail_ex+0x7dc/0x8a0 [ 481.626583][ T8797] should_fail+0x2a/0x40 [ 481.626710][ T8797] should_fail_usercopy+0x2e/0x40 [ 481.626856][ T8797] _copy_to_user+0x35/0x120 [ 481.627008][ T8797] drm_ioctl+0xf4d/0x1730 [ 481.627167][ T8797] ? __pfx_drm_set_client_name+0x10/0x10 [ 481.627322][ T8797] ? kmsan_get_metadata+0xfb/0x160 [ 481.627472][ T8797] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 481.627624][ T8797] ? __pfx_drm_ioctl+0x10/0x10 [ 481.627750][ T8797] ? __pfx_drm_ioctl+0x10/0x10 [ 481.627874][ T8797] __se_sys_ioctl+0x239/0x400 [ 481.628023][ T8797] __x64_sys_ioctl+0x97/0xe0 [ 481.628173][ T8797] x64_sys_call+0x1cbc/0x3e20 [ 481.628347][ T8797] do_syscall_64+0xd9/0x210 [ 481.628471][ T8797] ? irqentry_exit+0x16/0x60 [ 481.628629][ T8797] ? clear_bhb_loop+0x40/0x90 [ 481.628779][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.628931][ T8797] RIP: 0033:0x7f1f5a18ec29 [ 481.629066][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.629176][ T8797] RSP: 002b:00007f1f5b0b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.629294][ T8797] RAX: ffffffffffffffda RBX: 00007f1f5a3d5fa0 RCX: 00007f1f5a18ec29 [ 481.629381][ T8797] RDX: 0000200000000040 RSI: 00000000c01064d1 RDI: 0000000000000003 [ 481.629467][ T8797] RBP: 00007f1f5b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 481.629546][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.629617][ T8797] R13: 00007f1f5a3d6038 R14: 00007f1f5a3d5fa0 R15: 00007fffb17763f8 [ 481.629743][ T8797] [ 482.225602][ T8801] loop2: detected capacity change from 0 to 128 [ 482.628969][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 482.786529][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 482.795909][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 482.837122][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 482.879260][ T5870] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 482.887956][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.898502][ T5870] usb 3-1: config 0 has no interface number 0 [ 482.910018][ T5870] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 482.921843][ T5870] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 482.933173][ T5870] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 482.945668][ T5870] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 482.957402][ T5870] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 482.967979][ T5870] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 482.980097][ T5870] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 482.991569][ T5870] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 483.001786][ T5870] usb 3-1: config 0 interface 239 has no altsetting 0 [ 483.111724][ T8803] loop5: detected capacity change from 0 to 4096 [ 483.753868][ T8809] loop1: detected capacity change from 0 to 32768 [ 483.774621][ T8809] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.618 (8809) [ 483.799328][ T8809] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.809987][ T8809] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 484.051458][ T5870] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 484.061057][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.069606][ T5870] usb 3-1: Product: syz [ 484.074078][ T5870] usb 3-1: Manufacturer: syz [ 484.078830][ T5870] usb 3-1: SerialNumber: syz [ 484.155917][ T8812] fido_id[8812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 484.245065][ T8809] BTRFS info (device loop1): rebuilding free space tree [ 484.280894][ T8809] BTRFS info (device loop1): checking UUID tree [ 484.307459][ T8809] BTRFS info (device loop1): enabling ssd optimizations [ 484.310330][ T5870] usb 3-1: config 0 descriptor?? [ 484.314930][ T8809] BTRFS info (device loop1): enabling free space tree [ 484.323439][ T8801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 484.327175][ T8809] BTRFS info (device loop1): force clearing of disk cache [ 484.344236][ T8809] BTRFS info (device loop1): use zlib compression, level 3 [ 484.351654][ T8809] BTRFS info (device loop1): max_inline set to 0 [ 484.414179][ T8801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 484.435469][ T8803] ntfs3(loop5): ino=1a, mi_enum_attr [ 484.443797][ T8803] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 484.664185][ T8803] ntfs3(loop5): failed to convert "0080" to koi8-ru [ 484.717431][ T8803] ntfs3(loop5): failed to convert name for inode 1e. [ 484.833504][ T8803] ntfs3(loop5): ino=1f, mi_enum_attr [ 484.985729][ T5907] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 485.059927][ T1549] usb 3-1: USB disconnect, device number 18 [ 485.262976][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 485.282261][ T5823] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 485.334757][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.346516][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.356884][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 485.368414][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.478817][ T5907] usb 5-1: config 0 descriptor?? [ 486.085077][ T5907] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 486.334187][ T1549] usb 5-1: USB disconnect, device number 24 [ 486.706204][ T8843] FAULT_INJECTION: forcing a failure. [ 486.706204][ T8843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.719879][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.2.622 Not tainted syzkaller #0 PREEMPT(none) [ 486.720011][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.720082][ T8843] Call Trace: [ 486.720127][ T8843] [ 486.720174][ T8843] __dump_stack+0x26/0x30 [ 486.720337][ T8843] dump_stack_lvl+0x1df/0x270 [ 486.720498][ T8843] dump_stack+0x1e/0x25 [ 486.720635][ T8843] should_fail_ex+0x7dc/0x8a0 [ 486.720788][ T8843] should_fail+0x2a/0x40 [ 486.720905][ T8843] should_fail_usercopy+0x2e/0x40 [ 486.721042][ T8843] _copy_from_user+0x33/0x100 [ 486.721188][ T8843] ___sys_sendmsg+0x11b/0x3b0 [ 486.721366][ T8843] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 486.721526][ T8843] ? __rcu_read_unlock+0x6d/0xd0 [ 486.721652][ T8843] ? __fget_files+0x3b4/0x4a0 [ 486.721810][ T8843] ? __fget_files+0x3b9/0x4a0 [ 486.721972][ T8843] ? kmsan_get_metadata+0xfb/0x160 [ 486.722115][ T8843] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 486.722272][ T8843] __x64_sys_sendmsg+0x211/0x3e0 [ 486.722440][ T8843] ? fput+0x113/0x160 [ 486.722549][ T8843] ? kmsan_get_metadata+0xfb/0x160 [ 486.722687][ T8843] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 486.722838][ T8843] ? kmsan_get_metadata+0xfb/0x160 [ 486.722989][ T8843] x64_sys_call+0x1dfd/0x3e20 [ 486.723151][ T8843] do_syscall_64+0xd9/0x210 [ 486.723274][ T8843] ? irqentry_exit+0x16/0x60 [ 486.723428][ T8843] ? clear_bhb_loop+0x40/0x90 [ 486.723562][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.723695][ T8843] RIP: 0033:0x7f15de78ec29 [ 486.723789][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.723906][ T8843] RSP: 002b:00007f15df669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.724030][ T8843] RAX: ffffffffffffffda RBX: 00007f15de9d5fa0 RCX: 00007f15de78ec29 [ 486.724121][ T8843] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 486.724208][ T8843] RBP: 00007f15df669090 R08: 0000000000000000 R09: 0000000000000000 [ 486.724291][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.724370][ T8843] R13: 00007f15de9d6038 R14: 00007f15de9d5fa0 R15: 00007ffdb8872048 [ 486.724495][ T8843] [ 487.020849][ T8840] fido_id[8840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 487.641074][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 487.650697][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 488.105603][ T8847] loop5: detected capacity change from 0 to 40427 [ 488.131510][ T8847] F2FS-fs (loop5): Image doesn't support compression [ 488.138674][ T8847] F2FS-fs (loop5): build fault injection rate: 690 [ 488.150862][ T8847] F2FS-fs (loop5): build fault injection type: 0x4 [ 488.163650][ T8847] F2FS-fs (loop5): invalid crc value [ 488.504191][ T8847] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 488.516908][ T8847] F2FS-fs (loop5): Start checkpoint disabled! [ 488.593515][ T8847] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 488.748535][ T3875] kworker/u8:16: attempt to access beyond end of device [ 488.748535][ T3875] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.764103][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(none) [ 488.764249][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.764368][ T3875] Workqueue: writeback wb_workfn (flush-7:5) [ 488.764587][ T3875] Call Trace: [ 488.764635][ T3875] [ 488.764685][ T3875] __dump_stack+0x26/0x30 [ 488.764846][ T3875] dump_stack_lvl+0x1df/0x270 [ 488.765014][ T3875] dump_stack+0x1e/0x25 [ 488.765160][ T3875] f2fs_handle_critical_error+0xa6f/0xc20 [ 488.765385][ T3875] f2fs_stop_checkpoint+0x65/0x80 [ 488.765569][ T3875] f2fs_write_end_io+0x101c/0x1bc0 [ 488.765747][ T3875] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 488.765883][ T3875] bio_endio+0xeb1/0x1010 [ 488.766037][ T3875] submit_bio_noacct+0x213/0x2750 [ 488.766243][ T3875] submit_bio+0x57c/0x630 [ 488.766405][ T3875] f2fs_submit_write_bio+0x92/0x250 [ 488.766584][ T3875] __submit_merged_bio+0x16f/0x6a0 [ 488.766755][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.766926][ T3875] __submit_merged_write_cond+0x458/0x9a0 [ 488.767128][ T3875] f2fs_write_data_pages+0x4bb2/0x5480 [ 488.767449][ T3875] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 488.767587][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.767736][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.767909][ T3875] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 488.768099][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.768244][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.768418][ T3875] ? __rb_insert_augmented+0x80/0x11b0 [ 488.768605][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.768753][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.768905][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.769062][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.769210][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.769361][ T3875] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.769550][ T3875] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.769733][ T3875] do_writepages+0x3f2/0x860 [ 488.769865][ T3875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.770027][ T3875] ? queue_io+0x731/0x790 [ 488.770156][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.770325][ T3875] __writeback_single_inode+0x101/0x1190 [ 488.770473][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.770643][ T3875] writeback_sb_inodes+0xac1/0x1cb0 [ 488.770862][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.771050][ T3875] wb_writeback+0x4ce/0xc00 [ 488.771195][ T3875] ? queue_io+0x431/0x790 [ 488.771327][ T3875] wb_workfn+0x397/0x1910 [ 488.771488][ T3875] ? kmsan_get_metadata+0xfb/0x160 [ 488.771650][ T3875] ? __pfx_wb_workfn+0x10/0x10 [ 488.771820][ T3875] process_scheduled_works+0xb8e/0x1d80 [ 488.772041][ T3875] worker_thread+0xedf/0x1590 [ 488.772242][ T3875] kthread+0xd59/0xf00 [ 488.772363][ T3875] ? __pfx_worker_thread+0x10/0x10 [ 488.772555][ T3875] ? __pfx_kthread+0x10/0x10 [ 488.772679][ T3875] ret_from_fork+0x233/0x380 [ 488.772805][ T3875] ? __pfx_kthread+0x10/0x10 [ 488.772931][ T3875] ret_from_fork_asm+0x1a/0x30 [ 488.773129][ T3875] [ 489.066071][ T3875] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 489.274628][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 489.300151][ T8862] vlan4: entered promiscuous mode [ 489.305833][ T8862] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 489.984887][ T8868] loop0: detected capacity change from 0 to 4096 [ 490.113072][ T5870] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 490.401113][ T5870] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.412984][ T5870] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.423195][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 490.432734][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.562072][ T8872] loop2: detected capacity change from 0 to 128 [ 491.031742][ T8870] loop5: detected capacity change from 0 to 32768 [ 491.066484][ T5870] hub 2-1:4.0: USB hub found [ 491.143599][ T5870] hub 2-1:4.0: 13 ports detected [ 491.148954][ T5870] usb 2-1: selecting invalid altsetting 1 [ 491.155223][ T5870] hub 2-1:4.0: Using single TT (err -22) [ 491.226307][ T11] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 491.258877][ T8868] ntfs3(loop0): ino=1a, mi_enum_attr [ 491.264471][ T8868] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 491.315676][ T5870] hub 2-1:4.0: insufficient power available to use all downstream ports [ 491.317153][ T8870] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,erasure_code,norecovery,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,no_data_io [ 491.350808][ T8870] allowing incompatible features above 0.0: (unknown version) [ 491.358751][ T8870] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 491.373287][ T8870] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 491.382646][ T8870] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, fixing [ 491.402646][ T8870] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist_v2 in superblock: invalid journal seq blacklist entry: bad size, fixing [ 491.419896][ T8870] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 491.428939][ T8870] bcachefs (loop5): Version upgrade required: [ 491.428939][ T8870] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 491.428939][ T8870] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 491.428939][ T8870] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 491.508632][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 491.564973][ T5870] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 491.571527][ T5870] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 491.602705][ T11] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 491.608348][ T8870] bcachefs (loop5): btree node read error at btree alloc level 0/0 [ 491.616512][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.619129][ T8870] u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 491.631023][ T11] usb 3-1: config 0 has no interface number 0 [ 491.645211][ T8870] loop5 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX [ 491.645297][ T8870] loop5 btree validate error [ 491.651400][ T11] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 491.659410][ T8870] flagging btree alloc lost data [ 491.659482][ T8870] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 491.664374][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 491.674395][ T8870] ret btree_node_read_err_bad_node [ 491.675032][ T8870] bcachefs (loop5): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 491.679643][ T11] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 491.737429][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 491.749206][ T11] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 491.760244][ T11] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 491.772231][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 491.784715][ T11] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 491.794991][ T11] usb 3-1: config 0 interface 239 has no altsetting 0 [ 491.865617][ T5870] usb 2-1: USB disconnect, device number 14 [ 491.866839][ T8870] bcachefs (loop5): check_topology... done [ 491.879321][ T8868] ntfs3(loop0): failed to convert "0080" to koi8-ru [ 491.883690][ T8870] bcachefs (loop5): accounting_read... done [ 491.906160][ T8870] bcachefs (loop5): alloc_read... done [ 491.917451][ T8870] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 491.929694][ T8870] bcachefs (loop5): done starting filesystem [ 491.994901][ T8868] ntfs3(loop0): failed to convert name for inode 1e. [ 492.049864][ T7290] bcachefs (loop5): shutting down [ 492.104043][ T11] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 492.113664][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.115601][ T8868] ntfs3(loop0): ino=1f, mi_enum_attr [ 492.127150][ T11] usb 3-1: Product: syz [ 492.136590][ T11] usb 3-1: Manufacturer: syz [ 492.141369][ T11] usb 3-1: SerialNumber: syz [ 492.229098][ T7290] bcachefs (loop5): shutdown complete [ 492.375911][ T11] usb 3-1: config 0 descriptor?? [ 492.383902][ T8872] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 492.392257][ T8872] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.063542][ T5907] usb 3-1: USB disconnect, device number 19 [ 493.411726][ T8887] FAULT_INJECTION: forcing a failure. [ 493.411726][ T8887] name failslab, interval 1, probability 0, space 0, times 0 [ 493.424897][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(none) [ 493.425032][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.425106][ T8887] Call Trace: [ 493.425151][ T8887] [ 493.425197][ T8887] __dump_stack+0x26/0x30 [ 493.425355][ T8887] dump_stack_lvl+0x1df/0x270 [ 493.425517][ T8887] dump_stack+0x1e/0x25 [ 493.425669][ T8887] should_fail_ex+0x7dc/0x8a0 [ 493.425826][ T8887] should_failslab+0x15b/0x200 [ 493.425979][ T8887] __kmalloc_noprof+0x182/0x1310 [ 493.426142][ T8887] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 493.426308][ T8887] ? tomoyo_path_number_perm+0xa1/0x7d0 [ 493.426439][ T8887] ? filter_irq_stacks+0x49/0x190 [ 493.426568][ T8887] ? kmsan_get_metadata+0xfb/0x160 [ 493.426733][ T8887] tomoyo_realpath_from_path+0xeb/0x9f0 [ 493.426904][ T8887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.427069][ T8887] ? __srcu_read_lock+0x5e/0xd0 [ 493.427234][ T8887] tomoyo_path_number_perm+0x1d0/0x7d0 [ 493.427375][ T8887] ? stack_depot_save_flags+0x35/0x7b0 [ 493.427529][ T8887] ? kmsan_get_metadata+0xfb/0x160 [ 493.427683][ T8887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.427878][ T8887] tomoyo_file_ioctl+0x3d/0x50 [ 493.428042][ T8887] security_file_ioctl+0x141/0x590 [ 493.428178][ T8887] __se_sys_ioctl+0xbb/0x400 [ 493.428331][ T8887] __x64_sys_ioctl+0x97/0xe0 [ 493.428478][ T8887] x64_sys_call+0x1cbc/0x3e20 [ 493.428654][ T8887] do_syscall_64+0xd9/0x210 [ 493.428780][ T8887] ? irqentry_exit+0x16/0x60 [ 493.428938][ T8887] ? clear_bhb_loop+0x40/0x90 [ 493.429075][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.429211][ T8887] RIP: 0033:0x7f60aa98ec29 [ 493.429297][ T8887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.429406][ T8887] RSP: 002b:00007f60ab755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.429530][ T8887] RAX: ffffffffffffffda RBX: 00007f60aabd5fa0 RCX: 00007f60aa98ec29 [ 493.429630][ T8887] RDX: 00002000000000c0 RSI: 00000000000007b2 RDI: 0000000000000003 [ 493.429710][ T8887] RBP: 00007f60ab755090 R08: 0000000000000000 R09: 0000000000000000 [ 493.429788][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.429866][ T8887] R13: 00007f60aabd6038 R14: 00007f60aabd5fa0 R15: 00007ffe595a1ca8 [ 493.429988][ T8887] [ 493.430047][ T8887] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.605037][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 494.615241][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 494.769311][ T8892] loop4: detected capacity change from 0 to 32768 [ 495.081839][ T8892] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 495.081958][ T8892] allowing incompatible features above 0.0: (unknown version) [ 495.082046][ T8892] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 495.122673][ T8892] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 495.131056][ T8892] bcachefs (loop4): initializing new filesystem [ 495.151167][ T8892] bcachefs (loop4): going read-write [ 495.201501][ T8892] bcachefs (loop4): marking superblocks [ 495.248394][ T8892] bcachefs (loop4): initializing freespace [ 495.274651][ T8892] bcachefs (loop4): done initializing freespace [ 495.297516][ T8892] bcachefs (loop4): reading snapshots table [ 495.304588][ T8892] bcachefs (loop4): reading snapshots done [ 495.417189][ T8896] loop2: detected capacity change from 0 to 32768 [ 495.441925][ T8892] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 495.455255][ T8892] bcachefs (loop4): done starting filesystem [ 495.593685][ T5907] IPVS: starting estimator thread 0... [ 495.608776][ T8896] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 495.742926][ T8914] IPVS: using max 240 ests per chain, 12000 per kthread [ 496.618426][ T5820] bcachefs (loop4): shutting down [ 496.626624][ T5820] bcachefs (loop4): going read-only [ 496.632009][ T5820] bcachefs (loop4): finished waiting for writes to stop [ 496.645535][ T5820] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5 [ 496.800486][ T5820] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 496.814491][ T5820] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 496.824491][ T5820] bcachefs (loop4): marking filesystem clean [ 496.935287][ T5820] bcachefs (loop4): shutdown complete [ 497.303937][ T8920] loop0: detected capacity change from 0 to 1024 [ 497.394078][ T8920] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 497.427640][ T8920] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 497.437587][ T8920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 497.459377][ T8920] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.646: Freeing blocks not in datazone - block = 0, count = 4096 [ 497.523809][ T8920] EXT4-fs (loop0): 1 orphan inode deleted [ 497.531587][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.589571][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.646: path /139/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 497.613836][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.666890][ T8923] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.646: path /139/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 497.699311][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 18: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.728481][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.768732][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.791135][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 21: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.816483][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 22: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.842898][ T8920] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 23: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 497.915692][ T8923] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.646: path /139/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 498.503649][ T8927] loop1: detected capacity change from 0 to 65 [ 498.585717][ T8927] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 498.759110][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.241550][ T8931] loop0: detected capacity change from 0 to 128 [ 499.597920][ T11] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 499.783101][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 499.805916][ T11] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 499.814544][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.825030][ T11] usb 1-1: config 0 has no interface number 0 [ 499.831383][ T11] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 499.841622][ T11] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 499.853010][ T11] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 499.864990][ T11] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 499.876781][ T11] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 499.887274][ T11] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 499.904408][ T11] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 499.917621][ T11] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 499.923893][ T5811] ocfs2: Unmounting device (7,2) on (node local) [ 499.927842][ T11] usb 1-1: config 0 interface 239 has no altsetting 0 [ 500.128631][ T11] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 500.138272][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.146622][ T11] usb 1-1: Product: syz [ 500.150958][ T11] usb 1-1: Manufacturer: syz [ 500.155947][ T11] usb 1-1: SerialNumber: syz [ 500.283487][ T11] usb 1-1: config 0 descriptor?? [ 500.302809][ T8931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.373557][ T8931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.951165][ T11] usb 1-1: USB disconnect, device number 27 [ 502.191512][ T8942] loop4: detected capacity change from 0 to 4096 [ 502.204597][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 502.214830][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 502.303065][ T8942] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 502.570855][ T8944] loop2: detected capacity change from 0 to 4096 [ 502.653086][ T8944] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 502.984281][ T8946] loop0: detected capacity change from 0 to 32768 [ 502.993870][ T8946] jfs: Unknown parameter '8' [ 503.599027][ T8942] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 503.603932][ T8944] ntfs3(loop2): Inode r=19 is not in use! [ 503.606150][ T8942] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 503.611834][ T8944] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 503.727897][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 503.753540][ T8944] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 503.774707][ T5907] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 503.937776][ T8953] ntfs3(loop2): ino=1b, mi_enum_attr [ 503.943523][ T8953] ntfs3(loop2): ino=1b, mi_enum_attr [ 503.969183][ T5907] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 503.978825][ T5907] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 503.988597][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.005174][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 504.066785][ T8944] ntfs3(loop2): ino=1d, mi_enum_attr [ 504.077064][ T5907] usb 1-1: config 0 descriptor?? [ 504.179642][ T5907] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 504.207111][ T8959] FAULT_INJECTION: forcing a failure. [ 504.207111][ T8959] name failslab, interval 1, probability 0, space 0, times 0 [ 504.221148][ T8959] CPU: 1 UID: 0 PID: 8959 Comm: syz.5.655 Not tainted syzkaller #0 PREEMPT(none) [ 504.221281][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.221361][ T8959] Call Trace: [ 504.221407][ T8959] [ 504.221453][ T8959] __dump_stack+0x26/0x30 [ 504.221621][ T8959] dump_stack_lvl+0x1df/0x270 [ 504.221789][ T8959] dump_stack+0x1e/0x25 [ 504.221934][ T8959] should_fail_ex+0x7dc/0x8a0 [ 504.222091][ T8959] should_failslab+0x15b/0x200 [ 504.222252][ T8959] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 504.222423][ T8959] ? __alloc_skb+0x1e0/0x7d0 [ 504.222569][ T8959] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 504.222721][ T8959] ? kmsan_get_metadata+0xfb/0x160 [ 504.222870][ T8959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 504.223033][ T8959] __alloc_skb+0x1e0/0x7d0 [ 504.223197][ T8959] netlink_ack+0x23f/0xf80 [ 504.223353][ T8959] ? __pfx_nl80211_new_key+0x10/0x10 [ 504.223527][ T8959] ? __pfx_nl80211_post_doit+0x10/0x10 [ 504.223720][ T8959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 504.223883][ T8959] netlink_rcv_skb+0x3f9/0x680 [ 504.224071][ T8959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.224218][ T8959] genl_rcv+0x41/0x60 [ 504.224332][ T8959] ? __pfx_genl_rcv+0x10/0x10 [ 504.224450][ T8959] netlink_unicast+0xf01/0x12b0 [ 504.224637][ T8959] netlink_sendmsg+0x10b3/0x1250 [ 504.224828][ T8959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.224989][ T8959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.225157][ T8959] __sock_sendmsg+0x333/0x3d0 [ 504.225301][ T8959] ____sys_sendmsg+0x7e0/0xd80 [ 504.225502][ T8959] ___sys_sendmsg+0x271/0x3b0 [ 504.225747][ T8959] ? __rcu_read_unlock+0x6d/0xd0 [ 504.225889][ T8959] ? __fget_files+0x3b4/0x4a0 [ 504.226054][ T8959] ? __fget_files+0x3b9/0x4a0 [ 504.226215][ T8959] ? kmsan_get_metadata+0xfb/0x160 [ 504.226361][ T8959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 504.226523][ T8959] __x64_sys_sendmsg+0x211/0x3e0 [ 504.226716][ T8959] ? kmsan_get_metadata+0xfb/0x160 [ 504.226866][ T8959] x64_sys_call+0x1dfd/0x3e20 [ 504.227032][ T8959] do_syscall_64+0xd9/0x210 [ 504.227156][ T8959] ? irqentry_exit+0x16/0x60 [ 504.227315][ T8959] ? clear_bhb_loop+0x40/0x90 [ 504.227452][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.227588][ T8959] RIP: 0033:0x7f32beb8ec29 [ 504.227686][ T8959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.227790][ T8959] RSP: 002b:00007f32bcdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.227914][ T8959] RAX: ffffffffffffffda RBX: 00007f32bedd5fa0 RCX: 00007f32beb8ec29 [ 504.228006][ T8959] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 504.228087][ T8959] RBP: 00007f32bcdee090 R08: 0000000000000000 R09: 0000000000000000 [ 504.228166][ T8959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.228246][ T8959] R13: 00007f32bedd6038 R14: 00007f32bedd5fa0 R15: 00007ffce3328fb8 [ 504.228364][ T8959] [ 504.659276][ T5907] usb 1-1: USB disconnect, device number 28 [ 504.722043][ T3512] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 504.812308][ T5820] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 504.825325][ T5820] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 504.834636][ T5820] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 504.849303][ T3739] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 504.890985][ T8961] loop5: detected capacity change from 0 to 256 [ 505.135395][ T8961] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 505.247342][ T8961] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.658'. [ 505.294586][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 505.455439][ T11] usb 2-1: device descriptor read/64, error -71 [ 505.724284][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 505.774519][ T5870] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 506.015246][ T11] usb 2-1: device descriptor read/64, error -71 [ 506.042566][ T8967] loop4: detected capacity change from 0 to 32768 [ 506.068450][ T8967] (syz.4.657,8967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 506.083716][ T8967] (syz.4.657,8967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 506.121932][ T5870] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 506.130950][ T5870] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 506.140247][ T5870] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 506.156050][ T5870] usb 1-1: config 220 has no interface number 2 [ 506.165134][ T5870] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 506.175426][ T5870] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 506.188831][ T5870] usb 1-1: config 220 interface 0 has no altsetting 0 [ 506.195946][ T5870] usb 1-1: config 220 interface 76 has no altsetting 0 [ 506.203522][ T5870] usb 1-1: config 220 interface 1 has no altsetting 0 [ 506.220408][ T11] usb usb2-port1: attempt power cycle [ 506.273113][ T8967] JBD2: Ignoring recovery information on journal [ 506.369290][ T5870] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 506.369410][ T8967] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 506.378950][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.397047][ T5870] usb 1-1: Product: syz [ 506.401379][ T5870] usb 1-1: Manufacturer: syz [ 506.406244][ T5870] usb 1-1: SerialNumber: syz [ 506.440828][ T8967] (syz.4.657,8967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 506.521177][ T8967] (syz.4.657,8967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 506.535333][ T8967] (syz.4.657,8967,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 506.548251][ T8967] (syz.4.657,8967,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 506.560907][ T8967] (syz.4.657,8967,1):ocfs2_quota_read:201 ERROR: status = -5 [ 506.568972][ T8967] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 506.579216][ T8967] (syz.4.657,8967,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 506.624539][ T11] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 506.651544][ T8978] loop2: detected capacity change from 0 to 128 [ 506.710872][ T11] usb 2-1: device descriptor read/8, error -71 [ 506.830874][ T5820] ocfs2: Unmounting device (7,4) on (node local) [ 506.976033][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 507.023310][ T5907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 507.048759][ T5870] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 507.056017][ T5870] usb 1-1: No valid video chain found. [ 507.061840][ T5870] usb 1-1: selecting invalid altsetting 0 [ 507.081040][ T11] usb 2-1: device descriptor read/8, error -71 [ 507.200797][ T11] usb usb2-port1: unable to enumerate USB device [ 507.217677][ T5870] usb 1-1: selecting invalid altsetting 0 [ 507.220578][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 507.223669][ T5870] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 507.306936][ T5870] usb 1-1: USB disconnect, device number 29 [ 507.359598][ T5907] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 507.368330][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.381360][ T5907] usb 3-1: config 0 has no interface number 0 [ 507.388566][ T5907] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 507.398941][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 507.410269][ T5907] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 507.422527][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 507.434385][ T5907] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 507.445060][ T5907] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 507.457451][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 507.468929][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 507.481484][ T5907] usb 3-1: config 0 interface 239 has no altsetting 0 [ 507.718311][ T5907] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 507.727934][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.736446][ T5907] usb 3-1: Product: syz [ 507.740780][ T5907] usb 3-1: Manufacturer: syz [ 507.745699][ T5907] usb 3-1: SerialNumber: syz [ 507.863958][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.664'. [ 507.874037][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.664'. [ 507.879573][ T5907] usb 3-1: config 0 descriptor?? [ 507.894583][ T8978] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.905570][ T8978] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 508.258450][ T8993] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 508.458259][ T5870] usb 3-1: USB disconnect, device number 20 [ 508.479981][ T8993] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 508.607808][ T8993] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 508.732691][ T8993] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 508.876228][ T8993] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 509.500924][ T9000] loop1: detected capacity change from 0 to 32768 [ 509.594679][ T8998] find_entry called with index >= next_index [ 510.744910][ T9004] loop2: detected capacity change from 0 to 4096 [ 511.261724][ T9004] ntfs3(loop2): failed to convert "0080" to macromanian [ 511.316003][ T9004] ntfs3(loop2): failed to convert name for inode 1e. [ 511.352854][ T30] audit: type=1326 audit(1758427969.692:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.401266][ T9004] ntfs3(loop2): ino=1f, mi_enum_attr [ 511.406965][ T9004] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 511.457694][ T30] audit: type=1326 audit(1758427969.762:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.483260][ T30] audit: type=1326 audit(1758427969.762:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.506497][ T30] audit: type=1326 audit(1758427969.762:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.529307][ T30] audit: type=1326 audit(1758427969.822:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.552534][ T30] audit: type=1326 audit(1758427969.892:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 511.577990][ T30] audit: type=1326 audit(1758427969.922:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15de78ec29 code=0x7ffc0000 [ 512.923933][ T9032] loop2: detected capacity change from 0 to 128 [ 513.036930][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'. [ 513.046345][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'. [ 513.339872][ T5907] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 513.429502][ T9040] loop0: detected capacity change from 0 to 65 [ 513.514091][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 513.551775][ T9040] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 513.575153][ T5907] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 513.583869][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.588555][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 513.594272][ T5907] usb 3-1: config 0 has no interface number 0 [ 513.594397][ T5907] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 513.619748][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 513.633284][ T5907] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 513.646191][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 513.657931][ T5907] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 513.668512][ T5907] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 513.680711][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 513.681780][ T9042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 513.692176][ T5907] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 513.692333][ T5907] usb 3-1: config 0 interface 239 has no altsetting 0 [ 513.814281][ T5907] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 513.823775][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.834333][ T5907] usb 3-1: Product: syz [ 513.838693][ T5907] usb 3-1: Manufacturer: syz [ 513.844559][ T5907] usb 3-1: SerialNumber: syz [ 513.856416][ T5907] usb 3-1: config 0 descriptor?? [ 513.865641][ T9032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.908219][ T9032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.040687][ T30] audit: type=1804 audit(1758427972.382:254): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.680" name=2F6E6577726F6F742F3134352FE91F7189591E9233614B2F66696C6530 dev="loop0" ino=3 res=1 errno=0 [ 514.207971][ T30] audit: type=1326 audit(1758427972.542:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.4.682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f505438ec29 code=0x0 [ 514.386133][ T11] usb 3-1: USB disconnect, device number 21 [ 515.019584][ C0] ===================================================== [ 515.026900][ C0] BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 [ 515.033925][ C0] can_receive+0x12c/0x4a0 [ 515.038477][ C0] can_rcv+0x1ff/0x3b0 [ 515.042734][ C0] __netif_receive_skb+0x474/0xac0 [ 515.048015][ C0] process_backlog+0x485/0xa00 [ 515.052961][ C0] __napi_poll+0xda/0x8a0 [ 515.057479][ C0] net_rx_action+0xa59/0x1ac0 [ 515.062285][ C0] handle_softirqs+0x166/0x6e0 [ 515.067253][ C0] __irq_exit_rcu+0x66/0x180 [ 515.072004][ C0] irq_exit_rcu+0x12/0x20 [ 515.076583][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 515.082470][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 515.088588][ C0] _raw_spin_unlock_irqrestore+0x33/0x60 [ 515.094440][ C0] hrtimer_start_range_ns+0x149a/0x1900 [ 515.100139][ C0] j1939_tp_schedule_txtimer+0xc7/0x110 [ 515.105921][ C0] j1939_sk_sendmsg+0x1bb4/0x2760 [ 515.111081][ C0] __sock_sendmsg+0x333/0x3d0 [ 515.115942][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 515.120865][ C0] ___sys_sendmsg+0x271/0x3b0 [ 515.125782][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 515.130881][ C0] x64_sys_call+0x1dfd/0x3e20 [ 515.135762][ C0] do_syscall_64+0xd9/0x210 [ 515.140387][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.146473][ C0] [ 515.148846][ C0] Uninit was created at: [ 515.153310][ C0] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 515.159966][ C0] kmalloc_reserve+0x22f/0x4b0 [ 515.164969][ C0] pskb_expand_head+0x1fc/0x1610 [ 515.170085][ C0] do_xdp_generic+0xa79/0x1690 [ 515.175137][ C0] __netif_receive_skb_core+0x2524/0x6df0 [ 515.181046][ C0] __netif_receive_skb+0xcc/0xac0 [ 515.186304][ C0] process_backlog+0x485/0xa00 [ 515.191194][ C0] __napi_poll+0xda/0x8a0 [ 515.195783][ C0] net_rx_action+0xa59/0x1ac0 [ 515.200601][ C0] handle_softirqs+0x166/0x6e0 [ 515.205602][ C0] __irq_exit_rcu+0x66/0x180 [ 515.210305][ C0] irq_exit_rcu+0x12/0x20 [ 515.214831][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 515.220611][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 515.226767][ C0] [ 515.229159][ C0] CPU: 0 UID: 0 PID: 9050 Comm: syz.1.683 Not tainted syzkaller #0 PREEMPT(none) [ 515.238531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.248729][ C0] ===================================================== [ 515.255795][ C0] Disabling lock debugging due to kernel taint [ 515.262022][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 515.268539][ C0] CPU: 0 UID: 0 PID: 9050 Comm: syz.1.683 Tainted: G B syzkaller #0 PREEMPT(none) [ 515.279438][ C0] Tainted: [B]=BAD_PAGE [ 515.283648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.293800][ C0] Call Trace: [ 515.297160][ C0] [ 515.300070][ C0] __dump_stack+0x26/0x30 [ 515.304554][ C0] dump_stack_lvl+0x53/0x270 [ 515.309367][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 515.315345][ C0] dump_stack+0x1e/0x25 [ 515.319636][ C0] vpanic+0x361/0xc50 [ 515.323788][ C0] panic+0x15d/0x160 [ 515.327867][ C0] kmsan_report+0x31c/0x320 [ 515.332502][ C0] ? __msan_warning+0x1b/0x30 [ 515.337317][ C0] ? can_receive+0x12c/0x4a0 [ 515.342030][ C0] ? can_rcv+0x1ff/0x3b0 [ 515.346383][ C0] ? __netif_receive_skb+0x474/0xac0 [ 515.351825][ C0] ? process_backlog+0x485/0xa00 [ 515.356871][ C0] ? __napi_poll+0xda/0x8a0 [ 515.361512][ C0] ? net_rx_action+0xa59/0x1ac0 [ 515.366495][ C0] ? handle_softirqs+0x166/0x6e0 [ 515.371552][ C0] ? __irq_exit_rcu+0x66/0x180 [ 515.376426][ C0] ? irq_exit_rcu+0x12/0x20 [ 515.381050][ C0] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 515.387029][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 515.393310][ C0] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 515.399253][ C0] ? hrtimer_start_range_ns+0x149a/0x1900 [ 515.405102][ C0] ? j1939_tp_schedule_txtimer+0xc7/0x110 [ 515.410966][ C0] ? j1939_sk_sendmsg+0x1bb4/0x2760 [ 515.416307][ C0] ? __sock_sendmsg+0x333/0x3d0 [ 515.421268][ C0] ? ____sys_sendmsg+0x7e0/0xd80 [ 515.426346][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 515.431334][ C0] ? __x64_sys_sendmsg+0x211/0x3e0 [ 515.436582][ C0] ? x64_sys_call+0x1dfd/0x3e20 [ 515.441596][ C0] ? do_syscall_64+0xd9/0x210 [ 515.446484][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.452675][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.457938][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 515.463917][ C0] ? __netif_receive_skb_core+0x6670/0x6df0 [ 515.470004][ C0] ? rb_insert_color+0xc23/0x1020 [ 515.475216][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 515.481675][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.486908][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 515.492853][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.498123][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 515.504610][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.509903][ C0] __msan_warning+0x1b/0x30 [ 515.514545][ C0] can_receive+0x12c/0x4a0 [ 515.519117][ C0] can_rcv+0x1ff/0x3b0 [ 515.523331][ C0] ? __pfx_can_rcv+0x10/0x10 [ 515.528053][ C0] __netif_receive_skb+0x474/0xac0 [ 515.533358][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.538663][ C0] process_backlog+0x485/0xa00 [ 515.543565][ C0] ? __msan_warning+0x1b/0x30 [ 515.548409][ C0] ? __pfx_process_backlog+0x10/0x10 [ 515.553836][ C0] __napi_poll+0xda/0x8a0 [ 515.558353][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.563625][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 515.569611][ C0] net_rx_action+0xa59/0x1ac0 [ 515.574427][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.579690][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 515.586178][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 515.592442][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 515.597694][ C0] handle_softirqs+0x166/0x6e0 [ 515.602626][ C0] __irq_exit_rcu+0x66/0x180 [ 515.607362][ C0] irq_exit_rcu+0x12/0x20 [ 515.611829][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 515.617638][ C0] [ 515.620628][ C0] [ 515.623617][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 515.629738][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 515.636313][ C0] Code: 56 53 48 89 f3 49 89 fe e8 2a 8f b5 f1 4c 89 f7 e8 32 82 b5 f1 c6 00 00 41 c6 06 00 f7 c3 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 28 40 58 95 e8 41 84 b5 f1 65 ff 0d 42 fd 75 04 74 0a 5b [ 515.656049][ C0] RSP: 0018:ffff888053d97888 EFLAGS: 00000206 [ 515.662238][ C0] RAX: ffff88823fd11440 RBX: 0000000000000292 RCX: 0000000000b3edef [ 515.670309][ C0] RDX: ffff88823fc63440 RSI: 0000000000000004 RDI: ffff88813fc91440 [ 515.678387][ C0] RBP: ffff888053d97898 R08: ffffea000000000f R09: 0000000000000000 [ 515.686459][ C0] R10: ffff88804f8990c0 R11: ffffffff8189aa50 R12: ffff8880500990e8 [ 515.694536][ C0] R13: 0000000000000010 R14: ffff88813fc91440 R15: ffff8880765d8b60 [ 515.702619][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 515.708166][ C0] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 515.714141][ C0] hrtimer_start_range_ns+0x149a/0x1900 [ 515.719877][ C0] j1939_tp_schedule_txtimer+0xc7/0x110 [ 515.725570][ C0] j1939_sk_sendmsg+0x1bb4/0x2760 [ 515.730772][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 515.736269][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 515.741769][ C0] __sock_sendmsg+0x333/0x3d0 [ 515.746574][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 515.751521][ C0] ___sys_sendmsg+0x271/0x3b0 [ 515.756370][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 515.761426][ C0] ? __fget_files+0x3b4/0x4a0 [ 515.766256][ C0] ? __fget_files+0x3b9/0x4a0 [ 515.771087][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.776351][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 515.782307][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 515.787424][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 515.792691][ C0] x64_sys_call+0x1dfd/0x3e20 [ 515.797526][ C0] do_syscall_64+0xd9/0x210 [ 515.802143][ C0] ? irqentry_exit+0x16/0x60 [ 515.806884][ C0] ? clear_bhb_loop+0x40/0x90 [ 515.811688][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.817704][ C0] RIP: 0033:0x7f1f5a18ec29 [ 515.822204][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.842025][ C0] RSP: 002b:00007f1f5b0b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.850569][ C0] RAX: ffffffffffffffda RBX: 00007f1f5a3d5fa0 RCX: 00007f1f5a18ec29 [ 515.858638][ C0] RDX: 0000000004048081 RSI: 0000200000000140 RDI: 000000000000000a [ 515.866696][ C0] RBP: 00007f1f5a211e41 R08: 0000000000000000 R09: 0000000000000000 [ 515.874757][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.882821][ C0] R13: 00007f1f5a3d6038 R14: 00007f1f5a3d5fa0 R15: 00007fffb17763f8 [ 515.890942][ C0] [ 515.894361][ C0] Kernel Offset: disabled [ 515.898732][ C0] Rebooting in 86400 seconds..