last executing test programs: 1m15.637615634s ago: executing program 0 (id=739): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x0, 0x4, 0x2672, 0x1, 0x0, 0x0, 0x0, 0x80, 0x1fd}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0, 0x30}]) 1m14.759233964s ago: executing program 0 (id=741): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m10.080222029s ago: executing program 0 (id=751): openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = io_uring_setup(0x3668, 0x0) close_range(r1, r1, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffec4, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f00000001c0)=""/4096, 0x1000}) 1m8.172960293s ago: executing program 0 (id=756): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x11, 0x2f9, &(0x7f0000000fc0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket(0x1d, 0x68cc8665bcca7775, 0x5) r6 = dup(r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x8d, 0x40000000, 0x1b}, 0x9c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000140)=0x4) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, &(0x7f0000000100)) preadv2(r7, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/128, 0x80}], 0x1, 0x40b, 0x3, 0x6) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 1m5.576828186s ago: executing program 0 (id=762): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x0, 0x4, 0x5) 1m3.204976742s ago: executing program 0 (id=765): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x703, 0x0) vmsplice(r2, 0x0, 0x0, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$kcm(0x18, 0x0, 0x2) close(r5) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.191707327s ago: executing program 32 (id=765): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x703, 0x0) vmsplice(r2, 0x0, 0x0, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$kcm(0x18, 0x0, 0x2) close(r5) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.190419866s ago: executing program 4 (id=835): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") inotify_init() r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 17.833704721s ago: executing program 4 (id=839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff82) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 17.259605896s ago: executing program 4 (id=841): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xd, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000021000101000000000000000000000001000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a4b4a3b6e6fda414b8399b7c074000000000000000032a21d97a0edabf13480ed52378964c44c2309cdd2afa0cade5ca3f5bab483cf4e1cbc4c93dd624b6431c45a3167b1fd8c2f058d0efdd6551971cccd96816d0e35f7c6e75bcfc11eb9978e35d1a1f45d2fded3718612b56fe6166fd2dc264e413da41010fddcd5f2a9c8f43aceeb"], 0x50}}, 0x0) 16.175020757s ago: executing program 4 (id=844): setreuid(0x0, 0xee00) r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x5, 0x40740) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000410101c0"]) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000280), 0x400) newfstatat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x0, 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x25b3, 0x200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x12402, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000003780)=ANY=[@ANYBLOB="63726561746f723d9a09ab132c6769643d", @ANYRESHEX=r7, @ANYBLOB="2c63726561746f723dbd3d66f12c747904653d03adc8bb2c620200000065722c756d61736b3d30303030303c089530303030303030adbfe2c6303030303030322c7569643d", @ANYRESHEX=r6, @ANYBLOB=',force,\x00'], 0x1, 0x6a4, &(0x7f0000001b40)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001780)="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", 0x2000, &(0x7f0000001200)={&(0x7f0000000300)={0x50, 0x0, 0xed, {0x7, 0x2b, 0xe3, 0x0, 0xfff7, 0xbd, 0x1, 0x3, 0x0, 0x0, 0x10, 0x400}}, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x9, {0xf77}}, &(0x7f0000000440)={0x18, 0x0, 0x5, {0x1}}, &(0x7f0000000480)={0x18, 0xfffffffffffffff5, 0x100, {0x4}}, &(0x7f0000000500)={0x28, 0xfffffffffffffffe, 0x3, {{0x6, 0x2}}}, &(0x7f0000000540)={0x60, 0xfffffffffffffffe, 0x3ff, {{0x9, 0x9, 0x80000001, 0x4, 0x5, 0x9, 0x6}}}, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19003e000000000006000000000000002f6465762f6b766d00"], &(0x7f0000000640)={0x20, 0x0, 0x7, {0x0, 0x1a}}, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[], &(0x7f0000000fc0)={0xa0, 0x0, 0x3ff, {{0x0, 0x3, 0x72cc2c2c, 0x9, 0x81, 0x9d1, {0x3, 0xffffffffffffff01, 0x6, 0x5, 0x9, 0x436, 0x7, 0x4, 0x0, 0x5000, 0x9, 0x0, r4, 0x4fa4, 0x5}}, {0x0, 0x14}}}, &(0x7f0000001080)={0x20, 0x0, 0x26, {0xc2, 0x4, 0x10000, 0x5}}, &(0x7f00000010c0)={0x130, 0x24, 0xffffffffffffff76, {0x7, 0x6, 0x0, '\x00', {0x7ff, 0x1, 0xb88f, 0x100, r6, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0x311, 0x177f19ec, 0x200, {0x1, 0x7fffffff}, {0x3, 0x8}, {0x8000000000000001, 0x2}, {0xa63d, 0x3}, 0x3, 0x7, 0x9, 0x8}}}}) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@nullb, r3, &(0x7f0000000200)) 15.181866255s ago: executing program 4 (id=847): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="050f7600031c100a08040001000f0f0500093f0000003f00000fffff000f8001000b10010c200014068f06044a1004957ea4b5017d34445930cc170dcaf1ba36f3a68c59dc9b3fa5254bec99a8b49d3a90cc6376a2f8aba83d5c9786435620b14e7337d43a1a70e48a80d620e95fa3aee600"/128]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000009000000060700000000000afeffffff0b00000000000009030000000d0000000000000905000000020000100000000c08000000050000000200001301000000050000000f000000080000000f00000002000000040000000f00000002000006040000000c000000070000000d000000040000000b0000000000000a040000000000005f3000005f00bfbe121ffc472a8a959e4499fb5d3ef445fa38862f70c425f0d5d46e4d0200003d45db469d1e2bb343d1a076b82c7b5515dc3a84423a5dd99ce41bda2fbbab6cd66d9dbe8e8ec002f6539ebc4abdde6787fc0c5b0dde7e9380c870a5f33bf5fb0a7a1bad0af0d41fd8bb9496a6b2cbdf8ab5b8394814ae3fe4f2b47a1732cf9ae9be0f5c30d31ea839caa53d6696fc84423f038428ebefb76d9dd5dd8d0d5f11006cd96bc0228c950f55a5d5756059077f6e710147c2f53608a61646c5842dce03b8d8133c3670ae51c008b57e23a0394723f96c610000000000005edfe532505cef78a35d19cb499174ba39d18156d6d348750206b9c63e74a4cf582c8846c51504f6ed05dd5b81aa9145d60c039af502a8ece0078255c652ac3a0d45e7abff8968abfda326e0d9848e0e12a7c95ced6bc11ecf1332c7b63c46f2a60dfb4abb42c9c089d13644f2422b61"], &(0x7f0000000380)=""/28, 0x9d, 0x1c, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x40}, 0xee) sendmsg$can_j1939(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0xff}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="70da1992bef10104f6c2b1eb562138050000e703", @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)="542d061aed1f083e19619f922d7dceb03407d68dbab3d3bf5efc7083dd8dd10b1290b2d665411f0c760318ac68371dbfd784ca2be90ed19307782d99562b0cedf092ac155c5461d2f65e8781ff1ea0d32fa0b9d631555300c49cae244b7051ad094937dcc79c64226fe611ee174df07af8ba7d624b693dbccaf46e45c84aae25d0", &(0x7f0000000140), 0x1003, r5}, 0x38) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2) open_by_handle_at(r6, &(0x7f0000000440)=@shmem={0xc, 0x1, {0x7, 0xab}}, 0x101000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@inode_readahead_blks}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@auto_da_alloc}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x44f, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) recvfrom$inet(r7, 0x0, 0x0, 0x10040, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073799732e9ffffff33000000060a010400000000000000000100000008000b400000000018000480140001800c"], 0xa8}, 0x1, 0x0, 0x0, 0x4090}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0xc1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000000000000000000014000500000000000000000000000000000000000c000900080000df", @ANYRES32=0x0, @ANYBLOB="e4a7924d52a5d2b004d0288d8e09a26fb8a0be6ca8e3b805670259de5409363ce5a5a9607bf9373be24dd3ff5d7b4a1fa7b669931f3b898a2aa664e6bd6635e7452786e8dfe5d6a9d03b0ef6e4750ac5a37169feca5bbcf75ea5f51e9fb2bb130d7a5ad7031b929b8146a3"], 0x3c}}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e110b"], 0xec) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") 12.21805021s ago: executing program 4 (id=855): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@grpquota}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d0, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) 9.356249201s ago: executing program 3 (id=860): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) 9.355947643s ago: executing program 1 (id=861): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1fd, &(0x7f0000000200)="$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") r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000300000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b89efe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) truncate(&(0x7f0000000000)='./file1\x00', 0x100003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file1\x00', r1}, 0x18) 8.78481452s ago: executing program 1 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000040)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3, 0x2000000}}, 0x2c, 0x1) 8.136137307s ago: executing program 2 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000800000000000800000000000000080002000100000069598cccdb60b6c588043723a9cf0d3bc7251b612fc90a9ff259fa9b60851f198788def1232bf69e720b52c335e91cef0dffd353c0759ca267d747ace035de5dbc2dde88525109c4168c31147a414623719383f07f3adc781d09d62ce097ac18724f30bcc84089f9974619b08366e95f8c89f5ac610fe9ec583ac928c2a65562e7e031dea45c93efb0f2c5ca145cc17cc83ea9d50d4728bf2e0a5f719e96e447eabdd0bd3abb38f72ba9b25290ec70c6de5e3803f4af47bd9e89cefbef44fe550c1ff2cb65d4f3280fd89a0b80a048e9f0260c90cbeb2f30d5"], 0x34}}, 0x0) 8.114583809s ago: executing program 3 (id=865): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000100, 0x0) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff}, 0x10) 7.533788067s ago: executing program 2 (id=866): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000740)={0x1f, @none}, 0xa) (fail_nth: 2) 7.367745008s ago: executing program 5 (id=867): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) close(r0) r1 = fanotify_init(0x20, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.653972382s ago: executing program 1 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40801) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r4, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x600}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 6.632692026s ago: executing program 3 (id=869): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x703, 0x0) vmsplice(r4, 0x0, 0x0, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r5, 0x25, 0x0, @val=@netfilter}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = socket$kcm(0x18, 0x0, 0x2) close(r8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r1, r6, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14}}, 0x6c}}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x2, 0x1, 0x2, 0x2fa, 0x824, 0x2e}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xf, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {0x3}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9}]}}, @TCA_U32_LINK={0x8, 0x3, 0x7fffffff}]}}]}, 0x7c}}, 0x24040084) 6.400351943s ago: executing program 2 (id=870): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000700b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 6.357219291s ago: executing program 5 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) 5.708319118s ago: executing program 2 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r0, 0x0, 0x10000}, 0x18) r1 = syz_io_uring_setup(0x5bf, &(0x7f0000000440)={0x0, 0x7aca, 0x1, 0x1, 0x294}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x4000, @fd=r1, 0x9002, 0x0, 0x0, 0x4, 0x1, {0x3}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x2000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f0000000880)=""/151, 0x97}], 0x3) write$P9_RSTATu(r4, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000300)=ANY=[@ANYBLOB="766f6c756d653d30303030303030303030303030303030303036322c756d61736b3d30303030303030303030303030303030303030303031312c616e63686f723d30303030303030303030303030303036353533352c6769643d666f726765742c766f6cc9756d653d30303030303030303030303030303030313032332c6e6f7672732c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030302c696f636861727365743d63703836332c00"], 0x1, 0xc32, &(0x7f0000000e00)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f0000000180), &(0x7f00000004c0)=""/140}, 0x20) acct(&(0x7f00000001c0)='./file0\x00') r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x420880, 0x0) flistxattr(r6, &(0x7f0000000600)=""/178, 0xb2) acct(&(0x7f00000000c0)='./file0\x00') timer_create(0xa, 0x0, 0x0) 5.274450813s ago: executing program 1 (id=873): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x7ff4, &(0x7f0000000080)={0x0, 0xc485, 0x1000, 0x2, 0x360}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002300), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002280)={0x60, 0x0, r3, {{0x9, 0x5, 0x34, 0x9, 0x7, 0x4, 0x9, 0xffffffff}}}, 0x60) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x400) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1, 0xfffffffffffffeb8}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2b) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) 5.27086001s ago: executing program 3 (id=874): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x210004c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_mmap}], [{@dont_appraise}, {@flag='rw'}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-(.'}}, {@permit_directio}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x208000, &(0x7f0000033380)=ANY=[], 0x1, 0xa83, &(0x7f0000000540)="$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") 4.748053165s ago: executing program 5 (id=875): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) unshare(0x62040200) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@loopback, 0x3}, {@local, 0x80000}]}]}}}], 0x28}, 0x4000810) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x3b81c3, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) 3.385159516s ago: executing program 5 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000800000000000800000000000000080002000100000069598cccdb60b6c588043723a9cf0d3bc7251b612fc90a9ff259fa9b60851f198788def1232bf69e720b52c335e91cef0dffd353c0759ca267d747ace035de5dbc2dde88525109c4168c31147a414623719383f07f3adc781d09d62ce097ac18724f30bcc84089f9974619b08366e95f8c89f5ac610fe9ec583ac928c2a65562e7e031dea45c93efb0f2c5ca145cc17cc83ea9d50d4728bf2e0a5f719e96e447eabdd0bd3abb38f72ba9b25290ec70c6de5e3803f4af47bd9e89cefbef44fe550c1ff2cb65d4f3280fd89a0b80a048e9f0260c90cbeb2f30d5"], 0x34}}, 0x0) 3.366683784s ago: executing program 2 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x1a8, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) 3.2839196s ago: executing program 3 (id=878): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix_mp={0x0, 0x6, 0x42474752, 0x1, 0x8, [{0x40000000, 0x9}, {0x80000001, 0xe3d0f98f}, {0x9, 0x7c8}, {0x6, 0x2}, {0x2, 0xdc92}, {0x6, 0x7fff}, {0x9, 0x2}, {0x2, 0x80000000}], 0xc, 0xc0, 0x1, 0x1, 0x4}}) 3.063086103s ago: executing program 1 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c696e6f646536342c00655d9e4bfc7653603c61402ea595826c43b900e2426c63ec8f2848ba9bf63fa83ccd1540b5629c7bd796df672ec26f60"], 0x1, 0x4421, &(0x7f0000004500)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40c}]}]}, 0x30}}, 0x0) 2.686499116s ago: executing program 3 (id=880): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) setpgid(0x0, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000810000002d00001800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x4c000) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@privport}]}}) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x7, @pix_mp={0x81, 0x3, 0x34363248, 0x6, 0x4, [{0xbb, 0x7fffffff}, {0x9, 0x5ac71120}, {0xdea, 0x1439}, {0x4, 0x7}, {0x8}, {0x1, 0x9}, {0x9, 0x5d}, {0x6, 0x8000}], 0x7, 0x0, 0x3, 0x2}}, 0x4}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xfff7, 0x0, 0xff, 0x2}, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = socket(0xa, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) 2.459111723s ago: executing program 2 (id=881): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x2800000, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0xfd, 0x5b5c, &(0x7f000000b980)="$eJzs3X+QHFd9IPDXM7Pa2V39WMkmFjaW1sK6OAailX8VP1Kg5BJI2YQSRYpYPoG9tlaOQJJV+hHbggQ5Z3OobChIkUpM8odDGe4AhXIVXLDiwtj4JB+/VL5writwHeQMf3Dl+KyKbeGiODa1M/1mZ3qmt2dnZ9eS/PmUtD39pufbr1+/6env696dAAAAwCvC8bv2nXrX+b/37T+ffPEjv/+Pu+4II+VaeTUuMJpOb3u5ashiGqysrk2z/eLXP/TFn47d9DvfemD4cy8d23bR9h/+7jk3PfSBq4/e+zePvrDsq796uihu7E+XzswnzyYhVL9+8i8/euw7502XJcunf5YOhbAyWfXoyiSEO5tDjP8ihLAtnVmdif+VFy/fXouRKV+Rmdffz07lLperpn3k4KnJtGTtl/9+4Mgzh2YWSapN/SmE5Tc0v34ghDCU/p82mE5jf1yfTjeHEIabXvfGgnq9tot6T9uQKY/zF6TTJel0JCdOJfP8usx8KbN8dj4ayEyHZ6l7P+TVo9fliizNzGePK/OVV89YvjKdfi2dXjrH+OV0G8pJKCWh0qj+zmSmj4Sm/ZaEpLYvq435UmPfhnT7M/NJZr6UmS8PZLartt60o5WTpLU8Lpcpj4fjSlp+UfOxOmskhPc0zTYv9+pYlr5RX8ouU20LlXkwsx2hqV4n8+qySEpNx6BO5Y0dn+6MkbRsJFnV9pqpDuJzx7bcs7689ZvHR3PqkTyQpPGTnuIf/O7Kpe//0uED2c/1RvwbSmn8Un788/Pj//iaE89dd/izn8mN/8kYv9xT/S97ePjZax67a11u+5yM7VPpKf7E049/fO25Nx7Jrf99MX61p/ibjp4YXHbq4Udy6z8e22eop/hPveXtP/nCkw8+kxs/xPjDPcXfenTPJwbXnLokN/4jsX1Geor/4+ePXPWDNWt+NpYX/4kYf1lP8T9/aPDN96+4++rc/bs5ts9oT/HfefFDdy499eCFecfO5L5+fXICvDKdk55jfSydP3jq1teFH/32lju/N7c8c76a8oW/HqvUz/mWpv+X9XNFmZPPbJ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP3wqtf993f8n/eOPltJ5wfTB0+V6tNYviSEZCiEsG//xN79O3bfPPaBWw7s3T2xc2xi/9jk7v17bx+74vVjeyf37Jy4ffrZ8TdcXn/dqpDUp8mFbesenJqaKo22lsX1/fuLj/xo/Rv/77+EMP6q76+p5NZ/w7277j+3w8+MZNPU23YdeNf3r/y7dLtG03qNdqjX1NTUVMip1/+79pf3/8XJn14SwvivzVavx5966zdaKlQrmImTKg2GeoUGk+GO9WjUOq1PbK/K9h07J8dnb9/p15dztuM/fOiZX2y/7VO/rLdvNXc7umzfoU1TO0t/teWd//+vPlwvKKrXy7Xfp9u7nBNzul5xK2L9YvtV0/Zenm7X8pztquRs113fe+TJr59/+IVDYbzy/Nr2fV20XQNpBxhIXt3VeuMahpOVLeXVdPm4x+PrNuzftWfDvtsPvmHHrombJ2+e3P2mjVdsvGr8yquu3FDb8g193v64/n/X5fYvTn9a8SeHvhZ/dtefWuu1ZM7tMV2v4vZorlHe+y95z0c//aZ7H3tXvaDouDKcLt04nqTT4en9vDE09bf2tuq0XUX7J4Qw1qkdnnvh6nDe/9pxZ9FxqHnPNP/MSDZNfWfdv/7dG/929W/VCxblON9coR6P841az9Sn1l7VdH9MnabtO5geTQeTkY712vidxwbuOf4vf9qo35Il4baJ/fv3bqz/XJrWdGlyQcd6ZUvjdq2t/SyHtFlCo5t26K/TBkK9ftnjZ1w826oj6XMjyaqO25UVnzu25Z715a3fPJ7X0skD9TUOhWX1afKanCV3Zl5YblS40/pP1/dfUf9Y846//ep7v/oPV7T1j8vqP4u2K8nZri8/+flPf+5T/+kf+rdd73jridF//d9/vL5esAjHlTCv40q5XpFGrdP6JM3HlctCKHr/rQ2dtyP3/VfqvD1F77/semaW7xxvLDM/Eso9vV8ve3j42Wseu2td7vv15Gzv1+aN/XDL68oF79d59Z8PTj/qz+dS9v2VVFrrsXDvr5aOkmya+tbHzjn06Ec2n18vKPq8bCzdqV9f3kX+kbNd37juB2tuGfuP/7N/x40vvv4r1/9wYtOf1Qt63++xLv3Z79W0fas57duodcw7m9v3N2+6Zee2enlROy/e+e9w5vw3nRbkP/FQsu/2gx+c2Llzcu++7rZr+nVJh+3Kfp7G9WRbudfP03h0W1WwXaW27Vq4B920V7fvt1j/bT23V+v7bSQkPX0uHPzuyqXv/9LhA6Ntr0pXdEMpjV/qKf6Prznx3HWHP/uZ3PifjPErPcWfePrxj68998YjufHvS9L41eL4y0Nb/E1HTwwuO/XwI7nxx2P9h3qq/1NveftPvvDkg8/kxg8x/khv7f/8kat+sGbNz3LjP5Gk65k+RwrhKy9evr0+n4SB9P0W6zHQUq+QnU8y86XMfLl5vhRHEdIVlJOktTwul5Zf1FSXTv4opzyehVVX16cvxfmQfTB7+emm1HTs71RedJ4KAHC2i9f/4zlovP4/mZ4o5Y80wIz55mGrc+LGPGxmPKf1GuvqNH58fRwHXPObYXx6esdY/UR/rtcR4vshO84Z13PJa1tjdByfONq8ktr628Y5i8bf12XmY73q4+WVpjw01Z7XVEIX4+/t65l9/D2z+cXXs8Y+1latsaZxq+z+G0hHzDrd75Cpb2U6Ql7/yI6Lxfs51iwPm2vr67J/ZO+jifshex9NXM/5mQNnr/fR5PWP0fZ2aKlX7B9xuVn6R63Knfff0qbH7fsvzNK+M/uvbX3Zetf23xz2d3V6+Xleny0VXZ/tw7hhx0Pa4o0bLuz1sNNiXLJD/EUel1zaFj99g53u44axPLZTpcvxxPfWJwPZ8n6NJ8bDRazXyVnqshiMJwJnq5j/x8+I6fx/+gT855nlivKU7Fl/jJd7n1DOTdhFeUf7fXrDPX2Obz265xODa05dknue80i39+ntaZkbLrjvp6gd12fmC9sxZ4CmKN/Lrie/3evbn70vYyQs66ndP3/o3jffv+Luq3PbfXP9g7S43T/dWsuCdl/o+znP/PsM5Asd458h9zEUjZ/l5yPlRj0WJB9Jb3xaqHzkD3PK55qPDLc9aGxXzembj8x8kLbkI20ZGgBAXcz/G9fP0vz/n+OJRXoeUZS3XpqZj/HW/jw9Yc3mrTnnJ3l56x+k09syy4+kv1Ex1/Pmd1780J1LTz14YW7ecl+3eeh/aZkbLcxD55c35+YRm/tzv3huHtHIs+aXJ+bWv5Enzi9Pz7lM25Snzy+Pzm2fRh7dOg7w6RMzmcZs8dNxgE6XGurxG+MAfcxzfzWz0OLluQXjdZmVxdlux+u6zqMHMvu3xzx6umRgeet2tubFw/3Jo9Nfn12oPPo9OeVzzaNH2h40tqvm9M2jW8uTqRX1goGm3SenBgDOAjH/j6dxtfx/MITH4gJD8cH8rrPn5gUt5+3PDzU9NdRN/Hjenv17II34TyxIXjkTv0/Xf3Pzjj5d/y3OWxc6r+9+XKL5lobuxyXO9Ou/Cz0uNFr7A54LNU72st3vuiB58T83HnWdF6crPevz4lggFwYAOCPF/D8m2/H6/2OZ5eabn7TlbwP1U8iZ/OTMy8+bl+tHft7pvHsR8vNrw6LcN1ANyeCZnJ8vxvhX7/d/F49/Lex9MmdX/j9jztfF6wfSl6bO4vy/Vmf5PwDAGSnm//HXHuPf//tv6Xz279Z3maffl72d13X0RbyO/szr2+K/cq6jn+l5ep/H2WL85vsAzuBxgPL8xwGGFv3++Ka7ms6mcYCagWAwAADgDDBQy5Taf8/+fek0+3v2eb+Xf13O8t2qpKfHN+7fOzl5/YE92yb2T16/+5Ztk/uuv3Xvjv37JxvnzvPLG3PzljRvHAiVtD06L5fN21akfw9hRc7fQ8guH8NeUHvQ/nf8sqsdKvg7AjP7r7v65u2/0izLd+ofefs7L/4f5SwfNfb/TX982fXb912/Y/eO/Tsmdu44ONm63GjtN6ln+97M1j/FHK9Tzul7vNMfS74RvzUzozT37++Mu6eXery1UY9SWz0G0vbI+372JFOPlWlNVuZ9/0FOvb/9P/7iTy6e+uUXQhh/Vfk1c613a8hNU//12sk/2H/8+3um61+atf6NJdN6FX1faXb5uD2Vnbfs2/+67bcc2J39RsnexPGMUmM+ZzxjqDHf230N6du/3OX4xNac8rn+/n657cHpqevxCQAAWsTr//F8Nl4//FR6AhXLC/P03fXl5nv9ODdPH+8uT89+L1lRnp5dPm5vt3l6dZ55enb9RXl6p+U75el5eXde/D/MWT6jMCvovp90eZ9Huen3LCppO3zp8IHcfnJDd/0k+30GRf0ku/xc+0kyz36SXX9RP+m0fKd+krff8+K/O2f5PEX9odLoD/O7Lye3P3yyu/7wG5n5ov6QXX6u/aE0z/6QXX9Rf+i0fKf+kLd/2+O3Hgr6M/473TFq/WLy+ltv2fvBpuUW+vsvQvstGd3Ub8nMaxf2+z961X37Lux9X/OvfwibaiV59Y/XB5bMqf7d3lc2//oXtf8c7itbHtruK8ut/xPzGwnrvv5d/v5guVZwR3yu2+93ychbvP313Y7Xzsz3Nl6bdrui+89q47i5f+U3hC055XMdx13S9uD0ZBwXXj4x/49nczH/vzud9vsy0Jn/PWk9/J58PAb7HrP89u/yPOa0/DzPqXPox+d59pK7z3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs8JgZXVtevyufafedf7vffvPJ1/8yO//4647fv1DX/zp2E2/860Hhj/30rFtF23/4e+ec9NDH7j66L1/8+gLy776q6cLA4/WflYuTWerISTPJiFUv37yLz967DvnTZclIYRyMnoohJXJqkdXJpkI478IIWxr1LP1ya+8ePn26ekddw+2lK/IBMluVxgpx/o01zOE2wq3iDNQNe1nB0/d+rrwo9/ecuf31n757weOPHNoZpGk2tSfQlh+Q/PrB0IIQ+n/abG3rY4vTqebQwjDTa97Y0G9Xttl/TfkzF+QTpek05GCOPH5dZn5Uma57Hw0MDOtvcWatjU2TbWgCnOSV49elyuyNDOfPRjNV149Y/nKdPq1dHrpHOOX4/8klJJQaVR/Z1LrI1NTU1O1+bjfkpDU9mm1MV9q7OOQbn9mPsnMlzLz5YHMdtX6ZtrRyknSWh6Xy5THw3ElLb+ooGO9J6f81em0mr5RX4rzIfugbqTtQWO7amK9Ts5Sl9R/7lxcKX5lF0pNx6BO5Y0dn+6MkbRsJFnV9pqpDuJzx7bcs7689ZvHR1uWnHlt8kCSxk96in/wuyuXvv9Lhw+sztnO5IZSGr/UU/wfX3PiuesOf/YzufE/GeOXe4p/2cPDz17z2F3rRvPin4ztU+kp/sTTj3987bk3Hsmt/30xfrWn+JuOnhhcdurhR3LrPx7bZ6in+E+95e0/+cKTDz6TGz/E+MM9xd96dM8nBtecuiQ3/iOxfUZ66z/PH7nqB2vW/GwsL/4TMf6ynuJ//tC9b75/xd1X5+7fzbF9RnuK/86LH7pz6akHL8w7dib39euTE+CV6Zz0HOtj6XyveWaOoW7r0ZQv/PVYpX7OtzT9v6zrrZm76fUsX8D4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcnf7pw1e879q3vXtLJQkhyVlmqoP4XHnJpk1jPax34unHP7723BuPNJet7iEOAAAAUCzm4aVGSTWsDrcmQ+GCjsvHMYIL4lzSWp4dQ4hxsmMEvcYpdYhT6iFOuU/1qfQpzkCf4izpU5zBPsWpFsSphu7iDM0SpzLdA7qsz/Cs9ek+zkif4iztU5xlmRC9xlnep/qs6FOc0VnjdN8PV/Ypzqo+xTmnT3HO7VOcV/Upzq/1Kc55fYqTHVOeaz9cli55fl6c2oNyYZxKUm480Wk8/bx0PRfOcz0jBetZVvR53OV6hrpcz2szryvNcT3VLtdzxTzXk3S5nt+Y53pKBeuJ/fa2bP3ieuLczHqyH401Mc7t3cfpWN8Y52BOnCTzwqI4H+pPfbKngT1v15/2Kc6f9SnOR0Lryelc4wB0K+b/M/neaBis/FYYTo842VGAmO+urf1s/7zLOyDFeK/JlC8pipdN1DPx1s61fm2fHK3x1mXKB1riVRr5yCzxqs3x1meenG1737Kpc92a412aKR+cJV7LBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAIvinD1/xvmvf9u4tIQnT/zqa6iA+V16yadNYD+s9tuWe9eWt3zzeXDZY6SEQAAAAkKeR6sc8fKDxVDUMVjaGwWRJywuq6ThAtT5bKo/WH6xZHjbXAo6VavPDycrZXhcq6es27N+1Z8O+2w++YceuiZsnb57c/aaNV2y8avzKq67csH3Hzsnx+s8QBgvihRBqww/7bj/4wYl/Y9fuYuQqyweAP2dmdmZY6J/9y9fQ0GVSCkFBLHUxoIQ9iYkkfDRsSMwsupJGSiQutIGWIK5QIyBEYwJpQmq4sAaJIPGGDyFGPtIEgyiJWxsDqFzohQYUA4QLAxmzs3Pma3c664hsgd/vYs6Z533e93nfA2nynNnZ2a3XXrcY7N1/pTmv0n4AjXnjZ8TGhes3m/v/yIB6uSX1/nc3B/9PCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7735uYmZ2uTU9GgSkSyfctof6ktlg/limlaHqPvFx7d/rzT+1qmdsVJhiIUAAACAgbI+fKQVKUepkI98HN/4tj46BqLd9wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8+83MTM7XJqenDk4ikT059GdlYvpim1SHqvvzGg596YXz8r52xyhDrAAAAAINlfXiuFSlHJU6KkeT4hc6/Fc3eDaztmb+Y15ats26Feb3vDvrlnbTCvFNWmPfRAXmbm9cbAgAAAN7/sv6/0IqMRamwZkk/nPX/g/r6LO/Enrx881rtTDqo4kqSAAAAgBXI+v9SK1KJUqHS6tdX2u+vb4caP51n8wf9bp/NP7knL5s/6Pf8i5tXv9MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPvH/NzETG1yajqfRCR9curLyMbyxTStDlF30xOjf79w363rO2OlwhALAQAAAANlfXi79S5HqTAaI3F4o+8fP/+ehz//8KMTEbHY5heLccOWHTuu3bTwGZuyvDOf2zfy3Wde/caSvDMXP1ftgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLtmfm5ipjY5NX1YEpH0yakvIxvLF9O0OkTdlz7zuT/ff+CxVzpjlSHWAQAAAAbL+vB271+OShSjGMc2vnX2+gtyPfP7vTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjiu+9qNX90yO7v1Wjerc1PPRxwC2/gvb7L/nQ6V/bz/b8qrvY3V/XcJAAB4950YSdT/Q8ddstq7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXzcxMztcmp6XISkfTJqWdK7UA2li+maXWIuunjz5fWvPXEU52xyhDrAAAAAINlfXi79y9HJUZiJI5pfFvunUC9o/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPnzm5yZmapNT02uSiKRPTn0Z2Vi+mKbVIeret2vPp+898jsXdMZKhSEWAgAAAAbK+vBiK1KOUuFjUYoTmt9nuyck+eZ1+fcC7Xnbu6aNrnjeXNe8/MHmJYWI1rzbe05WaJ5mcV45W29s8dqqV23PyzXnVTvmVaJVvtqa13hYu7uqrRlwvqVPHgAAAN47Wf9fakXGolQodfT/P25eD2te+/W5ufd24wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAIWd+bmKmNjk1nSQRSZ+c+jKysXwxTatD1L3x1/9/xJd+csfOzlhliHUAAACAwbI+vN37l6MS6+L/Yl2j74+x7vws7x+1t++9659/OTVi47H7xwu9y/4gu/nlS+c92fsRkevOzkUc2ayX9Kn3q9/edf2G+tv3R2w8Jn/Cknpx8HrdS6b1R2pbL97xzP7tAx4OAAAAfEBk/f9IKzIWpcI1ffv/rPMe0P+3NBrwI6/f9bOjm5/NjrxnRm6sWS/Xp95nNzz4p5PP/turC/3/0nofb919Ys/V9x7dVXAx0iNJ65NX79y8/6y9uezUi/XzPfWz5/KFr7/yrytvuPPtxfrlKDfja3u2slht6WdP+Ujrs7m7py96pxbd9Qt9zn/rb5468Iu1d7y5UP+NE0db9U+J5eovnrzQt34cltZHL71t9zl79m3urh8R1eXqv/bmBXHc76+6pff8o3Gga+HOJ9/52fsA0vpz61/fe/Y9lXO76yc99bPn/9MD9+3+0Z3ffjSrn/2tyKknxQrr53rqP3v7UbuevvmStd31c33O/+RlL4xvq37rd73nv6Jr1ULfXSw9/wOnP3T5i1vSm3qHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPljm5yZmapNT07kkIumTU19GNpYvpml1iLovX/j8a5fd8cPvd8YqQ6wDAAAADJb14e3evxyVKEYxRht9/yO1rRfveGb/9hhbHE2a18Lstut2nHbltp3XXLFKOwcAAABW6uULk0b/X2hFxqJU2BAjzf5/8uqdm/eftTeX9f+5hWsSEVdeNbt1Y7Tynr39qF1P33zJ2tZ7gojGnwWUF/I+2c47/7znx17/41dOXjZvUzvvufWv7z37nsq5WV505p0ZrfcTD5z+0OUvbklvau2vM++ML2+bbb6eyNYdvfS23efs2bc5l73HaF5Hm+tmebO5u6cveufuudxYlBbG8828cvPcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBS83MTM7XJqenIRySNSH5JTr1TM5CN5YtpWh2i7kUbfn7LEW89tq4zVioMcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg3O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdivv9C2qjgO4Ocm7Zo27dZuglWx66aizIcNBRF9UVGRTWTg02TIdHMPoiCIKPPBTlZxzH8vgtOXISqoVQYTXB2OTWnFf8MXH1RQmD4IY1jQhuGDStJz0/Y2t0lDfdB9PhBOzrk33/vLOSc3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F/S1TFYaydHH63cdfFtXzz9wPRTd3z08N4rn3znl+Gdt3x+uOfNcxO71u3+/tY1O489uHn84Gsn/+j74K/TTYOfmGk2xG4phORsEkLp46mXn5n48sLqWBJCKCb9IyEMJKtPDiSZhE1/hhB21eucf/DI9LW7q+3eA13zxldlQiZHO0MIs+8rlItpPTP659fL/0sp7rM9lcevDj/evG3f12vff69z7MzI7ClJ9Zxi3E8hrNxR7aYHq7unOz6q0t02mL44tltDCD1zrnt9k7oua7H+jSFUMv2aS2K7IrblJjnp8fWZfiFzXraf6sy0PQ3P6m5SRevy6mh6Xpsl9Gb6yYr2cvLU69zYeHwgth/GdsMS84vpIwmFJHTU76UPJbN7JMxZtyQktbUs1fuF+tqGuK8z/STTL2T6xc7M+6pdN260YpLMH0/Py4ynt+OOOL5u7r26gbtzxi+KbSl+UM+l/ZB9MqO84En9fdWkdU0tUksDrW7jJQV2LTJeX/i4GOU4Vk5WL3jN3w2kxya2PXdFcfsnk/05dSSHk5iftJW/56uB3nvf3f/YYF7+jkLML7SV/9OWU7/ds//1V3PzX0rzi7n5jS6SDl9zvOfslk9H1+fOz9Tsz5lW6k9iPz123+nPnl97wf1jjda6lnkonf9Si/NTqo2kx24aP9XVVzl+Irf+Ten8dC95/l/sDOGHG2//+e1vj57JzQ9pfk9b67t9/JEXuoYqV+Xmn5j5KJRrO7SN/fP72HXfDQ39OpyX/006/30N8pOm+W+NHLzhjVUHNufuz63p/PTH/IVfbIvl33n5sX29laOXlsJI4/xDy35rAjivrIm/sZ6N/Wb/M49MF+b+z1w2c/4vvDLcMfMN1Bsffct5oYzqdVb+i/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAA///TBANy") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff00000900000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000) fallocate(r2, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r4, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_NAME(0x18, &(0x7f0000000080)=""/210) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x1, 0x2, [@multicast2, @remote]}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x200, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000280)={{0x3, @name="743966052d165c69032be1903b94bb3abe031873e9b5c942b9e618a7ba01cc41"}, 0x8, 0x8000, 0x5afa}) 2.452366117s ago: executing program 5 (id=882): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x401, 0x30314247, 0x30, 0x5, 0x3, @discrete={0x5, 0x7}}) r2 = socket$inet(0x2, 0x1, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r5, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @v={0x4, 0x4, 0x6, 0x1f, {0x37, 0x3, "9b7db16c28187c73"}, 0x1}}, 0x12) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37daeed337490ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581100000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7000, 0x3, &(0x7f0000ff9000/0x7000)=nil) 1.372788011s ago: executing program 1 (id=883): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000280)={0xfffffffc, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[], 0xa) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 0s ago: executing program 5 (id=884): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0x1, 0x65e, &(0x7f0000000e40)="$eJzs3VtrG+kdx/HfyLKsuBBKW5YQcniSdMGhqSLJGweRQquORvZsJY2YkVsbCku6sZcQOdsmKTS+WXLTA2zfwN7tzVL6Igq97rvoZWFp7wq9mTIny9bBkmPF3s1+PyaeRzP/mef/zCjzZyxpJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMtulMsVSy23s7llJrMbvtc+ZnmytUXdThq3x3T1xZF+JSv6p2JRl5JZl743WPxO9OumriSPrqgYTYra/9Y7337w3XwuW/+YhF6HQmmGbRbSJI15/nL/ycN+f+fZnBP5ClBuhqB1p+MGntuurzvGDTxTW1sr391oBqbpFhRsBz2nbWzfyfU836zYt02lVls1Tmnb2+ysN+otJ5t5/4fVcnnNvL+U7tm775cCe8NttdzOehwTLY5i7ptPf5mEOPW2MbuP+zur05KMgiqzBFWnBVXL1WqlUq1W1u7V7t0vl/MjM8pDNBIx9yctvmbmd/IGTikX1f9/WlJLRXW0qS2ZsT+2GvLlqT1heSqr/+/edY7t93D9z6r8pcHiy4rr/7Xk0bVJ9X9CLkYmXmHcEmvC/Nf7ea6X2tcTPVRffe3o2Xy2e31+Gb7Zn3UpL7kK5MlVW3Wty5FJ5xjVtKY1lfWBNtRUIKOmXLXkKNC2AvXkqB0fE1+O6nErsiJbt2VUUU01rcrIUUnb8rSpjtbVUF3/DcNwV4/j/b56TI7KgiqzBFWPCZpU/3/1SZL11Ppvifr/VsvOX7PEAOcuTK//T+j6m8kGAAAAAAC8CVb813crfu3+qqRQTbfllM87LQAAAAAAMEfxK/9Xosli1Loqa8L1f3j2uQEAAAAAgPmw4s/YWZKW4zf1W4NPQs3yJoCFM0gRAAAAAACcUvz6/7WCFMb3Xrsu60TX/wAAAAAA4Gvgj4fusZ/P7rEbZi/r5yQF3SXrb/9ekr9ovepufd/aq0dL6ntpzMg7AHrNy9bF9Ea98aQgKX5kO1esq0lQehNMK1v9y91p9/q3/KEECgvZny+mJbCWTx/pU91IYm4Uk+mj/ZziJUkvy0235ZRsr/Wgonr9Yq7nbPV++/Tx7yT/YJy7j/s7pQ8/7j+Kc3kVzXq1F+XxyZF0ctNyeaF0X1wdO+ILamZd/qnTXrbifsvZ+BdU38sd7mi28f9eN5OYm8vJdHlf6Z6Ix1+Mxl8pxYdsMPpoVJ/9ZTD6yvDIxx2ICVkU4yxuJTG3Vm4lkyy/NIsfLEjV0vAxKERPwcG+qB7OYvq+sP4zsi+mZBHti9Uoi79HGxo8E45ksXqyLEaOCACcl91BFYpvYl4sDt9jf7juvs5Zbnp1/8nRXl58FiYfOFyQ8ulrE8f2UlR0Rl+Jt62C4hNr/vLBWXbvRnZGL6d1pagJZ/TyKapb1NdfB9+BlKY9Ulf+F4bhg0rc758P+k2q6ufRCp9P7DdoVReiEd59sffr+Ab4kY92Ptp5Wq2urpXfK5fvVbUYDyOdUHsAAGNM/46dqRHWewdX1Y/+9W7SOlLxvnPwloKSPtTH6uuR7mRfIXB9/FaXD70N4c7oVWsUe0Eajq3ozsSruriWJrG/2C78OAmKfy8qW+VopR5sd/WNHgMAAM7azVramFCHZ6n/d+Lrbkkrlw9ddx9csw/V8uFvCJ5Ucytntg8AAPimcfwvreXeHyzfd7sfVGq1Sr234Rjfs39mfLex7hi303N8e6PeWXdM1/d6nu21TNfXkttwAhNsdrue3zNNzzddL3C3TNNtOSb96vfAadc7PdcOui2nHjjG9jq9ut0zDTewTXfzpy032HD8eOWg69hu07XrPdfrmMDb9G2nZEzgOIcC3YbT6blNN2p2TNd323V/2/zca222HdNwAtt3uz0v2WDWl9tpen473mxJ4Ym/6BAAgLfR85f7Tx72+zvPJjXiK/opMYNGYdwGs754xRkAgK+G0So9UfFMEgIAAAAAAAAAAAAAAAAAAAAAACOmf6TvhI3FcR8WlA7m/ObiTNuxNO/ETtLIvf7q/zgm5sLBnGz3H455dQ4jVdLIjy6ypFMdggsn+djoHBo/2k326MSYaOHYRUsHxyI///8OUePpFxMWhWEYHr/60tF9WJj9oOQlPSuc4hCcz/kIwNn5fwAAAP//yvQ+2w==") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) utimes(&(0x7f0000000180)='./file0\x00', 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x2a, 0x4, 0xfffffffd, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000540)={[{@creator={'creator', 0x3d, "9a09ab13"}}, {@gid={'gid', 0x3d, r6}}, {@creator={'creator', 0x3d, "bd3d66f1"}}, {@type={'type', 0x3d, "03add8bb"}}, {@barrier}, {@umask={'umask', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r5}}]}, 0x1, 0x6a4, &(0x7f0000001b40)="$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") socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.047935][ T7788] fuse: Unknown parameter 'group_i00000000000000000000' [ 403.160888][ T11] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 403.364562][ T11] usb 4-1: device descriptor read/64, error -71 [ 403.396014][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.660962][ T11] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 403.824596][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 403.856748][ T7790] loop2: detected capacity change from 0 to 32768 [ 403.934360][ T11] usb 4-1: device descriptor read/64, error -71 [ 404.085208][ T11] usb usb4-port1: attempt power cycle [ 404.467714][ T7799] loop4: detected capacity change from 0 to 2048 [ 404.551700][ T11] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 404.575784][ T7799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.591737][ T7799] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.629302][ T11] usb 4-1: device descriptor read/8, error -71 [ 404.753734][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.894511][ T11] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 404.973556][ T11] usb 4-1: device descriptor read/8, error -71 [ 405.082939][ T11] usb usb4-port1: unable to enumerate USB device [ 405.109488][ T7811] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 405.219219][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 405.486578][ T7805] loop0: detected capacity change from 0 to 4096 [ 405.928698][ T7811] loop4: detected capacity change from 0 to 32768 [ 406.050841][ T7811] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 406.563594][ T7811] XFS (loop4): Ending clean mount [ 406.706476][ T5808] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 406.769785][ T7828] loop3: detected capacity change from 0 to 512 [ 406.912049][ T7828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.538: bg 0: block 393: padding at end of block bitmap is not set [ 407.007052][ T7828] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 407.158184][ T7828] EXT4-fs (loop3): 2 truncates cleaned up [ 407.166270][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.382567][ T7837] loop2: detected capacity change from 0 to 1024 [ 407.437672][ T7837] EXT4-fs: Ignoring removed nobh option [ 407.474470][ T7840] fuse: Unknown parameter 'group_i00000000000000000000' [ 407.494338][ T7837] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.581137][ T7837] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 407.634661][ T7837] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.541: couldn't read orphan inode 11 (err -117) [ 407.657066][ T7837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.825993][ T7837] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.541: Invalid block bitmap block 0 in block_group 0 [ 407.882946][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.906969][ T7842] EXT4-fs error (device loop2): ext4_nfs_get_inode:1525: inode #11: comm syz.2.541: iget: bad extra_isize 65535 (inode size 256) [ 407.984155][ T7837] Quota error (device loop2): write_blk: dquota write failed [ 407.991984][ T7837] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 408.002449][ T7837] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.541: Failed to acquire dquot type 0 [ 408.098007][ T7845] loop0: detected capacity change from 0 to 2048 [ 408.836506][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.843248][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.936112][ T7846] loop1: detected capacity change from 0 to 40427 [ 408.984993][ T7846] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 409.050163][ T7846] F2FS-fs (loop1): invalid crc value [ 409.060149][ T7845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.074109][ T7845] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.406342][ T7846] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 409.423115][ T7846] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 409.802732][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 409.967607][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.485053][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 410.841879][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 411.084740][ T11] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 411.093634][ T11] usb 1-1: config 0 has no interface number 0 [ 411.099913][ T11] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7 [ 411.111505][ T11] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 411.120973][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.188451][ T7862] loop3: detected capacity change from 0 to 2048 [ 411.287359][ T11] usb 1-1: config 0 descriptor?? [ 411.339066][ T7862] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 411.353917][ T7862] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 411.363059][ T7862] UDF-fs: Scanning with blocksize 512 failed [ 411.369960][ T11] HFC-S_USB 1-1:0.170: probe with driver HFC-S_USB failed with error -5 [ 411.506130][ T7862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.522180][ T11] usb 1-1: USB disconnect, device number 18 [ 411.649894][ T7865] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 412.187576][ T7865] loop1: detected capacity change from 0 to 32768 [ 412.657841][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.991996][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 413.111434][ T7869] loop1: detected capacity change from 0 to 512 [ 413.495408][ T5892] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 413.582162][ T7875] fuse: Unknown parameter 'group_i00000000000000000000' [ 413.716927][ T5892] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 413.725847][ T5892] usb 2-1: config 0 has no interface number 0 [ 413.837388][ T5892] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 413.846866][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.855282][ T5892] usb 2-1: Product: syz [ 413.859623][ T5892] usb 2-1: Manufacturer: syz [ 413.864552][ T5892] usb 2-1: SerialNumber: syz [ 414.053637][ T5892] usb 2-1: config 0 descriptor?? [ 414.132180][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.142606][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.153075][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.163354][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.173990][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.184300][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.194727][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 414.345642][ T7882] block device autoloading is deprecated and will be removed. [ 414.497797][ T7884] loop3: detected capacity change from 0 to 2048 [ 414.525529][ T30] audit: type=1326 audit(1758564850.252:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.1.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598ed8eec9 code=0x0 [ 414.765096][ T7884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.777971][ T7884] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.975446][ T7898] __nla_validate_parse: 59 callbacks suppressed [ 414.975580][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 415.219026][ T5892] usb 2-1: non-Atmel transceiver xxxx0098 [ 415.364674][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.845257][ T7903] loop4: detected capacity change from 0 to 128 [ 415.999292][ T7906] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 416.273446][ T5892] usb 2-1: Firmware version (0.0) predates our first public release. [ 416.282378][ T5892] usb 2-1: Please update to version 0.2 or newer [ 416.357833][ T5892] usb 2-1: atusb_probe: initialization failed, error = -19 [ 416.781427][ T7906] loop3: detected capacity change from 0 to 32768 [ 416.941689][ T7906] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.206002][ T11] usb 2-1: USB disconnect, device number 10 [ 417.617838][ T7916] loop2: detected capacity change from 0 to 40427 [ 417.693705][ T7916] F2FS-fs (loop2): invalid crc value [ 417.845722][ T7906] XFS (loop3): Ending clean mount [ 417.981360][ T7916] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 417.999182][ T5816] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.014070][ T7916] F2FS-fs (loop2): Start checkpoint disabled! [ 418.033603][ T7916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 418.064508][ T7932] fuse: Unknown parameter 'group_id00000000000000000000' [ 418.362465][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 418.574921][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 419.458183][ T7943] loop4: detected capacity change from 0 to 2048 [ 419.573542][ T5892] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 419.583055][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.591506][ T5892] usb 3-1: Product: syz [ 419.595859][ T5892] usb 3-1: Manufacturer: syz [ 419.600745][ T5892] usb 3-1: SerialNumber: syz [ 419.682127][ T11] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 419.803695][ T7943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.816490][ T7943] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.910993][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 420.002206][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 420.099802][ T11] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 420.109219][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.353819][ T11] usb 2-1: config 0 descriptor?? [ 420.524163][ T11] gspca_main: sq930x-2.14.0 probing 041e:403c [ 420.879288][ T7938] loop3: detected capacity change from 0 to 32768 [ 420.901025][ T5892] r8152-cfgselector 3-1: Unknown version 0x0000 [ 420.907493][ T5892] r8152-cfgselector 3-1: config 0 descriptor?? [ 420.931707][ T5892] r8152-cfgselector 3-1: can't set config #0, error -71 [ 420.953697][ T5892] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 421.284868][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.335187][ T7938] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 421.390958][ T11] gspca_sq930x: reg_r 001f failed -110 [ 421.396847][ T11] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 421.571913][ T7938] JBD2: journal reset failed [ 421.576692][ T7938] (syz.3.568,7938,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 421.591533][ T7938] (syz.3.568,7938,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 421.665631][ T11] usb 2-1: USB disconnect, device number 11 [ 421.819749][ T7963] trusted_key: encrypted_key: master key parameter '' is invalid [ 422.799574][ T7967] loop2: detected capacity change from 0 to 32768 [ 422.832736][ T7971] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 422.914878][ T7968] loop4: detected capacity change from 0 to 4096 [ 423.038403][ T7968] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 423.101181][ T7967] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 423.191445][ T5892] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 423.401092][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 423.437554][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 423.461941][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.472605][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 423.485212][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 423.496605][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 423.506775][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 423.827116][ T5892] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 423.836812][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 423.850767][ T5892] usb 2-1: Product: syz [ 423.855179][ T5892] usb 2-1: Manufacturer: syz [ 423.859944][ T5892] usb 2-1: SerialNumber: syz [ 424.043392][ T5892] usb 2-1: config 0 descriptor?? [ 424.319509][ T5892] radio-si470x 2-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 424.541082][ T5892] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 424.549644][ T5892] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 424.565765][ T5892] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 424.752267][ T5892] usb 2-1: USB disconnect, device number 12 [ 424.923996][ T7983] loop4: detected capacity change from 0 to 512 [ 425.108326][ T7983] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.347967][ T7983] FAT-fs (loop4): FAT read failed (blocknr 1568) [ 425.451766][ T7983] FAT-fs (loop4): FAT read failed (blocknr 1568) [ 425.481616][ T7987] loop3: detected capacity change from 0 to 2048 [ 425.783805][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.799846][ T7987] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.833722][ T7985] loop0: detected capacity change from 0 to 40427 [ 425.914747][ T7985] F2FS-fs (loop0): invalid crc value [ 426.173795][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 426.231839][ T7985] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 426.247637][ T7985] F2FS-fs (loop0): Start checkpoint disabled! [ 426.262359][ T7998] fuse: Unknown parameter 'group_id00000000000000000000' [ 426.332175][ T7985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 426.524534][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.181350][ T8002] loop4: detected capacity change from 0 to 32768 [ 427.265497][ T8008] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 427.811964][ T8006] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 427.898907][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 428.414765][ T8002] loop4: detected capacity change from 0 to 32768 [ 428.722695][ T8002] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 428.918663][ T8002] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 429.221528][ T5808] ocfs2: Unmounting device (7,4) on (node local) [ 430.007027][ T8029] loop1: detected capacity change from 0 to 2048 [ 430.093634][ T8025] loop3: detected capacity change from 0 to 32768 [ 430.174948][ T8031] loop2: detected capacity change from 0 to 1024 [ 430.198664][ T8025] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.435074][ T3961] hfsplus: b-tree write err: -5, ino 4 [ 430.541737][ T8025] XFS (loop3): Ending clean mount [ 430.783447][ T5816] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.806760][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 431.560039][ T8050] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 432.337856][ T8048] loop2: detected capacity change from 0 to 40427 [ 432.369093][ T8048] F2FS-fs (loop2): invalid crc value [ 432.642117][ T8048] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 432.643329][ T8048] F2FS-fs (loop2): Start checkpoint disabled! [ 432.658696][ T8048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 432.661700][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.905907][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 433.036318][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 433.163540][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 433.321352][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 433.337774][ T11] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 433.337928][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.338051][ T11] usb 3-1: Product: syz [ 433.338146][ T11] usb 3-1: Manufacturer: syz [ 433.338245][ T11] usb 3-1: SerialNumber: syz [ 433.403726][ T11] r8152-cfgselector 3-1: Unknown version 0x0000 [ 433.403848][ T11] r8152-cfgselector 3-1: config 0 descriptor?? [ 433.909998][ T8048] syz.2.603 (8048): drop_caches: 2 [ 433.964512][ T11] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 434.529885][ T8068] loop1: detected capacity change from 0 to 32768 [ 435.487654][ T8076] loop3: detected capacity change from 0 to 2048 [ 435.745550][ T8068] loop1: detected capacity change from 0 to 32768 [ 435.982775][ T8076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.995637][ T8076] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.322621][ T8081] loop4: detected capacity change from 0 to 1024 [ 436.721403][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 436.807996][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.941922][ T8095] loop1: detected capacity change from 0 to 256 [ 438.718065][ T8097] loop0: detected capacity change from 0 to 32768 [ 438.976567][ T8097] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 438.976722][ T8097] allowing incompatible features above 0.0: (unknown version) [ 438.976808][ T8097] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 439.026315][ T8097] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 439.034837][ T8097] bcachefs (loop0): initializing new filesystem [ 439.051727][ T8097] bcachefs (loop0): going read-write [ 439.083925][ T8097] bcachefs (loop0): marking superblocks [ 439.137232][ T8097] bcachefs (loop0): initializing freespace [ 439.163193][ T8097] bcachefs (loop0): done initializing freespace [ 439.182288][ T8097] bcachefs (loop0): reading snapshots table [ 439.188570][ T8097] bcachefs (loop0): reading snapshots done [ 439.332804][ T8097] bcachefs (loop0): done starting filesystem [ 439.333832][ T8101] loop2: detected capacity change from 0 to 32768 [ 439.434531][ T8101] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 439.644931][ T5811] bcachefs (loop0): shutting down [ 439.650133][ T5811] bcachefs (loop0): going read-only [ 439.656276][ T5811] bcachefs (loop0): finished waiting for writes to stop [ 439.817314][ T5811] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 440.130700][ T8101] XFS (loop2): Ending clean mount [ 440.272448][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 440.312171][ T5892] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 440.426697][ T5811] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 440.525244][ T5811] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 440.591431][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 440.602637][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 440.606442][ T8122] loop1: detected capacity change from 0 to 40427 [ 440.655309][ T5811] bcachefs (loop0): marking filesystem clean [ 440.859305][ T5892] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 440.869820][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.878618][ T5892] usb 4-1: Product: syz [ 440.883401][ T5892] usb 4-1: Manufacturer: syz [ 440.888181][ T5892] usb 4-1: SerialNumber: syz [ 441.012368][ T5811] bcachefs (loop0): shutdown complete [ 441.211498][ T5892] usb 4-1: config 0 descriptor?? [ 441.467705][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 441.511202][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 441.681142][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 441.782095][ T11] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 441.791700][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.799895][ T11] usb 2-1: Product: syz [ 441.804440][ T11] usb 2-1: Manufacturer: syz [ 441.809199][ T11] usb 2-1: SerialNumber: syz [ 441.833223][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.993287][ T11] r8152-cfgselector 2-1: Unknown version 0x0000 [ 441.999934][ T11] r8152-cfgselector 2-1: config 0 descriptor?? [ 442.184102][ T5892] usb 4-1: USB disconnect, device number 20 [ 442.259538][ T8132] loop2: detected capacity change from 0 to 2048 [ 442.437583][ T8122] syz.1.621 (8122): drop_caches: 2 [ 442.460152][ T11] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 442.564278][ T8132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.577881][ T8132] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.764612][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.143312][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.380726][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 445.114240][ T8155] loop2: detected capacity change from 0 to 40427 [ 445.228443][ T8155] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 445.236701][ T8155] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 445.307505][ T8155] F2FS-fs (loop2): invalid crc value [ 445.695135][ T8161] loop1: detected capacity change from 0 to 32768 [ 446.051458][ T8163] loop3: detected capacity change from 0 to 32768 [ 446.555933][ T8155] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 446.631001][ T8155] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 446.638357][ T8155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 447.561972][ T8163] loop3: detected capacity change from 0 to 32768 [ 447.615041][ T8163] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 447.685993][ T5892] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 447.749066][ T8163] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 447.881431][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 447.963918][ T5892] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 447.975164][ T5892] usb 2-1: config 2 interface 0 has no altsetting 0 [ 448.114265][ T5816] ocfs2: Unmounting device (7,3) on (node local) [ 448.232679][ T5892] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 448.242222][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.250405][ T5892] usb 2-1: Product: syz [ 448.254980][ T5892] usb 2-1: Manufacturer: syz [ 448.259750][ T5892] usb 2-1: SerialNumber: syz [ 448.397361][ T8184] loop0: detected capacity change from 0 to 256 [ 448.439552][ T5892] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 448.448833][ T5892] usb 2-1: selecting invalid altsetting 0 [ 448.563838][ T5892] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 448.822726][ T8184] FAT-fs (loop0): Directory bread(block 64) failed [ 448.833039][ T8184] FAT-fs (loop0): Directory bread(block 65) failed [ 448.839906][ T8184] FAT-fs (loop0): Directory bread(block 66) failed [ 448.848128][ T8184] FAT-fs (loop0): Directory bread(block 67) failed [ 448.855247][ T8184] FAT-fs (loop0): Directory bread(block 68) failed [ 448.862142][ T8184] FAT-fs (loop0): Directory bread(block 69) failed [ 448.869054][ T8184] FAT-fs (loop0): Directory bread(block 70) failed [ 448.875890][ T8184] FAT-fs (loop0): Directory bread(block 71) failed [ 448.882884][ T8184] FAT-fs (loop0): Directory bread(block 72) failed [ 448.889590][ T8184] FAT-fs (loop0): Directory bread(block 73) failed [ 449.068343][ T8184] syz.0.623: attempt to access beyond end of device [ 449.068343][ T8184] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 449.083142][ T8184] syz.0.623: attempt to access beyond end of device [ 449.083142][ T8184] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 449.103134][ T30] audit: type=1800 audit(1758564884.842:117): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.623" name="file0" dev="loop0" ino=1048629 res=0 errno=0 [ 449.472520][ T5862] usb 2-1: USB disconnect, device number 14 [ 449.769688][ T11] kernel write not supported for file /input/mouse0 (pid: 11 comm: kworker/0:1) [ 449.816032][ T8192] FAULT_INJECTION: forcing a failure. [ 449.816032][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 449.829145][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.4.642 Tainted: G W syzkaller #0 PREEMPT(none) [ 449.829309][ T8192] Tainted: [W]=WARN [ 449.829358][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.829433][ T8192] Call Trace: [ 449.829482][ T8192] [ 449.829527][ T8192] __dump_stack+0x26/0x30 [ 449.829687][ T8192] dump_stack_lvl+0x1df/0x270 [ 449.829862][ T8192] dump_stack+0x1e/0x25 [ 449.830006][ T8192] should_fail_ex+0x7dc/0x8a0 [ 449.830164][ T8192] should_failslab+0x15b/0x200 [ 449.830324][ T8192] __kmalloc_cache_noprof+0xcb/0xed0 [ 449.830492][ T8192] ? snd_pcm_oss_change_params_locked+0x148e/0x6690 [ 449.830689][ T8192] ? kmsan_get_metadata+0xfb/0x160 [ 449.830855][ T8192] snd_pcm_oss_change_params_locked+0x148e/0x6690 [ 449.831063][ T8192] ? __rcu_read_unlock+0x6d/0xd0 [ 449.831218][ T8192] ? _parse_integer_limit+0x3dc/0x440 [ 449.831408][ T8192] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 449.831580][ T8192] snd_pcm_oss_write+0x457/0x26b0 [ 449.831777][ T8192] ? kmsan_get_metadata+0xfb/0x160 [ 449.831955][ T8192] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 449.832133][ T8192] vfs_write+0x48a/0x15d0 [ 449.832272][ T8192] ? stack_depot_save_flags+0x35/0x7b0 [ 449.832398][ T8192] ? __fget_files+0x3b9/0x4a0 [ 449.832549][ T8192] ? kmsan_get_metadata+0xfb/0x160 [ 449.832697][ T8192] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 449.832847][ T8192] ? kmsan_get_metadata+0xfb/0x160 [ 449.833006][ T8192] __x64_sys_write+0x1fb/0x4d0 [ 449.833183][ T8192] x64_sys_call+0x3014/0x3e20 [ 449.833351][ T8192] do_syscall_64+0xd9/0x210 [ 449.833477][ T8192] ? irqentry_exit+0x16/0x60 [ 449.833630][ T8192] ? clear_bhb_loop+0x40/0x90 [ 449.833778][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.833914][ T8192] RIP: 0033:0x7f0407f8eec9 [ 449.834013][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.834127][ T8192] RSP: 002b:00007f04061f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.834252][ T8192] RAX: ffffffffffffffda RBX: 00007f04081e6090 RCX: 00007f0407f8eec9 [ 449.834350][ T8192] RDX: 0000000000001009 RSI: 0000200000000500 RDI: 0000000000000005 [ 449.834436][ T8192] RBP: 00007f04061f6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.834519][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.834597][ T8192] R13: 00007f04081e6128 R14: 00007f04081e6090 R15: 00007ffc4616dcb8 [ 449.834723][ T8192] [ 450.463077][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 451.052934][ T8203] FAULT_INJECTION: forcing a failure. [ 451.052934][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.066724][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.0.645 Tainted: G W syzkaller #0 PREEMPT(none) [ 451.066892][ T8203] Tainted: [W]=WARN [ 451.066939][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.067019][ T8203] Call Trace: [ 451.067068][ T8203] [ 451.067116][ T8203] __dump_stack+0x26/0x30 [ 451.067279][ T8203] dump_stack_lvl+0x1df/0x270 [ 451.067445][ T8203] dump_stack+0x1e/0x25 [ 451.067598][ T8203] should_fail_ex+0x7dc/0x8a0 [ 451.067753][ T8203] should_fail+0x2a/0x40 [ 451.067879][ T8203] should_fail_usercopy+0x2e/0x40 [ 451.068026][ T8203] _copy_from_user+0x33/0x100 [ 451.068183][ T8203] ___sys_sendmsg+0x11b/0x3b0 [ 451.068371][ T8203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 451.068551][ T8203] ? __rcu_read_unlock+0x6d/0xd0 [ 451.068690][ T8203] ? __fget_files+0x3b4/0x4a0 [ 451.068855][ T8203] ? __fget_files+0x3b9/0x4a0 [ 451.069022][ T8203] ? kmsan_get_metadata+0xfb/0x160 [ 451.069172][ T8203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 451.069336][ T8203] __x64_sys_sendmsg+0x211/0x3e0 [ 451.069515][ T8203] ? fput+0x113/0x160 [ 451.069630][ T8203] ? kmsan_get_metadata+0xfb/0x160 [ 451.069779][ T8203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 451.069931][ T8203] ? kmsan_get_metadata+0xfb/0x160 [ 451.070099][ T8203] x64_sys_call+0x1dfd/0x3e20 [ 451.070266][ T8203] do_syscall_64+0xd9/0x210 [ 451.070393][ T8203] ? irqentry_exit+0x16/0x60 [ 451.070552][ T8203] ? clear_bhb_loop+0x40/0x90 [ 451.070688][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.070825][ T8203] RIP: 0033:0x7f824378eec9 [ 451.070924][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.071038][ T8203] RSP: 002b:00007f8244651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.071168][ T8203] RAX: ffffffffffffffda RBX: 00007f82439e5fa0 RCX: 00007f824378eec9 [ 451.071264][ T8203] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 451.071346][ T8203] RBP: 00007f8244651090 R08: 0000000000000000 R09: 0000000000000000 [ 451.071430][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.071514][ T8203] R13: 00007f82439e6038 R14: 00007f82439e5fa0 R15: 00007ffe5de450d8 [ 451.071638][ T8203] [ 451.752599][ T8201] loop2: detected capacity change from 0 to 40427 [ 451.787460][ T8201] F2FS-fs (loop2): invalid crc value [ 452.134454][ T8201] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 452.274434][ T8201] F2FS-fs (loop2): Start checkpoint disabled! [ 452.677346][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'. [ 452.696840][ T8211] loop3: detected capacity change from 0 to 32768 [ 452.755722][ T8201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 452.775925][ T8217] loop4: detected capacity change from 0 to 136 [ 452.839505][ T8211] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 453.031494][ T5862] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 453.083771][ T8222] loop0: detected capacity change from 0 to 2048 [ 453.167407][ T8211] XFS (loop3): Ending clean mount [ 453.200963][ T8222] EXT4-fs: Mount option(s) incompatible with ext3 [ 453.243931][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 453.303781][ T5816] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 453.368275][ T5862] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 453.378224][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.386613][ T5862] usb 3-1: Product: syz [ 453.391056][ T5862] usb 3-1: Manufacturer: syz [ 453.395827][ T5862] usb 3-1: SerialNumber: syz [ 453.485011][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 453.605911][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 453.613691][ T5862] r8152-cfgselector 3-1: config 0 descriptor?? [ 453.897886][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 453.905309][ T5862] r8152-cfgselector 3-1: bad CDC descriptors [ 453.991919][ T5862] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 454.074952][ T8240] FAULT_INJECTION: forcing a failure. [ 454.074952][ T8240] name failslab, interval 1, probability 0, space 0, times 0 [ 454.088102][ T8240] CPU: 1 UID: 0 PID: 8240 Comm: syz.3.653 Tainted: G W syzkaller #0 PREEMPT(none) [ 454.088268][ T8240] Tainted: [W]=WARN [ 454.088318][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.088402][ T8240] Call Trace: [ 454.088448][ T8240] [ 454.088495][ T8240] __dump_stack+0x26/0x30 [ 454.088660][ T8240] dump_stack_lvl+0x1df/0x270 [ 454.088825][ T8240] dump_stack+0x1e/0x25 [ 454.088973][ T8240] should_fail_ex+0x7dc/0x8a0 [ 454.089134][ T8240] should_failslab+0x15b/0x200 [ 454.089294][ T8240] __kmalloc_noprof+0x182/0x1310 [ 454.089464][ T8240] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 454.089635][ T8240] ? tomoyo_path_number_perm+0x91/0x7d0 [ 454.089770][ T8240] ? filter_irq_stacks+0x49/0x190 [ 454.089895][ T8240] ? kmsan_get_metadata+0xfb/0x160 [ 454.090057][ T8240] tomoyo_realpath_from_path+0xeb/0x9f0 [ 454.090227][ T8240] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 454.090397][ T8240] ? __srcu_read_lock+0x5e/0xd0 [ 454.090550][ T8240] tomoyo_path_number_perm+0x1d0/0x7d0 [ 454.090685][ T8240] ? stack_depot_save_flags+0x35/0x7b0 [ 454.090839][ T8240] ? kmsan_get_metadata+0xfb/0x160 [ 454.090988][ T8240] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 454.091185][ T8240] tomoyo_file_ioctl+0x3d/0x50 [ 454.091360][ T8240] security_file_ioctl+0x141/0x590 [ 454.091499][ T8240] __se_sys_ioctl+0xbb/0x400 [ 454.091648][ T8240] __x64_sys_ioctl+0x97/0xe0 [ 454.091796][ T8240] x64_sys_call+0x1cbc/0x3e20 [ 454.091964][ T8240] do_syscall_64+0xd9/0x210 [ 454.092090][ T8240] ? irqentry_exit+0x16/0x60 [ 454.092253][ T8240] ? clear_bhb_loop+0x40/0x90 [ 454.092397][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.092535][ T8240] RIP: 0033:0x7fc872d8eec9 [ 454.092634][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.092746][ T8240] RSP: 002b:00007fc873c13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.092871][ T8240] RAX: ffffffffffffffda RBX: 00007fc872fe5fa0 RCX: 00007fc872d8eec9 [ 454.092967][ T8240] RDX: 00002000000004c0 RSI: 0000000000008922 RDI: 0000000000000003 [ 454.093053][ T8240] RBP: 00007fc873c13090 R08: 0000000000000000 R09: 0000000000000000 [ 454.093137][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.093216][ T8240] R13: 00007fc872fe6038 R14: 00007fc872fe5fa0 R15: 00007ffc8c06dea8 [ 454.093347][ T8240] [ 454.335759][ T8240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.613645][ T8242] loop4: detected capacity change from 0 to 256 [ 454.822837][ T8242] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 456.076504][ T8250] loop3: detected capacity change from 0 to 32768 [ 456.194461][ T8250] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.309552][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 456.521237][ T8268] support for the xor transformation has been removed. [ 457.141747][ T8250] XFS (loop3): Ending clean mount [ 457.164264][ T8250] XFS (loop3): Quotacheck needed: Please wait. [ 457.320090][ T8250] XFS (loop3): Quotacheck: Done. [ 457.574598][ T5816] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 458.701461][ T8272] loop1: detected capacity change from 0 to 32768 [ 459.216157][ T8275] loop0: detected capacity change from 0 to 40427 [ 459.253957][ T8275] F2FS-fs (loop0): invalid crc value [ 459.642997][ T8275] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 459.658631][ T8275] F2FS-fs (loop0): Start checkpoint disabled! [ 459.684945][ T8275] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 459.855593][ T8280] loop2: detected capacity change from 0 to 256 [ 459.915659][ T8280] exfat: Deprecated parameter 'utf8' [ 459.921870][ T8280] exfat: Deprecated parameter 'utf8' [ 459.928073][ T8280] exfat: Deprecated parameter 'utf8' [ 460.096513][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 460.153190][ T8280] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 460.464649][ T8293] FAULT_INJECTION: forcing a failure. [ 460.464649][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.479328][ T8293] CPU: 0 UID: 0 PID: 8293 Comm: syz.3.668 Tainted: G W syzkaller #0 PREEMPT(none) [ 460.479499][ T8293] Tainted: [W]=WARN [ 460.479549][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.479625][ T8293] Call Trace: [ 460.479672][ T8293] [ 460.479719][ T8293] __dump_stack+0x26/0x30 [ 460.479880][ T8293] dump_stack_lvl+0x1df/0x270 [ 460.480050][ T8293] dump_stack+0x1e/0x25 [ 460.480194][ T8293] should_fail_ex+0x7dc/0x8a0 [ 460.480351][ T8293] should_fail+0x2a/0x40 [ 460.480515][ T8293] should_fail_usercopy+0x2e/0x40 [ 460.480650][ T8293] _copy_to_user+0x35/0x120 [ 460.480803][ T8293] simple_read_from_buffer+0x1b2/0x340 [ 460.480980][ T8293] proc_fail_nth_read+0x1e0/0x2d0 [ 460.481132][ T8293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.481274][ T8293] vfs_read+0x279/0xf90 [ 460.481415][ T8293] ? stack_depot_save_flags+0x35/0x7b0 [ 460.481549][ T8293] ? kmsan_get_metadata+0xfb/0x160 [ 460.481699][ T8293] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 460.481854][ T8293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.482019][ T8293] __x64_sys_read+0x1fb/0x4d0 [ 460.482191][ T8293] x64_sys_call+0x2f9c/0x3e20 [ 460.482361][ T8293] do_syscall_64+0xd9/0x210 [ 460.482514][ T8293] ? irqentry_exit+0x16/0x60 [ 460.482670][ T8293] ? clear_bhb_loop+0x40/0x90 [ 460.482801][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.482938][ T8293] RIP: 0033:0x7fc872d8d8dc [ 460.483031][ T8293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.483141][ T8293] RSP: 002b:00007fc873c13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.483261][ T8293] RAX: ffffffffffffffda RBX: 00007fc872fe5fa0 RCX: 00007fc872d8d8dc [ 460.483354][ T8293] RDX: 000000000000000f RSI: 00007fc873c130a0 RDI: 0000000000000005 [ 460.483444][ T8293] RBP: 00007fc873c13090 R08: 0000000000000000 R09: 0000000000000000 [ 460.483527][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.483596][ T8293] R13: 00007fc872fe6038 R14: 00007fc872fe5fa0 R15: 00007ffc8c06dea8 [ 460.483715][ T8293] [ 461.462826][ T8298] 9pnet_fd: Insufficient options for proto=fd [ 461.537161][ T8300] loop3: detected capacity change from 0 to 128 [ 461.828429][ T8297] loop1: detected capacity change from 0 to 256 [ 462.539110][ T8304] loop2: detected capacity change from 0 to 32768 [ 462.594865][ T8304] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.152274][ T8304] XFS (loop2): Ending clean mount [ 463.187229][ T8304] XFS (loop2): Quotacheck needed: Please wait. [ 463.299292][ T8304] XFS (loop2): Quotacheck: Done. [ 463.318084][ T8316] netlink: 'syz.1.675': attribute type 7 has an invalid length. [ 463.341449][ T8316] : entered promiscuous mode [ 463.504070][ T5817] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.600799][ T8316] loop1: detected capacity change from 0 to 128 [ 463.698607][ T8316] omfs: sysblock number (f784317bf884317b) is out of range [ 464.525961][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 464.535181][ T8324] tipc: Started in network mode [ 464.540426][ T8324] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 464.549986][ T8324] tipc: Enabling of bearer rejected, failed to enable media [ 464.864003][ T8322] loop2: detected capacity change from 0 to 32768 [ 464.944354][ T8322] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 465.246839][ T8322] XFS (loop2): Ending clean mount [ 465.351300][ T11] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 465.390114][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 465.420908][ T8339] FAULT_INJECTION: forcing a failure. [ 465.420908][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 465.434005][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.4.681 Tainted: G W syzkaller #0 PREEMPT(none) [ 465.434171][ T8339] Tainted: [W]=WARN [ 465.434216][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.434294][ T8339] Call Trace: [ 465.434340][ T8339] [ 465.434387][ T8339] __dump_stack+0x26/0x30 [ 465.434546][ T8339] dump_stack_lvl+0x1df/0x270 [ 465.434705][ T8339] dump_stack+0x1e/0x25 [ 465.434848][ T8339] should_fail_ex+0x7dc/0x8a0 [ 465.435015][ T8339] should_failslab+0x15b/0x200 [ 465.435175][ T8339] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 465.435348][ T8339] ? __alloc_skb+0x1e0/0x7d0 [ 465.435497][ T8339] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 465.435644][ T8339] ? kmsan_get_metadata+0xfb/0x160 [ 465.435798][ T8339] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.435966][ T8339] __alloc_skb+0x1e0/0x7d0 [ 465.436126][ T8339] alloc_skb_with_frags+0xc5/0xa60 [ 465.436274][ T8339] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.436425][ T8339] ? kmsan_get_metadata+0xfb/0x160 [ 465.436568][ T8339] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.436731][ T8339] sock_alloc_send_pskb+0xad8/0xc70 [ 465.436909][ T8339] ? kmsan_get_metadata+0xfb/0x160 [ 465.437091][ T8339] raw_send_hdrinc+0x332/0x1f40 [ 465.437251][ T8339] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.437449][ T8339] raw_sendmsg+0x230f/0x27a0 [ 465.437684][ T8339] ? __pfx_raw_sendmsg+0x10/0x10 [ 465.437829][ T8339] inet_sendmsg+0x26c/0x2a0 [ 465.437993][ T8339] __sock_sendmsg+0x278/0x3d0 [ 465.438124][ T8339] ____sys_sendmsg+0x893/0xd80 [ 465.438317][ T8339] ___sys_sendmsg+0x271/0x3b0 [ 465.438510][ T8339] ? __rcu_read_unlock+0x6d/0xd0 [ 465.438653][ T8339] ? __fget_files+0x3b4/0x4a0 [ 465.438845][ T8339] ? __fget_files+0x3b9/0x4a0 [ 465.439024][ T8339] ? kmsan_get_metadata+0xfb/0x160 [ 465.439173][ T8339] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.439337][ T8339] __sys_sendmmsg+0x2d9/0x7c0 [ 465.439502][ T8339] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 465.439650][ T8339] ? vfs_write+0x13e2/0x15d0 [ 465.439793][ T8339] ? kmsan_get_metadata+0xfb/0x160 [ 465.439985][ T8339] __x64_sys_sendmmsg+0xc6/0x150 [ 465.440167][ T8339] x64_sys_call+0x21de/0x3e20 [ 465.440325][ T8339] do_syscall_64+0xd9/0x210 [ 465.440450][ T8339] ? irqentry_exit+0x16/0x60 [ 465.440598][ T8339] ? clear_bhb_loop+0x40/0x90 [ 465.440737][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.440872][ T8339] RIP: 0033:0x7f0407f8eec9 [ 465.440973][ T8339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.441086][ T8339] RSP: 002b:00007f0408d58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.441207][ T8339] RAX: ffffffffffffffda RBX: 00007f04081e5fa0 RCX: 00007f0407f8eec9 [ 465.441299][ T8339] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 465.441380][ T8339] RBP: 00007f0408d58090 R08: 0000000000000000 R09: 0000000000000000 [ 465.441462][ T8339] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001 [ 465.441546][ T8339] R13: 00007f04081e6038 R14: 00007f04081e5fa0 R15: 00007ffc4616dcb8 [ 465.441670][ T8339] [ 465.849416][ T11] usb 2-1: device descriptor read/64, error -71 [ 465.869536][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 466.098600][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 466.148562][ T11] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 466.373891][ T11] usb 2-1: device descriptor read/64, error -71 [ 466.499084][ T11] usb usb2-port1: attempt power cycle [ 466.737994][ T8351] loop0: detected capacity change from 0 to 128 [ 466.892560][ T11] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 466.975001][ T11] usb 2-1: device descriptor read/8, error -71 [ 467.232082][ T11] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 467.288476][ T11] usb 2-1: device descriptor read/8, error -71 [ 467.412770][ T11] usb usb2-port1: unable to enumerate USB device [ 467.533158][ T8349] loop4: detected capacity change from 0 to 40427 [ 467.563740][ T8349] F2FS-fs (loop4): invalid crc value [ 467.851577][ T8349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 467.865015][ T8349] F2FS-fs (loop4): Start checkpoint disabled! [ 467.900891][ T8349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 468.017223][ T8360] loop2: detected capacity change from 0 to 512 [ 468.172872][ T5862] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 468.187090][ T8360] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.682: corrupted in-inode xattr: invalid ea_ino [ 468.236087][ T8360] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.682: couldn't read orphan inode 15 (err -117) [ 468.299757][ T8360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.372202][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 468.458558][ T5862] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 468.469159][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.478350][ T5862] usb 5-1: Product: syz [ 468.485558][ T5862] usb 5-1: Manufacturer: syz [ 468.494552][ T5862] usb 5-1: SerialNumber: syz [ 468.607339][ T5862] r8152-cfgselector 5-1: Unknown version 0x0000 [ 468.614472][ T5862] r8152-cfgselector 5-1: config 0 descriptor?? [ 468.839945][ T8370] loop0: detected capacity change from 0 to 256 [ 469.094387][ T8349] syz.4.683 (8349): drop_caches: 2 [ 469.119221][ T11] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 469.462324][ T8371] loop1: detected capacity change from 0 to 4096 [ 470.274275][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.281178][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.486732][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 470.981032][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 471.025679][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.232819][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 471.244766][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 471.258978][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 471.363751][ T11] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 471.373499][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.381869][ T11] usb 2-1: Product: syz [ 471.386199][ T11] usb 2-1: Manufacturer: syz [ 471.391090][ T11] usb 2-1: SerialNumber: syz [ 471.493424][ T8388] loop0: detected capacity change from 0 to 128 [ 471.504318][ T11] usb 2-1: config 0 descriptor?? [ 471.601464][ T11] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 471.618907][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 471.779256][ T5862] usb 2-1: USB disconnect, device number 19 [ 472.913886][ T8393] loop4: detected capacity change from 0 to 32768 [ 472.961414][ T8393] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 473.147437][ T8393] XFS (loop4): Ending clean mount [ 473.794407][ T5808] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 475.162773][ T8415] loop1: detected capacity change from 0 to 40427 [ 475.172482][ T8418] loop3: detected capacity change from 0 to 512 [ 475.256358][ T8418] EXT4-fs: Ignoring removed orlov option [ 475.329965][ T8418] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 475.539068][ T8418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 475.625656][ T8418] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.704: corrupted in-inode xattr: e_value size too large [ 475.666641][ T8418] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.704: couldn't read orphan inode 15 (err -117) [ 475.765711][ T8418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.855066][ T30] audit: type=1804 audit(1758564911.602:118): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.704" name="/newroot/130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=18 res=1 errno=0 [ 475.901427][ T30] audit: type=1800 audit(1758564911.602:119): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.704" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 476.011803][ T5862] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 476.015208][ T8427] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 476.136915][ T8426] loop4: detected capacity change from 0 to 256 [ 476.192329][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 476.214901][ T5862] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 476.224663][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.233985][ T5862] usb 2-1: Product: syz [ 476.238334][ T5862] usb 2-1: Manufacturer: syz [ 476.243488][ T5862] usb 2-1: SerialNumber: syz [ 476.419761][ T5862] r8152-cfgselector 2-1: Unknown version 0x0000 [ 476.426569][ T5862] r8152-cfgselector 2-1: config 0 descriptor?? [ 476.882435][ T8415] syz.1.703 (8415): drop_caches: 2 [ 476.909959][ T11] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 477.183698][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.264178][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 477.736448][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 478.389070][ T8447] loop3: detected capacity change from 0 to 32768 [ 478.563249][ T8447] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.890833][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 478.899937][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 478.924775][ T8465] macvlan2: entered promiscuous mode [ 478.992225][ T8447] XFS (loop3): Ending clean mount [ 479.016038][ T8447] XFS (loop3): Quotacheck needed: Please wait. [ 479.116734][ T8447] XFS (loop3): Quotacheck: Done. [ 479.321226][ T5816] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 479.460949][ T5862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 479.671046][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 479.699371][ T5862] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 479.708780][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.720060][ T5862] usb 5-1: config 0 has no interface number 0 [ 479.726622][ T5862] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.811525][ T5862] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 479.821936][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.830136][ T5862] usb 5-1: Product: syz [ 479.835504][ T5862] usb 5-1: Manufacturer: syz [ 479.840277][ T5862] usb 5-1: SerialNumber: syz [ 479.841600][ T11] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 479.898950][ T5862] usb 5-1: config 0 descriptor?? [ 479.931789][ T5862] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 479.939754][ T5862] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 480.145166][ T5862] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 480.145961][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 480.210854][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.222010][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 480.233352][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.246892][ T11] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 480.256336][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.354087][ T5862] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 480.430880][ T11] usb 3-1: config 0 descriptor?? [ 480.438585][ T8472] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 480.477002][ T11] kobil_sct 3-1:0.0: required endpoints missing [ 480.682440][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.692543][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.791246][ T11] usb 3-1: USB disconnect, device number 11 [ 480.836922][ T8468] loop4: detected capacity change from 0 to 1024 [ 480.923899][ T8468] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.931074][ T8468] EXT4-fs: inline encryption not supported [ 481.031839][ T8468] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.202206][ T8468] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.713: bad orphan inode 11 [ 481.276202][ T8468] EXT4-fs (loop4): Remounting filesystem read-only [ 481.283109][ T8468] ext4_test_bit(bit=10, block=4) = 1 [ 481.292039][ T8468] is_bad_inode(inode)=0 [ 481.296352][ T8468] NEXT_ORPHAN(inode)=3254779904 [ 481.303437][ T8468] max_ino=32 [ 481.306763][ T8468] i_nlink=0 [ 481.312622][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.367141][ T5862] usb 5-1: USB disconnect, device number 17 [ 481.374722][ T5862] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 481.512610][ T8487] loop1: detected capacity change from 0 to 128 [ 481.547142][ T8487] affs: Unexpected value for 'mufs' [ 482.122692][ T8491] netlink: 'syz.2.721': attribute type 3 has an invalid length. [ 482.131364][ T8491] netlink: 'syz.2.721': attribute type 3 has an invalid length. [ 482.165285][ T8491] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1986356271) [ 482.176167][ T8491] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 482.473971][ T8489] loop3: detected capacity change from 0 to 40427 [ 482.489921][ T8489] F2FS-fs (loop3): invalid crc value [ 482.535222][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.788961][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 482.845518][ T8489] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 482.859087][ T8489] F2FS-fs (loop3): Start checkpoint disabled! [ 482.896002][ T8489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 482.957728][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 483.181049][ T5862] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 483.401106][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 483.460938][ T5862] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 483.470332][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.478738][ T5862] usb 4-1: Product: syz [ 483.483379][ T5862] usb 4-1: Manufacturer: syz [ 483.488135][ T5862] usb 4-1: SerialNumber: syz [ 483.663261][ T5862] r8152-cfgselector 4-1: Unknown version 0x0000 [ 483.669954][ T5862] r8152-cfgselector 4-1: config 0 descriptor?? [ 483.829940][ T8509] loop0: detected capacity change from 0 to 512 [ 483.897221][ T8509] EXT4-fs: Ignoring removed nobh option [ 484.008087][ T8509] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 484.017433][ T8509] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.725: invalid indirect mapped block 256 (level 1) [ 484.033426][ T8509] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.725: invalid indirect mapped block 2683928664 (level 1) [ 484.071873][ T8509] EXT4-fs (loop0): 1 truncate cleaned up [ 484.131198][ T8489] syz.3.720 (8489): drop_caches: 2 [ 484.151058][ T5862] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 484.186820][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 484.216015][ T8509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.531410][ T11] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 484.720832][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 484.744156][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.755820][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.765915][ T11] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 484.779007][ T11] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 484.802877][ T11] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.812800][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.821140][ T11] usb 3-1: SerialNumber: syz [ 485.260185][ T8517] loop2: detected capacity change from 0 to 764 [ 485.270071][ T8517] iso9660: Unknown parameter '/dev/infiniband/rdma_cm' [ 485.421782][ T11] usb 3-1: USB disconnect, device number 12 [ 485.912349][ T8524] Invalid logical block size (21930) [ 487.232871][ T8527] loop1: detected capacity change from 0 to 32768 [ 487.241944][ T8527] XFS: ikeep mount option is deprecated. [ 487.286154][ T8527] tc_dump_action: action bad kind [ 487.367182][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.599258][ T8535] loop3: detected capacity change from 0 to 128 [ 488.050607][ T8533] loop2: detected capacity change from 0 to 32768 [ 488.151995][ T8535] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.187839][ T8533] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 488.234391][ T8535] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.451581][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 488.622736][ T11] IPVS: starting estimator thread 0... [ 488.642343][ T8535] GUP no longer grows the stack in syz.3.730 (8535): 200000005000-200000008000 (200000004000) [ 488.653176][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.3.730 Tainted: G W syzkaller #0 PREEMPT(none) [ 488.653352][ T8535] Tainted: [W]=WARN [ 488.653398][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.653481][ T8535] Call Trace: [ 488.653529][ T8535] [ 488.653578][ T8535] __dump_stack+0x26/0x30 [ 488.653745][ T8535] dump_stack_lvl+0x1df/0x270 [ 488.653938][ T8535] dump_stack+0x1e/0x25 [ 488.654088][ T8535] fixup_user_fault+0xcf0/0xe20 [ 488.654260][ T8535] fault_in_user_writeable+0x9a/0x1b0 [ 488.654433][ T8535] futex_lock_pi+0x5a9/0x1530 [ 488.654610][ T8535] ? kmsan_get_metadata+0xfb/0x160 [ 488.654760][ T8535] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 488.654911][ T8535] ? kmsan_get_metadata+0xfb/0x160 [ 488.655058][ T8535] ? __se_sys_futex+0x5b9/0x740 [ 488.655211][ T8535] ? __msan_warning+0x1b/0x30 [ 488.655346][ T8535] ? __pfx_futex_wake_mark+0x10/0x10 [ 488.655522][ T8535] do_futex+0x2de/0x480 [ 488.655693][ T8535] __se_sys_futex+0x5b9/0x740 [ 488.655867][ T8535] ? kmsan_get_metadata+0xfb/0x160 [ 488.656021][ T8535] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 488.656172][ T8535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 488.656337][ T8535] __x64_sys_futex+0x114/0x1a0 [ 488.656549][ T8535] x64_sys_call+0x3b18/0x3e20 [ 488.656719][ T8535] do_syscall_64+0xd9/0x210 [ 488.656852][ T8535] ? irqentry_exit+0x16/0x60 [ 488.657013][ T8535] ? clear_bhb_loop+0x40/0x90 [ 488.657145][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.657283][ T8535] RIP: 0033:0x7fc872d8eec9 [ 488.657381][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.657491][ T8535] RSP: 002b:00007fc873c13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.657619][ T8535] RAX: ffffffffffffffda RBX: 00007fc872fe5fa0 RCX: 00007fc872d8eec9 [ 488.657711][ T8535] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 488.657799][ T8535] RBP: 00007fc872e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.657890][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.657971][ T8535] R13: 00007fc872fe6038 R14: 00007fc872fe5fa0 R15: 00007ffc8c06dea8 [ 488.658094][ T8535] [ 488.907500][ T8544] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 488.916712][ T8544] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 488.923543][ T8544] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 488.930212][ T8544] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 488.937735][ T8544] comedi comedi3: 8255: I/O port conflict (0x40088d6,4) [ 488.945365][ T8544] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 488.952271][ T8544] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 488.960347][ T8544] comedi comedi3: 8255: I/O port conflict (0x100810,4) [ 488.971593][ T8544] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 488.978821][ T8544] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 488.987048][ T8544] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 488.993831][ T8544] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 489.000844][ T8544] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 489.002216][ T8541] IPVS: using max 240 ests per chain, 12000 per kthread [ 489.007502][ T8544] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 489.007674][ T8544] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 489.027826][ T8544] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 489.034902][ T8544] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 489.041768][ T8544] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 489.048681][ T8544] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 489.331231][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 489.337390][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 490.819710][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.147635][ T8565] loop0: detected capacity change from 0 to 1024 [ 491.156978][ T8560] loop1: detected capacity change from 0 to 40427 [ 491.720993][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 492.044448][ T11] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 492.240867][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 492.308729][ T11] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 492.318827][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.327400][ T11] usb 2-1: Product: syz [ 492.331853][ T11] usb 2-1: Manufacturer: syz [ 492.336611][ T11] usb 2-1: SerialNumber: syz [ 492.468831][ T11] r8152-cfgselector 2-1: Unknown version 0x0000 [ 492.475637][ T11] r8152-cfgselector 2-1: config 0 descriptor?? [ 492.533578][ T8571] loop3: detected capacity change from 0 to 32768 [ 492.801724][ T8571] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 492.906694][ T8560] syz.1.740 (8560): drop_caches: 2 [ 492.929743][ T11] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 493.210119][ T5816] ocfs2: Unmounting device (7,3) on (node local) [ 493.421095][ T8575] loop4: detected capacity change from 0 to 32768 [ 493.432074][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 493.447374][ T5862] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 493.457046][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.498030][ T5862] usb 3-1: config 0 descriptor?? [ 493.667317][ T5862] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 494.231803][ T5862] gspca_nw80x: reg_w err -110 [ 494.237151][ T5862] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 495.052131][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 495.404580][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 496.519050][ T8605] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 496.847402][ T8605] loop4: detected capacity change from 0 to 2048 [ 496.871477][ T5862] usb 3-1: USB disconnect, device number 13 [ 497.045268][ T8610] loop0: detected capacity change from 0 to 64 [ 497.065666][ T8605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.138447][ T8612] FAULT_INJECTION: forcing a failure. [ 497.138447][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 497.151857][ T8612] CPU: 1 UID: 0 PID: 8612 Comm: syz.2.757 Tainted: G W syzkaller #0 PREEMPT(none) [ 497.152024][ T8612] Tainted: [W]=WARN [ 497.152074][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.152155][ T8612] Call Trace: [ 497.152201][ T8612] [ 497.152250][ T8612] __dump_stack+0x26/0x30 [ 497.152413][ T8612] dump_stack_lvl+0x1df/0x270 [ 497.152579][ T8612] dump_stack+0x1e/0x25 [ 497.152727][ T8612] should_fail_ex+0x7dc/0x8a0 [ 497.152886][ T8612] should_failslab+0x15b/0x200 [ 497.153044][ T8612] kmem_cache_alloc_noprof+0xf0/0xec0 [ 497.153205][ T8612] ? do_wp_page+0x21f1/0x8630 [ 497.153335][ T8612] ? __anon_vma_prepare+0xea/0xb40 [ 497.153477][ T8612] ? kmsan_get_metadata+0xfb/0x160 [ 497.153638][ T8612] __anon_vma_prepare+0xea/0xb40 [ 497.153807][ T8612] ? mmap_read_trylock+0x82/0x100 [ 497.153935][ T8612] do_wp_page+0x6a88/0x8630 [ 497.154071][ T8612] ? handle_mm_fault+0x4731/0xdf70 [ 497.154207][ T8612] ? filter_irq_stacks+0x49/0x190 [ 497.154391][ T8612] handle_mm_fault+0x49ab/0xdf70 [ 497.154548][ T8612] ? kmsan_get_metadata+0xfb/0x160 [ 497.154740][ T8612] ? lock_vma_under_rcu+0x340/0x400 [ 497.154943][ T8612] do_user_addr_fault+0x177d/0x2560 [ 497.155077][ T8612] ? kmsan_get_metadata+0xfb/0x160 [ 497.155231][ T8612] ? kmsan_get_metadata+0xfb/0x160 [ 497.155411][ T8612] exc_page_fault+0x68/0xb0 [ 497.155601][ T8612] asm_exc_page_fault+0x2b/0x30 [ 497.155733][ T8612] RIP: 0033:0x7f72a3850c03 [ 497.155832][ T8612] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 497.155944][ T8612] RSP: 002b:00007f72a48924a0 EFLAGS: 00010202 [ 497.156056][ T8612] RAX: 0000000000000400 RBX: 00007f72a4892540 RCX: 00007f7299600000 [ 497.156145][ T8612] RDX: 00007f72a48926e0 RSI: 0000000000000001 RDI: 00007f72a48925e0 [ 497.156234][ T8612] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 497.156315][ T8612] R10: 00000000000000be R11: 00007f72a4892540 R12: 0000000000000001 [ 497.156400][ T8612] R13: 00007f72a3a2db80 R14: 0000000000000020 R15: 00007f72a48925e0 [ 497.156520][ T8612] [ 497.156596][ T8612] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 497.499047][ T8612] loop2: detected capacity change from 0 to 512 [ 497.584629][ T8612] EXT4-fs: Mount option(s) incompatible with ext2 [ 497.869042][ T8605] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 498.273437][ T8616] loop3: detected capacity change from 0 to 32768 [ 498.485287][ T8616] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 498.708303][ T5816] ocfs2: Unmounting device (7,3) on (node local) [ 499.345423][ T8623] loop2: detected capacity change from 0 to 40427 [ 499.401869][ T8623] F2FS-fs (loop2): invalid crc value [ 499.675838][ T8623] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 499.741706][ T8623] F2FS-fs (loop2): Start checkpoint disabled! [ 499.887160][ T8623] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 500.197276][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 500.416011][ T8627] loop4: detected capacity change from 0 to 32768 [ 500.452304][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 500.553424][ T11] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 500.562833][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.571201][ T11] usb 3-1: Product: syz [ 500.575538][ T11] usb 3-1: Manufacturer: syz [ 500.580298][ T11] usb 3-1: SerialNumber: syz [ 500.787570][ T11] r8152-cfgselector 3-1: Unknown version 0x0000 [ 500.794229][ T11] r8152-cfgselector 3-1: config 0 descriptor?? [ 501.247342][ T8623] syz.2.759 (8623): drop_caches: 2 [ 501.265972][ T11] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 501.542706][ T8112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.785518][ T8112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.338097][ T8112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.479572][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 502.500677][ T8643] loop4: detected capacity change from 0 to 2048 [ 502.669794][ T8112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.722464][ T8649] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.891928][ T30] audit: type=1800 audit(1758564938.632:120): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.766" name="file1" dev="loop4" ino=2097152 res=0 errno=0 [ 503.288269][ T8112] bridge_slave_1: left allmulticast mode [ 503.294349][ T8112] bridge_slave_1: left promiscuous mode [ 503.301082][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.372597][ T8112] bridge_slave_0: left allmulticast mode [ 503.378555][ T8112] bridge_slave_0: left promiscuous mode [ 503.385254][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.062527][ T8112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.102354][ T8112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.142430][ T8112] bond0 (unregistering): Released all slaves [ 504.881391][ T8112] hsr_slave_0: left promiscuous mode [ 504.889066][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.897415][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.970660][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.978220][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.143150][ T8661] FAULT_INJECTION: forcing a failure. [ 505.143150][ T8661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.151572][ T8112] veth1_macvtap: left promiscuous mode [ 505.159004][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.2.770 Tainted: G W syzkaller #0 PREEMPT(none) [ 505.159165][ T8661] Tainted: [W]=WARN [ 505.159213][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.159289][ T8661] Call Trace: [ 505.159336][ T8661] [ 505.159381][ T8661] __dump_stack+0x26/0x30 [ 505.159540][ T8661] dump_stack_lvl+0x1df/0x270 [ 505.159706][ T8661] dump_stack+0x1e/0x25 [ 505.159852][ T8661] should_fail_ex+0x7dc/0x8a0 [ 505.160008][ T8661] should_fail+0x2a/0x40 [ 505.160128][ T8661] should_fail_usercopy+0x2e/0x40 [ 505.160271][ T8661] _copy_to_user+0x35/0x120 [ 505.160422][ T8661] simple_read_from_buffer+0x1b2/0x340 [ 505.160593][ T8661] proc_fail_nth_read+0x1e0/0x2d0 [ 505.160740][ T8661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.160882][ T8661] vfs_read+0x279/0xf90 [ 505.161022][ T8661] ? stack_depot_save_flags+0x35/0x7b0 [ 505.161152][ T8661] ? kmsan_get_metadata+0xfb/0x160 [ 505.161301][ T8661] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 505.161454][ T8661] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 505.161614][ T8661] __x64_sys_read+0x1fb/0x4d0 [ 505.161786][ T8661] x64_sys_call+0x2f9c/0x3e20 [ 505.161951][ T8661] do_syscall_64+0xd9/0x210 [ 505.162069][ T8661] ? irqentry_exit+0x16/0x60 [ 505.162225][ T8661] ? clear_bhb_loop+0x40/0x90 [ 505.162367][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.162503][ T8661] RIP: 0033:0x7f72a398d8dc [ 505.162601][ T8661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 505.162716][ T8661] RSP: 002b:00007f72a4872030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.162847][ T8661] RAX: ffffffffffffffda RBX: 00007f72a3be6090 RCX: 00007f72a398d8dc [ 505.162941][ T8661] RDX: 000000000000000f RSI: 00007f72a48720a0 RDI: 0000000000000006 [ 505.163022][ T8661] RBP: 00007f72a4872090 R08: 0000000000000000 R09: 0000000000000000 [ 505.163102][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.163183][ T8661] R13: 00007f72a3be6128 R14: 00007f72a3be6090 R15: 00007ffc6d7d8af8 [ 505.163307][ T8661] [ 505.379300][ T8112] veth0_macvtap: left promiscuous mode [ 505.386319][ T8112] veth1_vlan: left promiscuous mode [ 505.391964][ T8112] veth0_vlan: left promiscuous mode [ 505.785706][ T5862] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 506.211408][ T5862] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.222241][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 506.229097][ T5862] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 506.238537][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.351629][ T8676] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 506.377125][ T5862] usb 4-1: config 0 descriptor?? [ 506.410819][ T8676] loop8: detected capacity change from 0 to 8 [ 506.424528][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 506.434066][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 506.444435][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 506.457778][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 506.469497][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.513003][ T8676] Dev loop8: unable to read RDB block 8 [ 506.519049][ T8676] loop8: unable to read partition table [ 506.590088][ T8680] sctp: [Deprecated]: syz.4.775 (pid 8680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.590088][ T8680] Use struct sctp_sack_info instead [ 506.622473][ T8676] loop8: partition table beyond EOD, truncated [ 506.628946][ T8676] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 506.842927][ T5862] playstation 0003:054C:0BA0.0002: global environment stack underflow [ 506.853518][ T5862] playstation 0003:054C:0BA0.0002: item 0 0 1 11 parsing failed [ 506.927391][ T5862] playstation 0003:054C:0BA0.0002: Parse failed [ 506.934348][ T5862] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -22 [ 507.117033][ T5862] usb 4-1: USB disconnect, device number 22 [ 507.331251][ T8112] team0 (unregistering): Port device team_slave_1 removed [ 507.432517][ T8112] team0 (unregistering): Port device team_slave_0 removed [ 508.259709][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 508.571902][ T5813] Bluetooth: hci1: command tx timeout [ 508.853476][ T8690] loop4: detected capacity change from 0 to 40427 [ 508.924048][ T8690] F2FS-fs (loop4): invalid crc value [ 509.401508][ T8690] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 509.441861][ T8690] F2FS-fs (loop4): Start checkpoint disabled! [ 509.483741][ T8690] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 509.741353][ T8629] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 509.985306][ T8629] usb 5-1: Using ep0 maxpacket: 16 [ 510.021048][ T8698] loop1: detected capacity change from 0 to 40427 [ 510.127660][ T8629] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 510.137101][ T8629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.145631][ T8629] usb 5-1: Product: syz [ 510.149958][ T8629] usb 5-1: Manufacturer: syz [ 510.154890][ T8629] usb 5-1: SerialNumber: syz [ 510.462258][ T8705] loop3: detected capacity change from 0 to 512 [ 510.543282][ T8629] r8152-cfgselector 5-1: Unknown version 0x0000 [ 510.549755][ T8629] r8152-cfgselector 5-1: config 0 descriptor?? [ 510.569616][ T8705] EXT4-fs (loop3): Test dummy encryption mode enabled [ 510.657894][ T5813] Bluetooth: hci1: command tx timeout [ 510.775684][ T8705] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 510.914134][ T8705] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 510.924348][ T8705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.039920][ T8690] syz.4.777 (8690): drop_caches: 2 [ 511.125733][ T5862] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 511.296922][ T8715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'. [ 511.476043][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 511.531546][ T8705] fscrypt (loop3): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 511.587807][ T8715] loop1: detected capacity change from 0 to 1024 [ 512.262095][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.592045][ T8629] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 512.737189][ T5813] Bluetooth: hci1: command tx timeout [ 512.847289][ T8629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.857781][ T8629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 512.871132][ T8629] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 512.880392][ T8629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.183986][ T8629] usb 3-1: config 0 descriptor?? [ 513.250280][ T8728] loop1: detected capacity change from 0 to 32768 [ 513.260155][ T8728] ocfs2: Unknown parameter 'eKÃo§ãõnYrLÎ[äirrors' [ 513.774262][ T8629] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 513.950946][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 514.011443][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.019160][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.027360][ T8678] bridge_slave_0: entered allmulticast mode [ 514.122581][ T8740] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 514.175053][ T8678] bridge_slave_0: entered promiscuous mode [ 514.687169][ T8725] macvlan3: entered promiscuous mode [ 514.698832][ T8725] team_slave_0: entered promiscuous mode [ 514.704988][ T8725] team_slave_1: entered promiscuous mode [ 514.711149][ T8725] team0: entered promiscuous mode [ 514.723560][ T8725] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 514.743040][ T8725] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 514.845702][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.853616][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.862087][ T8678] bridge_slave_1: entered allmulticast mode [ 514.876363][ T8678] bridge_slave_1: entered promiscuous mode [ 514.890308][ T8740] loop1: detected capacity change from 0 to 32768 [ 514.932830][ T5813] Bluetooth: hci1: command tx timeout [ 516.257854][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 516.321999][ T8745] loop3: detected capacity change from 0 to 32768 [ 516.491889][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 516.524985][ T8745] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 516.525199][ T8745] allowing incompatible features above 0.0: (unknown version) [ 516.525284][ T8745] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 516.526481][ T5862] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 516.551608][ T8745] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 516.551823][ T8745] bcachefs (loop3): initializing new filesystem [ 516.574995][ T8745] bcachefs (loop3): going read-write [ 516.583973][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.584104][ T5862] usb 2-1: Product: syz [ 516.584199][ T5862] usb 2-1: Manufacturer: syz [ 516.584292][ T5862] usb 2-1: SerialNumber: syz [ 516.744001][ T8745] bcachefs (loop3): marking superblocks [ 516.809750][ T8745] bcachefs (loop3): initializing freespace [ 516.844194][ T8745] bcachefs (loop3): done initializing freespace [ 516.869392][ T8745] bcachefs (loop3): reading snapshots table [ 516.876046][ T8745] bcachefs (loop3): reading snapshots done [ 517.027629][ T8745] bcachefs (loop3): done starting filesystem [ 517.041853][ T8629] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 517.050279][ T8629] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 517.175284][ T30] audit: type=1800 audit(1758564952.912:121): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.788" name="bus" dev="loop3" ino=4098 res=0 errno=0 [ 517.178232][ T8745] netlink: 'syz.3.788': attribute type 6 has an invalid length. [ 517.196589][ T30] audit: type=1804 audit(1758564952.912:122): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.788" name="/newroot/147/bus/bus" dev="loop3" ino=4098 res=1 errno=0 [ 517.207144][ T8629] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 517.310928][ T5862] usb 2-1: config 0 descriptor?? [ 517.315648][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.360719][ T8629] usb 3-1: USB disconnect, device number 15 [ 517.378152][ T5862] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 517.562547][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.567276][ T5862] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 517.581940][ T5862] visor 2-1:0.0: probe with driver visor failed with error -5 [ 517.766434][ T8629] usb 2-1: USB disconnect, device number 22 [ 517.984840][ T8769] loop2: detected capacity change from 0 to 1024 [ 518.139153][ T8678] team0: Port device team_slave_0 added [ 518.215325][ T8678] team0: Port device team_slave_1 added [ 518.285309][ T5816] bcachefs (loop3): shutting down [ 518.291469][ T5816] bcachefs (loop3): going read-only [ 518.300402][ T5816] bcachefs (loop3): finished waiting for writes to stop [ 518.563637][ T5816] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 518.802169][ T5816] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 518.882457][ T5816] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 518.938097][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.945511][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.974770][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.011597][ T5816] bcachefs (loop3): marking filesystem clean [ 519.023754][ T8772] loop4: detected capacity change from 0 to 40427 [ 519.048844][ T8772] F2FS-fs (loop4): invalid crc value [ 519.302331][ T5816] bcachefs (loop3): shutdown complete [ 519.344377][ T8772] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 519.358390][ T8772] F2FS-fs (loop4): Start checkpoint disabled! [ 519.412830][ T8772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 519.468186][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.475491][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.504666][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.556452][ T8781] loop1: detected capacity change from 0 to 512 [ 519.617054][ T8781] ext4: Unknown parameter 'noacl' [ 519.710858][ T8629] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 520.293678][ T8678] hsr_slave_0: entered promiscuous mode [ 520.307432][ T8678] hsr_slave_1: entered promiscuous mode [ 520.316227][ T8678] debugfs: 'hsr0' already exists in 'hsr' [ 520.322255][ T8678] Cannot create hsr debugfs directory [ 520.679401][ T8781] loop1: detected capacity change from 0 to 32768 [ 521.187354][ T8781] loop1: detected capacity change from 0 to 1024 [ 521.213564][ T8629] usb 5-1: Using ep0 maxpacket: 16 [ 521.275625][ T8781] loop1: detected capacity change from 0 to 1024 [ 521.361894][ T8629] usb 5-1: device descriptor read/all, error -71 [ 522.155306][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 522.323728][ T8678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.413711][ T8678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.510736][ T8678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.602918][ T8678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.323430][ T8804] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 524.073462][ T8804] loop2: detected capacity change from 0 to 32768 [ 524.137470][ T8804] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.234171][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.281484][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.376937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.384492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.511247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.518704][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.966284][ T8804] XFS (loop2): Ending clean mount [ 525.127974][ T8823] loop1: detected capacity change from 0 to 512 [ 525.137747][ T8823] EXT4-fs: Ignoring removed bh option [ 525.154210][ T8823] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 525.240075][ T8823] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 525.250795][ T8823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 525.259614][ T8823] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 525.273082][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.358838][ T5817] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.363571][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.828888][ T8827] loop4: detected capacity change from 0 to 2364 [ 526.545497][ T8831] loop1: detected capacity change from 0 to 32768 [ 527.241939][ T8833] FAULT_INJECTION: forcing a failure. [ 527.241939][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 527.255032][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.2.802 Tainted: G W syzkaller #0 PREEMPT(none) [ 527.255191][ T8833] Tainted: [W]=WARN [ 527.255240][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.255311][ T8833] Call Trace: [ 527.255357][ T8833] [ 527.255404][ T8833] __dump_stack+0x26/0x30 [ 527.255562][ T8833] dump_stack_lvl+0x1df/0x270 [ 527.255723][ T8833] dump_stack+0x1e/0x25 [ 527.255872][ T8833] should_fail_ex+0x7dc/0x8a0 [ 527.256032][ T8833] should_failslab+0x15b/0x200 [ 527.256179][ T8833] __kmalloc_noprof+0x182/0x1310 [ 527.256341][ T8833] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 527.256509][ T8833] ? tomoyo_path_number_perm+0x91/0x7d0 [ 527.256640][ T8833] ? filter_irq_stacks+0x49/0x190 [ 527.256761][ T8833] ? kmsan_get_metadata+0xfb/0x160 [ 527.256928][ T8833] tomoyo_realpath_from_path+0xeb/0x9f0 [ 527.257099][ T8833] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.257267][ T8833] ? __srcu_read_lock+0x5e/0xd0 [ 527.257424][ T8833] tomoyo_path_number_perm+0x1d0/0x7d0 [ 527.257559][ T8833] ? stack_depot_save_flags+0x35/0x7b0 [ 527.257701][ T8833] ? kmsan_get_metadata+0xfb/0x160 [ 527.257846][ T8833] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.258035][ T8833] tomoyo_file_ioctl+0x3d/0x50 [ 527.258203][ T8833] security_file_ioctl+0x141/0x590 [ 527.258340][ T8833] __se_sys_ioctl+0xbb/0x400 [ 527.258489][ T8833] __x64_sys_ioctl+0x97/0xe0 [ 527.258637][ T8833] x64_sys_call+0x1cbc/0x3e20 [ 527.258807][ T8833] do_syscall_64+0xd9/0x210 [ 527.258934][ T8833] ? irqentry_exit+0x16/0x60 [ 527.259097][ T8833] ? clear_bhb_loop+0x40/0x90 [ 527.259240][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.259378][ T8833] RIP: 0033:0x7f72a398eec9 [ 527.259477][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.259592][ T8833] RSP: 002b:00007f72a4893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.259721][ T8833] RAX: ffffffffffffffda RBX: 00007f72a3be5fa0 RCX: 00007f72a398eec9 [ 527.259816][ T8833] RDX: 0000000000000000 RSI: 0000000040186f03 RDI: 0000000000000003 [ 527.259905][ T8833] RBP: 00007f72a4893090 R08: 0000000000000000 R09: 0000000000000000 [ 527.259988][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.260067][ T8833] R13: 00007f72a3be6038 R14: 00007f72a3be5fa0 R15: 00007ffc6d7d8af8 [ 527.260191][ T8833] [ 527.260242][ T8833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.102002][ T8844] loop1: detected capacity change from 0 to 512 [ 528.177208][ T8844] ext4: Unknown parameter 'noacl' [ 528.253951][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 529.509855][ T8844] loop1: detected capacity change from 0 to 32768 [ 529.631259][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 529.916664][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 529.961778][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.036026][ T5862] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 530.045553][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.047404][ T8844] loop1: detected capacity change from 0 to 1024 [ 530.054179][ T5862] usb 5-1: Product: syz [ 530.064621][ T5862] usb 5-1: Manufacturer: syz [ 530.069445][ T5862] usb 5-1: SerialNumber: syz [ 530.178042][ T8844] loop1: detected capacity change from 0 to 1024 [ 530.372317][ T5862] r8152-cfgselector 5-1: Unknown version 0x0000 [ 530.378798][ T5862] r8152-cfgselector 5-1: config 0 descriptor?? [ 530.811477][ T8862] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 530.842684][ T8843] syz.4.804 (8843): drop_caches: 2 [ 530.886397][ T5862] r8152-cfgselector 5-1: USB disconnect, device number 21 [ 531.042325][ T8867] loop2: detected capacity change from 0 to 128 [ 531.116287][ T8867] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 531.227969][ T8867] hpfs: filesystem error: improperly stopped [ 531.235007][ T8867] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 531.243258][ T8867] hpfs: You really don't want any checks? You are crazy... [ 531.341689][ T8867] hpfs: hpfs_map_sector(): read error [ 531.347245][ T8867] hpfs: code page support is disabled [ 531.441187][ T8867] hpfs: hpfs_map_4sectors(): unaligned read [ 531.447496][ T8867] hpfs: hpfs_map_4sectors(): unaligned read [ 531.453945][ T8867] hpfs: filesystem error: unable to find root dir [ 531.645633][ T8867] hpfs: hpfs_map_4sectors(): unaligned read [ 531.725018][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.731855][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.895642][ T8874] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 534.060203][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 534.414970][ T5862] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 534.683979][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.695362][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.705481][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.718852][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.728225][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.785293][ T8899] FAULT_INJECTION: forcing a failure. [ 534.785293][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 534.799386][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.1.818 Tainted: G W syzkaller #0 PREEMPT(none) [ 534.799549][ T8899] Tainted: [W]=WARN [ 534.799595][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.799669][ T8899] Call Trace: [ 534.799717][ T8899] [ 534.799763][ T8899] __dump_stack+0x26/0x30 [ 534.799926][ T8899] dump_stack_lvl+0x1df/0x270 [ 534.800087][ T8899] dump_stack+0x1e/0x25 [ 534.800230][ T8899] should_fail_ex+0x7dc/0x8a0 [ 534.800387][ T8899] should_failslab+0x15b/0x200 [ 534.800540][ T8899] __kmalloc_cache_noprof+0xcb/0xed0 [ 534.800705][ T8899] ? ip_set_create+0x442/0x2020 [ 534.800861][ T8899] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.801006][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.801163][ T8899] ip_set_create+0x442/0x2020 [ 534.801306][ T8899] ? __nla_validate_parse+0x44ec/0x5160 [ 534.801535][ T8899] ? __pfx_ip_set_create+0x10/0x10 [ 534.801683][ T8899] ? __pfx_ip_set_create+0x10/0x10 [ 534.801830][ T8899] nfnetlink_rcv_msg+0xce0/0xe80 [ 534.802053][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.802196][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.802340][ T8899] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.802476][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.802618][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.802780][ T8899] netlink_rcv_skb+0x54d/0x680 [ 534.802959][ T8899] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 534.803117][ T8899] nfnetlink_rcv+0x3f1/0x5420 [ 534.803260][ T8899] ? kmsan_get_metadata+0x31/0x160 [ 534.803408][ T8899] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.803551][ T8899] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 534.803694][ T8899] ? ref_tracker_free+0x557/0xe80 [ 534.803828][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.803992][ T8899] ? __dev_queue_xmit+0x30c/0x5e60 [ 534.804159][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.804306][ T8899] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.804446][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.804593][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.804752][ T8899] ? __netlink_deliver_tap+0xda9/0xdd0 [ 534.804921][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.805074][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.805228][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.805374][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.805527][ T8899] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 534.805659][ T8899] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 534.805785][ T8899] netlink_unicast+0xf01/0x12b0 [ 534.805961][ T8899] netlink_sendmsg+0x10b3/0x1250 [ 534.806160][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.806322][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.806491][ T8899] __sock_sendmsg+0x333/0x3d0 [ 534.806632][ T8899] ____sys_sendmsg+0x7e0/0xd80 [ 534.806831][ T8899] ___sys_sendmsg+0x271/0x3b0 [ 534.807024][ T8899] ? __rcu_read_unlock+0x6d/0xd0 [ 534.807151][ T8899] ? __fget_files+0x3b4/0x4a0 [ 534.807314][ T8899] ? __fget_files+0x3b9/0x4a0 [ 534.807484][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.807632][ T8899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 534.807798][ T8899] __x64_sys_sendmsg+0x211/0x3e0 [ 534.807991][ T8899] ? kmsan_get_metadata+0xfb/0x160 [ 534.808158][ T8899] x64_sys_call+0x1dfd/0x3e20 [ 534.808327][ T8899] do_syscall_64+0xd9/0x210 [ 534.808456][ T8899] ? irqentry_exit+0x16/0x60 [ 534.808615][ T8899] ? clear_bhb_loop+0x40/0x90 [ 534.808762][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.808896][ T8899] RIP: 0033:0x7f598ed8eec9 [ 534.808999][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.809111][ T8899] RSP: 002b:00007f598cff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.809235][ T8899] RAX: ffffffffffffffda RBX: 00007f598efe5fa0 RCX: 00007f598ed8eec9 [ 534.809330][ T8899] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 534.809415][ T8899] RBP: 00007f598cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.809495][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.809575][ T8899] R13: 00007f598efe6038 R14: 00007f598efe5fa0 R15: 00007ffd0d730458 [ 534.809698][ T8899] [ 534.853379][ T5862] usb 3-1: config 0 descriptor?? [ 534.957042][ T8678] veth0_vlan: entered promiscuous mode [ 535.424689][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 535.819479][ T5862] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 535.820896][ T8678] veth1_vlan: entered promiscuous mode [ 535.928568][ T5862] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 536.061711][ T5862] usb 3-1: USB disconnect, device number 16 [ 536.387735][ T8678] veth0_macvtap: entered promiscuous mode [ 536.474090][ T8678] veth1_macvtap: entered promiscuous mode [ 536.801210][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.959480][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.157748][ T3799] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.249598][ T3799] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.252001][ T8914] loop1: detected capacity change from 0 to 40427 [ 537.395919][ T8910] fido_id[8910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 537.403844][ T3799] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.458860][ T8913] loop3: detected capacity change from 0 to 4096 [ 537.544124][ T3799] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.121720][ T8851] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 538.336229][ T8851] usb 2-1: Using ep0 maxpacket: 16 [ 538.393919][ T8851] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 538.404097][ T8851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.413283][ T8851] usb 2-1: Product: syz [ 538.417629][ T8851] usb 2-1: Manufacturer: syz [ 538.422973][ T8851] usb 2-1: SerialNumber: syz [ 538.488704][ T8924] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 538.683202][ T8851] r8152-cfgselector 2-1: Unknown version 0x0000 [ 538.689777][ T8851] r8152-cfgselector 2-1: config 0 descriptor?? [ 538.764032][ T8930] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 539.152118][ T8914] syz.1.820 (8914): drop_caches: 2 [ 539.276105][ T8851] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 540.691790][ T11] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 541.196675][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 541.515849][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 541.528831][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.540345][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.559492][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.568936][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.577325][ T11] usb 5-1: Product: syz [ 541.581746][ T11] usb 5-1: Manufacturer: syz [ 541.586506][ T11] usb 5-1: SerialNumber: syz [ 541.693480][ T8956] loop2: detected capacity change from 0 to 2048 [ 541.794326][ T8956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 542.297347][ T11] usb 5-1: 0:2 : does not exist [ 542.377605][ T11] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 542.603478][ T8956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 542.619041][ T8956] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 542.636388][ T8956] EXT4-fs (loop2): This should not happen!! Data will be lost [ 542.636388][ T8956] [ 542.646316][ T8956] EXT4-fs (loop2): Total free blocks count 0 [ 542.652674][ T8956] EXT4-fs (loop2): Free/Dirty block details [ 542.658743][ T8956] EXT4-fs (loop2): free_blocks=2415919104 [ 542.664802][ T8956] EXT4-fs (loop2): dirty_blocks=6144 [ 542.670258][ T8956] EXT4-fs (loop2): Block reservation details [ 542.676546][ T8956] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 542.934978][ T11] usb 5-1: USB disconnect, device number 22 [ 543.117382][ T6974] udevd[6974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.438051][ T4139] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 545.530946][ T11] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 545.726699][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 545.780811][ T11] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 545.790102][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.800782][ T11] usb 5-1: Product: syz [ 545.805133][ T11] usb 5-1: Manufacturer: syz [ 545.809898][ T11] usb 5-1: SerialNumber: syz [ 545.873579][ T8995] loop2: detected capacity change from 0 to 64 [ 545.948318][ T11] r8152-cfgselector 5-1: Unknown version 0x0000 [ 545.955183][ T11] r8152-cfgselector 5-1: config 0 descriptor?? [ 546.023576][ T8995] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.402497][ T8989] syz.4.835 (8989): drop_caches: 2 [ 546.424447][ T11] r8152-cfgselector 5-1: USB disconnect, device number 23 [ 546.495349][ T9003] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 546.909603][ T5813] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 547.273078][ T9003] loop3: detected capacity change from 0 to 32768 [ 547.333407][ T9003] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 547.498088][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.507202][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.730917][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.739029][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.931827][ T8629] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 548.044293][ T9003] XFS (loop3): Ending clean mount [ 548.161303][ T8629] usb 2-1: Using ep0 maxpacket: 8 [ 548.279861][ T8629] usb 2-1: config 0 has no interfaces? [ 548.366970][ T5816] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 548.411569][ T8629] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 548.420967][ T8629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 548.429244][ T8629] usb 2-1: Product: syz [ 548.434215][ T8629] usb 2-1: Manufacturer: syz [ 548.438995][ T8629] usb 2-1: SerialNumber: syz [ 548.586018][ T8629] usb 2-1: config 0 descriptor?? [ 548.726241][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 548.883864][ T8851] usb 2-1: USB disconnect, device number 24 [ 549.372201][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 549.478475][ T9035] netlink: 52 bytes leftover after parsing attributes in process `syz.5.845'. [ 550.370409][ T9051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 550.797564][ T9043] loop2: detected capacity change from 0 to 40427 [ 550.807634][ T9043] f2fs: Unknown parameter 'noinline^data' [ 550.971957][ T5813] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 550.981101][ T5813] Bluetooth: hci3: Injecting HCI hardware error event [ 550.991808][ T5813] Bluetooth: hci3: hardware error 0x00 [ 551.496487][ T9060] FAULT_INJECTION: forcing a failure. [ 551.496487][ T9060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.510100][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.1.851 Tainted: G W syzkaller #0 PREEMPT(none) [ 551.510261][ T9060] Tainted: [W]=WARN [ 551.510307][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 551.510382][ T9060] Call Trace: [ 551.510435][ T9060] [ 551.510478][ T9060] __dump_stack+0x26/0x30 [ 551.510638][ T9060] dump_stack_lvl+0x1df/0x270 [ 551.510803][ T9060] dump_stack+0x1e/0x25 [ 551.510950][ T9060] should_fail_ex+0x7dc/0x8a0 [ 551.511113][ T9060] should_fail+0x2a/0x40 [ 551.511239][ T9060] should_fail_usercopy+0x2e/0x40 [ 551.511382][ T9060] _copy_from_iter+0x1d9/0x3350 [ 551.511524][ T9060] ? kmsan_get_metadata+0xfb/0x160 [ 551.511673][ T9060] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.511839][ T9060] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.512034][ T9060] netlink_sendmsg+0xc64/0x1250 [ 551.512229][ T9060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.512392][ T9060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.512557][ T9060] __sock_sendmsg+0x333/0x3d0 [ 551.512698][ T9060] ____sys_sendmsg+0x7e0/0xd80 [ 551.512897][ T9060] ___sys_sendmsg+0x271/0x3b0 [ 551.513098][ T9060] ? __rcu_read_unlock+0x6d/0xd0 [ 551.513218][ T9060] ? __fget_files+0x3b4/0x4a0 [ 551.513374][ T9060] ? __fget_files+0x3b9/0x4a0 [ 551.513542][ T9060] ? kmsan_get_metadata+0xfb/0x160 [ 551.513689][ T9060] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.513851][ T9060] __x64_sys_sendmsg+0x211/0x3e0 [ 551.514037][ T9060] ? kmsan_get_metadata+0xfb/0x160 [ 551.514199][ T9060] x64_sys_call+0x1dfd/0x3e20 [ 551.514363][ T9060] do_syscall_64+0xd9/0x210 [ 551.514489][ T9060] ? irqentry_exit+0x16/0x60 [ 551.514645][ T9060] ? clear_bhb_loop+0x40/0x90 [ 551.514779][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.514916][ T9060] RIP: 0033:0x7f598ed8eec9 [ 551.515009][ T9060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.515123][ T9060] RSP: 002b:00007f598cff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.515240][ T9060] RAX: ffffffffffffffda RBX: 00007f598efe5fa0 RCX: 00007f598ed8eec9 [ 551.515334][ T9060] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 551.515416][ T9060] RBP: 00007f598cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.515495][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.515570][ T9060] R13: 00007f598efe6038 R14: 00007f598efe5fa0 R15: 00007ffd0d730458 [ 551.515696][ T9060] [ 552.630879][ T9066] loop1: detected capacity change from 0 to 16384 [ 552.642199][ T9066] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES [ 552.652280][ T9066] bcachefs: bch2_fs_get_tree() error: EACCES [ 553.061401][ T5813] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 553.332203][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 553.652555][ T9067] loop3: detected capacity change from 0 to 4096 [ 553.729674][ T9078] hsr_slave_1 (unregistering): left promiscuous mode [ 553.764131][ T9067] EXT4-fs: Ignoring removed nobh option [ 553.866205][ T9067] EXT4-fs (loop3): Test dummy encryption mode enabled [ 554.085551][ T9067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.261252][ T30] audit: type=1326 audit(1758564989.982:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.515576][ T30] audit: type=1326 audit(1758564990.062:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.539640][ T30] audit: type=1326 audit(1758564990.062:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.539866][ T9086] loop1: detected capacity change from 0 to 32768 [ 554.563113][ T30] audit: type=1326 audit(1758564990.062:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72a398d710 code=0x7ffc0000 [ 554.591992][ T30] audit: type=1326 audit(1758564990.062:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72a398d710 code=0x7ffc0000 [ 554.616800][ T30] audit: type=1326 audit(1758564990.112:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.640189][ T30] audit: type=1326 audit(1758564990.112:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.663275][ T30] audit: type=1326 audit(1758564990.132:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.685922][ T30] audit: type=1326 audit(1758564990.132:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 554.710659][ T30] audit: type=1326 audit(1758564990.132:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a398eec9 code=0x7ffc0000 [ 555.062341][ T9086] FAULT_INJECTION: forcing a failure. [ 555.062341][ T9086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.076294][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.1.858 Tainted: G W syzkaller #0 PREEMPT(none) [ 555.076454][ T9086] Tainted: [W]=WARN [ 555.076503][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 555.076581][ T9086] Call Trace: [ 555.076629][ T9086] [ 555.076674][ T9086] __dump_stack+0x26/0x30 [ 555.076832][ T9086] dump_stack_lvl+0x1df/0x270 [ 555.077011][ T9086] dump_stack+0x1e/0x25 [ 555.077154][ T9086] should_fail_ex+0x7dc/0x8a0 [ 555.077309][ T9086] should_fail+0x2a/0x40 [ 555.077433][ T9086] should_fail_usercopy+0x2e/0x40 [ 555.077576][ T9086] _copy_to_user+0x35/0x120 [ 555.077727][ T9086] simple_read_from_buffer+0x1b2/0x340 [ 555.077903][ T9086] proc_fail_nth_read+0x1e0/0x2d0 [ 555.078059][ T9086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.078198][ T9086] vfs_read+0x279/0xf90 [ 555.078342][ T9086] ? stack_depot_save_flags+0x35/0x7b0 [ 555.078472][ T9086] ? kmsan_get_metadata+0xfb/0x160 [ 555.078623][ T9086] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 555.078774][ T9086] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 555.078931][ T9086] __x64_sys_read+0x1fb/0x4d0 [ 555.079100][ T9086] x64_sys_call+0x2f9c/0x3e20 [ 555.079271][ T9086] do_syscall_64+0xd9/0x210 [ 555.079394][ T9086] ? irqentry_exit+0x16/0x60 [ 555.079546][ T9086] ? clear_bhb_loop+0x40/0x90 [ 555.079683][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.079810][ T9086] RIP: 0033:0x7f598ed8d8dc [ 555.079906][ T9086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 555.080023][ T9086] RSP: 002b:00007f598cff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.080147][ T9086] RAX: ffffffffffffffda RBX: 00007f598efe5fa0 RCX: 00007f598ed8d8dc [ 555.080241][ T9086] RDX: 000000000000000f RSI: 00007f598cff60a0 RDI: 0000000000000004 [ 555.080323][ T9086] RBP: 00007f598cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 555.080403][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.080480][ T9086] R13: 00007f598efe6038 R14: 00007f598efe5fa0 R15: 00007ffd0d730458 [ 555.080596][ T9086] [ 555.574776][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.708309][ T9098] loop1: detected capacity change from 0 to 64 [ 555.860954][ T5476] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 556.075286][ T5476] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 556.085306][ T5476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.179509][ T5476] usb 6-1: config 0 descriptor?? [ 556.256191][ T5476] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 556.268019][ T8629] IPVS: starting estimator thread 0... [ 556.361513][ T9102] IPVS: using max 240 ests per chain, 12000 per kthread [ 556.419388][ T5476] gspca_cpia1: usb_control_msg 05, error -71 [ 556.456925][ T5476] gspca_cpia1: usb_control_msg 01, error -71 [ 556.463390][ T5476] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 557.217037][ T9108] loop1: detected capacity change from 0 to 32768 [ 557.227707][ T9108] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES [ 557.237947][ T9108] bcachefs: bch2_fs_get_tree() error: EACCES [ 557.481047][ T5476] usb 6-1: USB disconnect, device number 2 [ 557.726654][ T9118] FAULT_INJECTION: forcing a failure. [ 557.726654][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.740209][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.2.866 Tainted: G W syzkaller #0 PREEMPT(none) [ 557.740367][ T9118] Tainted: [W]=WARN [ 557.740414][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.740496][ T9118] Call Trace: [ 557.740540][ T9118] [ 557.740587][ T9118] __dump_stack+0x26/0x30 [ 557.740739][ T9118] dump_stack_lvl+0x1df/0x270 [ 557.740898][ T9118] dump_stack+0x1e/0x25 [ 557.741033][ T9118] should_fail_ex+0x7dc/0x8a0 [ 557.741187][ T9118] should_fail+0x2a/0x40 [ 557.741306][ T9118] should_fail_usercopy+0x2e/0x40 [ 557.741445][ T9118] _copy_to_user+0x35/0x120 [ 557.741599][ T9118] simple_read_from_buffer+0x1b2/0x340 [ 557.741757][ T9118] proc_fail_nth_read+0x1e0/0x2d0 [ 557.741893][ T9118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.742028][ T9118] vfs_read+0x279/0xf90 [ 557.742159][ T9118] ? stack_depot_save_flags+0x35/0x7b0 [ 557.742285][ T9118] ? kmsan_get_metadata+0xfb/0x160 [ 557.742425][ T9118] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 557.742574][ T9118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 557.742734][ T9118] __x64_sys_read+0x1fb/0x4d0 [ 557.742896][ T9118] x64_sys_call+0x2f9c/0x3e20 [ 557.743063][ T9118] do_syscall_64+0xd9/0x210 [ 557.743182][ T9118] ? irqentry_exit+0x16/0x60 [ 557.743336][ T9118] ? clear_bhb_loop+0x40/0x90 [ 557.743475][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.743611][ T9118] RIP: 0033:0x7f72a398d8dc [ 557.743707][ T9118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 557.743819][ T9118] RSP: 002b:00007f72a4893030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.743942][ T9118] RAX: ffffffffffffffda RBX: 00007f72a3be5fa0 RCX: 00007f72a398d8dc [ 557.744029][ T9118] RDX: 000000000000000f RSI: 00007f72a48930a0 RDI: 0000000000000003 [ 557.744113][ T9118] RBP: 00007f72a4893090 R08: 0000000000000000 R09: 0000000000000000 [ 557.744196][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.744273][ T9118] R13: 00007f72a3be6038 R14: 00007f72a3be5fa0 R15: 00007ffc6d7d8af8 [ 557.744399][ T9118] [ 558.780865][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 559.000951][ T9134] loop5: detected capacity change from 0 to 512 [ 559.081410][ T9134] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 559.152972][ T9134] EXT4-fs (loop5): invalid journal inode [ 559.158858][ T9134] EXT4-fs (loop5): can't get journal size [ 559.237040][ T9134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 559.258912][ T9134] System zones: 1-3, 5-12, 13-13, 30-30 [ 559.412860][ T9134] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.871: bad orphan inode 15 [ 559.491188][ T9134] ext4_test_bit(bit=14, block=30) = 0 [ 559.498594][ T9134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.145360][ T8678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.347032][ T9146] loop3: detected capacity change from 0 to 2048 [ 560.394180][ T9146] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 560.603214][ T9156] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.621415][ T9146] NILFS (loop3): corrupt root inode [ 560.717655][ T9148] loop2: detected capacity change from 0 to 2048 [ 560.927053][ T9148] udf: Unknown parameter 'volÉume' [ 562.741605][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 562.741683][ T30] audit: type=1326 audit(1758564998.472:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 562.918159][ T9170] loop1: detected capacity change from 0 to 32768 [ 563.517350][ T9176] loop2: detected capacity change from 0 to 32768 [ 563.572835][ T30] audit: type=1326 audit(1758564998.542:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.587249][ T9173] capability: warning: `syz.3.880' uses deprecated v2 capabilities in a way that may be insecure [ 563.595499][ T30] audit: type=1326 audit(1758564998.542:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.631714][ T30] audit: type=1326 audit(1758564998.552:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.656519][ T30] audit: type=1326 audit(1758564998.562:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.679142][ T30] audit: type=1326 audit(1758564998.562:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.701919][ T30] audit: type=1326 audit(1758564998.562:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.726495][ T30] audit: type=1326 audit(1758564998.962:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.750014][ T30] audit: type=1326 audit(1758564998.962:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.772629][ T30] audit: type=1326 audit(1758564999.132:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc872d8eec9 code=0x7ffc0000 [ 563.819245][ T9183] 9pnet_fd: p9_fd_create_tcp (9183): problem connecting socket to 127.0.0.1 [ 563.917709][ T9186] loop1: detected capacity change from 0 to 128 [ 564.031705][ T9176] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 564.031861][ T9176] allowing incompatible features above 0.0: (unknown version) [ 564.031935][ T9176] features: lz4 [ 564.066755][ T9176] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 564.075459][ T9176] bcachefs (loop2): initializing new filesystem [ 564.092116][ T9176] bcachefs (loop2): going read-write [ 564.166032][ T9176] bcachefs (loop2): marking superblocks [ 564.257255][ T9176] bcachefs (loop2): initializing freespace [ 564.288910][ T9176] bcachefs (loop2): done initializing freespace [ 564.318884][ T9176] bcachefs (loop2): reading snapshots table [ 564.325315][ T9176] bcachefs (loop2): reading snapshots done [ 564.706444][ T9176] bcachefs (loop2): done starting filesystem [ 564.912494][ T8851] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 565.136774][ T3842] ===================================================== [ 565.144124][ T3842] BUG: KMSAN: uninit-value in bch2_alloc_sectors_start_trans+0x750/0x3560 [ 565.155890][ T3842] bch2_alloc_sectors_start_trans+0x750/0x3560 [ 565.163339][ T3842] __bch2_write+0x7ff/0x6bc0 [ 565.168116][ T3842] bch2_write+0xcc5/0x1860 [ 565.172870][ T3842] bch2_writepages+0x26b/0x570 [ 565.177770][ T3842] do_writepages+0x3f2/0x860 [ 565.182728][ T3842] __writeback_single_inode+0x101/0x1190 [ 565.188868][ T3842] writeback_sb_inodes+0xac1/0x1cb0 [ 565.194371][ T3842] wb_writeback+0x4ce/0xc00 [ 565.199006][ T3842] wb_workfn+0x397/0x1910 [ 565.203669][ T3842] process_scheduled_works+0xb8e/0x1d80 [ 565.209406][ T3842] worker_thread+0xedf/0x1590 [ 565.214509][ T3842] kthread+0xd59/0xf00 [ 565.218722][ T3842] ret_from_fork+0x233/0x380 [ 565.223582][ T3842] ret_from_fork_asm+0x1a/0x30 [ 565.228527][ T3842] [ 565.231151][ T3842] Uninit was stored to memory at: [ 565.236335][ T3842] __bch2_writepage+0x2b40/0x3c90 [ 565.241670][ T3842] write_cache_pages+0xc5/0x270 [ 565.246656][ T3842] bch2_writepages+0x153/0x570 [ 565.251666][ T3842] do_writepages+0x3f2/0x860 [ 565.259180][ T3842] __writeback_single_inode+0x101/0x1190 [ 565.265872][ T3842] writeback_sb_inodes+0xac1/0x1cb0 [ 565.271469][ T3842] wb_writeback+0x4ce/0xc00 [ 565.276121][ T3842] wb_workfn+0x397/0x1910 [ 565.280767][ T3842] process_scheduled_works+0xb8e/0x1d80 [ 565.286493][ T3842] worker_thread+0xedf/0x1590 [ 565.291468][ T3842] kthread+0xd59/0xf00 [ 565.295666][ T3842] ret_from_fork+0x233/0x380 [ 565.300393][ T3842] ret_from_fork_asm+0x1a/0x30 [ 565.305482][ T3842] [ 565.307872][ T3842] Uninit was created at: [ 565.312472][ T3842] kmem_cache_alloc_lru_noprof+0x822/0xed0 [ 565.318465][ T3842] __bch2_new_inode+0x9b/0x4b0 [ 565.323496][ T3842] __bch2_create+0x286/0x1650 [ 565.328320][ T3842] bch2_create+0xba/0x1c0 [ 565.333637][ T3842] path_openat+0x2d44/0x6760 [ 565.338381][ T3842] do_filp_open+0x280/0x660 [ 565.343155][ T3842] do_sys_openat2+0x1bb/0x2f0 [ 565.347974][ T3842] __x64_sys_open+0x219/0x2c0 [ 565.352935][ T3842] x64_sys_call+0x1843/0x3e20 [ 565.360628][ T3842] do_syscall_64+0xd9/0x210 [ 565.365271][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.372455][ T3842] [ 565.374874][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(none) [ 565.386278][ T3842] Tainted: [W]=WARN [ 565.390160][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.400529][ T3842] Workqueue: writeback wb_workfn (flush-bcachefs-25) [ 565.407775][ T3842] ===================================================== [ 565.414937][ T3842] Disabling lock debugging due to kernel taint [ 565.421328][ T3842] Kernel panic - not syncing: kmsan.panic set ... [ 565.427855][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: kworker/u8:10 Tainted: G B W syzkaller #0 PREEMPT(none) [ 565.439140][ T3842] Tainted: [B]=BAD_PAGE, [W]=WARN [ 565.444438][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.454621][ T3842] Workqueue: writeback wb_workfn (flush-bcachefs-25) [ 565.461547][ T3842] Call Trace: [ 565.464914][ T3842] [ 565.467921][ T3842] __dump_stack+0x26/0x30 [ 565.472419][ T3842] dump_stack_lvl+0x53/0x270 [ 565.477191][ T3842] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.483185][ T3842] dump_stack+0x1e/0x25 [ 565.487512][ T3842] vpanic+0x361/0xc50 [ 565.491702][ T3842] panic+0x15d/0x160 [ 565.495812][ T3842] kmsan_report+0x31c/0x320 [ 565.500470][ T3842] ? __msan_warning+0x1b/0x30 [ 565.505283][ T3842] ? bch2_alloc_sectors_start_trans+0x750/0x3560 [ 565.511809][ T3842] ? __bch2_write+0x7ff/0x6bc0 [ 565.516741][ T3842] ? bch2_write+0xcc5/0x1860 [ 565.521491][ T3842] ? bch2_writepages+0x26b/0x570 [ 565.526648][ T3842] ? do_writepages+0x3f2/0x860 [ 565.531543][ T3842] ? __writeback_single_inode+0x101/0x1190 [ 565.537488][ T3842] ? writeback_sb_inodes+0xac1/0x1cb0 [ 565.543158][ T3842] ? wb_writeback+0x4ce/0xc00 [ 565.547957][ T3842] ? wb_workfn+0x397/0x1910 [ 565.552648][ T3842] ? process_scheduled_works+0xb8e/0x1d80 [ 565.558556][ T3842] ? worker_thread+0xedf/0x1590 [ 565.563587][ T3842] ? kthread+0xd59/0xf00 [ 565.567962][ T3842] ? ret_from_fork+0x233/0x380 [ 565.572843][ T3842] ? ret_from_fork_asm+0x1a/0x30 [ 565.577956][ T3842] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.583924][ T3842] ? __kmalloc_noprof+0x9c8/0x1310 [ 565.589199][ T3842] ? __bch2_trans_kmalloc+0x59f/0xb80 [ 565.594703][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.599956][ T3842] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 565.606419][ T3842] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 565.612612][ T3842] ? __msan_memset+0xf6/0x1b0 [ 565.617414][ T3842] ? __bch2_trans_kmalloc+0x67b/0xb80 [ 565.622926][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.628202][ T3842] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.634182][ T3842] __msan_warning+0x1b/0x30 [ 565.638817][ T3842] bch2_alloc_sectors_start_trans+0x750/0x3560 [ 565.645168][ T3842] ? bch2_alloc_sectors_start_trans+0x82/0x3560 [ 565.651628][ T3842] __bch2_write+0x7ff/0x6bc0 [ 565.656371][ T3842] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 565.662380][ T3842] ? wb_workfn+0x397/0x1910 [ 565.667034][ T3842] ? process_scheduled_works+0xb8e/0x1d80 [ 565.672930][ T3842] ? kthread+0xd59/0xf00 [ 565.677303][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.682560][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.687819][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.693069][ T3842] ? __pfx_kmsan_internal_set_shadow_origin+0x1/0x10 [ 565.699883][ T3842] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 565.706099][ T3842] bch2_write+0xcc5/0x1860 [ 565.710669][ T3842] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.716651][ T3842] bch2_writepages+0x26b/0x570 [ 565.721546][ T3842] ? __pfx_bch2_writepages+0x10/0x10 [ 565.726947][ T3842] do_writepages+0x3f2/0x860 [ 565.731663][ T3842] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.737637][ T3842] ? queue_io+0x731/0x790 [ 565.742079][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.747342][ T3842] __writeback_single_inode+0x101/0x1190 [ 565.753110][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.758386][ T3842] writeback_sb_inodes+0xac1/0x1cb0 [ 565.763788][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.769086][ T3842] wb_writeback+0x4ce/0xc00 [ 565.773743][ T3842] ? queue_io+0x431/0x790 [ 565.778214][ T3842] wb_workfn+0x397/0x1910 [ 565.782707][ T3842] ? kmsan_get_metadata+0xfb/0x160 [ 565.787982][ T3842] ? __pfx_wb_workfn+0x10/0x10 [ 565.792904][ T3842] process_scheduled_works+0xb8e/0x1d80 [ 565.798711][ T3842] worker_thread+0xedf/0x1590 [ 565.803587][ T3842] kthread+0xd59/0xf00 [ 565.807944][ T3842] ? __pfx_worker_thread+0x10/0x10 [ 565.813236][ T3842] ? __pfx_kthread+0x10/0x10 [ 565.817946][ T3842] ret_from_fork+0x233/0x380 [ 565.822666][ T3842] ? __pfx_kthread+0x10/0x10 [ 565.827378][ T3842] ret_from_fork_asm+0x1a/0x30 [ 565.832317][ T3842] [ 565.835718][ T3842] Kernel Offset: disabled [ 565.840098][ T3842] Rebooting in 86400 seconds..