last executing test programs: 7m11.59573072s ago: executing program 32 (id=24): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@usrquota}, {@noauto_da_alloc}, {@grpjquota}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001640)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_dev$MSR(&(0x7f0000000740), 0x25, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000780)=[0x6, 0x1, 0xc27b082, 0xffff, 0xcc7, 0x4, 0x2, 0x2]) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$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") 7m11.174391921s ago: executing program 33 (id=29): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xbb}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x43}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x9, 0x903d, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 7m8.862539001s ago: executing program 34 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000003000000060000000b"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x1}], "b923"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1a, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_4={0x3, 0x1, 0x1, "396ad1a9"}, @local=@item_4={0x3, 0x2, 0x2, "72e69427"}, @local=@item_012={0x2, 0x2, 0x2, "82e8"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0xb, "c7d20133"}]}}, 0x0}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 6m55.726117339s ago: executing program 35 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) lseek(r1, 0x102, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x200000d, 0xf683218c4c0f051, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000040)={[{@errors_remount}, {@nogrpid}]}, 0x8, 0x507, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m52.287048418s ago: executing program 36 (id=109): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x30cc1, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x30cc1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0xa10818, &(0x7f0000000780), 0x1, 0x526, &(0x7f00000027c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0xa10818, &(0x7f0000000780), 0x1, 0x526, &(0x7f00000027c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x3, 0x3, 0x5, 0x6, 0x6, 0x3, 0x9, 0xfffffffd}) unlinkat(r1, &(0x7f00000003c0)='./bus\x00', 0x0) lstat(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x100, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c6163636573733d636c69656e742c63616368653d6e6f6e652c63616368657461673d78696e6f3d6175746f2c6d61736b3dcd41595f57524954452c7375626a5f726f6c653d5b7b27275c5c2c6e6f6d616e642c657569643c", @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = socket$unix(0x1, 0x6, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000340)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^])]()'}}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) (async) close(r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183000, 0x0) write$FUSE_NOTIFY_RESEND(r4, 0x0, 0x0) (async) write$FUSE_NOTIFY_RESEND(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000700)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x9c, 0x8000c, 0x1, 0xfff9, 0x800, 0x3, 0x0, 0x0, 0x1}}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x5) fstat(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r8 = getuid() r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@resgid={'resgid', 0x3d, r11}}, {@resuid={'resuid', 0x3d, r10}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@resgid={'resgid', 0x3d, r11}}, {@resuid={'resuid', 0x3d, r10}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r12, 0x0, 0x30, &(0x7f0000000840)=""/225, &(0x7f0000000540)=0xe1) setxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="0200000001000800000000000200060009a6f70317c532d1a68c49a03304e352ef9aa6c4c5b11960c4e44bb47b3cecd2f06a9a7b6d89310bb53c56e347d1c9e89d1d4e1361b1a3149a54d202d336afb3716e067122e6ada39c14e8b9f3e6194199e1a74599af52404cc0755a09229b0e8995f8c0fb269a730bb7bd1ed18490c61a665d38ec02d48ef7a04deb397ea8270f3b0ace53a4c4a53467d1832ada201dfc47f88872138af03e6bd6598b290cf77dedcb879c682f768b86d742a955e40af72ca8e0376d217c484fdd6983e861e3c7aabe8b04d3c59b", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="040000000000000008000600", @ANYRES32=r11, @ANYBLOB="10000600000000002000000000000000"], 0x44, 0x0) 6m41.820052698s ago: executing program 37 (id=163): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xffffffff00000001) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000d00)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") symlink(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) close(0x3) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f000033a000/0x2000)=nil, 0x2000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6m39.39174881s ago: executing program 38 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) lseek(r1, 0x102, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x200000d, 0xf683218c4c0f051, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m31.915584973s ago: executing program 39 (id=219): mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x21accb, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x200480d5}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, 0xfffffffffffffffc, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x86, 0x8, "f1a5d8d46e94"}]}}}], 0x18}}], 0x1, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r4, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000050000000400000001"], 0x50) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000180)=@raw=[@generic={0x7b, 0xa, 0x7, 0xfff0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0xb, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 6m22.3628657s ago: executing program 40 (id=285): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e3b400000000000000000000e639482eca73ca2cb83bf8ff0c0000000ceeffff0600000006cd680000080300000000305f2e001e00"], &(0x7f0000000900)=""/4096, 0x2b, 0x1000, 0x1}, 0x28) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m19.302453659s ago: executing program 41 (id=300): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESHEX, @ANYRES16=r0], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000200)='8', 0x1}], 0x1}}], 0x1, 0x48040) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9f}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1, 0x0, 0x0, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_delete(r2) 6m16.91367557s ago: executing program 42 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xfffffffe, 0x1fd) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10003, 0x5, 0x8000000, 0x2000, &(0x7f0000020000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r2, 0x0, r3, 0x0, 0x400c5, 0x5) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @ipv4=@tcp={{0x16, 0x4, 0x0, 0x12, 0x172, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x1e, 0x0, [{0x2, 0x9, "e8a9a92d7530a3"}, {0x0, 0x2}, {0x7, 0x4, "973f"}, {0x0, 0x9, "2a6f903269b58e"}]}, @end, @ssrr={0x89, 0x23, 0x63, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}, {{0x4e24, 0x4e20, 0x41424344, r5, 0x0, 0x0, 0xb, 0x80, 0x7, 0x0, 0x9, {[@timestamp={0x8, 0xa, 0x7, 0x5}, @generic={0x4, 0xd, "27b3aebbe1161a30fc72ff"}]}}, {"b0b0cfd94ea65e91272bb6f6144ebe2a28d79e17ffaba3d0dc314b71d8b0012efc596bff1491ec8b1b48e3e8c73a2c973a132662386547c030a974ca091559066d68bc0535bab856ae3f4a6f710aa26f2eb42ac6a25fe88b6a81cb5c26f3a75ae46f4d3401ed29a20bf01e2b40bad7c412d62308f51ee5e7042328d3401919f5c8a6d784f023c37ebb09344cb13bf8ba80fd9a482f3481158849ed7f0e7b4f04baebcd3a7c7ba205a1726b63831f062f5e8bd0e8b249e9744b5573e91e7aff293188183932fc68324bb8c7c88859d48811d61e9573fdff837ee54fbbcfcdcb6d668a0c57bd27347fbf7bbd137562"}}}}, 0x172) syz_emit_ethernet(0x36, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x4e23, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x1d, 0xff, @remote, @local}}}}, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/vlan0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x136) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 6m16.453031922s ago: executing program 43 (id=316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) close(r2) (async) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) (async) close(r4) (async) close(0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) write(r1, &(0x7f0000000900)="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", 0x131) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0xfffffffe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x40, 0x9, 0xf, 0x4, 0xf, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x78051}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000053000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x9, 0x2, 0x42, 0x9, 0x7f, 0x6, 0x5, 0x5, 0x3}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x7, 0x60, 0x0, 0xa7, 0x8, 0x5}, {0xffff1000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xfec00000, 0x8, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x7, 0x13, 0x8, 0x9}, {0x1111d004, 0x1, 0xf, 0x5, 0x3, 0x5, 0x40, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x3, 0xf0, 0x7}, {0x1000, 0x2f}, {0x3000, 0xfffd}, 0xc0000031, 0x0, 0x6000, 0x2024, 0x7, 0x0, 0x3000, [0x7, 0x4, 0x60, 0x4132]}) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) 6m15.129954556s ago: executing program 44 (id=232): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="d73e", 0x2}], 0x2) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0xe194, 0x40, 0x3, 0x3e2}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85ef, 0x2000, 0x1, 0x1ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa369, 0x80, 0x0, 0x1cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9b7, 0x4000, 0x2, 0x234}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61c0, 0x40000, 0x2, 0xc6}, 0xffffffffffffffff}], 0x4, &(0x7f0000002540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, '\x00', {0x2, 0x35b, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x7, 0x5, 0x6, 0xfffffffffffffffc, 0xfff, 0x8, 0x53f3, 0xa}, &(0x7f0000000680)={0x8, 0x5, 0xffff, 0x81, 0x9, 0xfffffffffffffffb, 0x8, 0x4}, 0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80), 0x8}) (async, rerun: 64) syz_clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb3}, 0x58) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x44) close(r3) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0xaa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 64) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000040)=""/103, &(0x7f00000000c0)=0x67) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000001200000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001500)={r5, 0x0, 0x0, 0x4}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) (async) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="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"/626], 0x278}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 5m48.316873448s ago: executing program 45 (id=455): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0xc2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00000b4000/0x3000)=nil) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000300)={0xc, 0x1, 0x9, 0x25}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flistxattr(r1, 0x0, 0xfffffd33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe8", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7, 0x4000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r4}, 0xc) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000001340)={{0x7, 0x7, 0x7, 0xe2ba, 0x7}, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 5m47.520948088s ago: executing program 46 (id=461): lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) (async) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55bf, &(0x7f0000006a80)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) (async) ftruncate(r0, 0x7) 5m40.658689715s ago: executing program 47 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x103200, 0x40) 5m36.847613983s ago: executing program 48 (id=536): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000000), 0x1000, 0x101401) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c000000130000012bbd7000fedbdf25188105064e234e21c1c20000eb00000005000000040067004100000028a400001c000000ff010000", @ANYRES32=0x0, @ANYBLOB="bf0900009300000004000000030000004d0001008c1fefa5c8047f83a7a28b6ccfa6aa7c95e0601c260860c4e182c40c4d97ba7fb46713d55b9ad29eced6b75c4f2d0e511522df821957996dc9565b8ce841c15a9c601bc5751bfab148000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4802}, 0x8000) 5m35.151021497s ago: executing program 49 (id=548): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001140)={&(0x7f0000000d00)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbcf3}, 0x1c, 0x0, 0x0, &(0x7f0000000f00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x6}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}], 0x30}, 0x20004014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='res', 0x3) 5m32.756108649s ago: executing program 50 (id=563): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0xc2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00000b4000/0x3000)=nil) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000300)={0xc, 0x1, 0x9, 0x25}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flistxattr(r2, 0x0, 0xfffffd33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe8", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x7f, 0x3, 0xff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7, 0x4000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r4}, 0xc) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000001340)={{0x7, 0x7, 0x7, 0xe2ba, 0x7}, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 5m31.318422376s ago: executing program 51 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', 0x103200, 0x40) 5m28.353733962s ago: executing program 52 (id=586): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000440)={{}, "c72fa21e91ef2f7bfac2ebd36f8d1abf6b0f8b77448ba00158ce837421d947af3987c10b99559d884f71f0ca57f8fdf09b97ea54a5c3cba2ea1bab1e7e57c8606ec8f7a232d8eb71ed75449e103c99c06080cbc2569c1072cef8b942879cc68c60407c6ebe0bad54a8fa5b5f5656e063f92c3165ee22ee917f860ab9cbbd0a1b89a0bd826f9593b69897105e637826a91fc37af826aecac28a2073c92c77b24971655eceae33eece35cdf3eb82f37e6b3d9c20691de875c4eb6afbd9baf17bcb6f59b208aa4c0c807b10d4016e66d1dbfc2ad7321a2c87a4a837fd50d294c8ff90415ca290ca146ce24175624b4c1ba14fdbeb70920acc61cbf8d598f2512c48bc377e60f41fb779a96694a7471c691033d606a5e5b9f4e08ec9f057c517ca0a5a3e84b6b5f972b61c9e58a79ac9b6f36024c63c5ec6c87999bd31f722a4453991ed4be4c1cb6fa8784348e08ee3f3120be10d306d3672c1a5b08ec5d651da3213e2b279cd45cefa34353da436f800b47427e5e877e39cb12f897e1d041b6df09941877d6bb1c82df1ab1ced760aa561b96789cb9775a5c864bbbd0102b761f8923f438917083604c0f0d8f6371323498eb535848a53139a848e128b6fab4ff7812330a757cb9a7d2ec6c954add39ba3602d88c0617ff83f8062a37d26240639c2049fa8426111f8d55d5c60969adbc18024c20c8b40a679617e3010dd720e4a3f2dbf1efbb50b2052d178631c736a1138945c87f2d8ec059eda472a7f8cdbe16611b27c59a6ec5287d397ee3d71b323c6212bcad747629c8e27df0a477281c8f4fcc2841d725870420a2fe3b91a6e6255f6c7178015d1947a34dd4cabe941bb41ae009f1f9db26c839183fd52f11045419e5af7046e4726c9b8a95e7e7da8393c36337f3e156cec232053d616020c088784952d413654b3489cca9b453f6a142ab00abca382e6923ea85acd3e9c77c1795d029a26287a05fd79325f93fd9f838a0a23f38f37a8bb95e0ee68e14f0f4823b3891ec9465c1a0438809511b8ef25441eaff756f43691d790c106f64dcd25fd3cfdc5570c239b19492788d748e44c27def370407a0edb465469b2035cde4be76097dc067179f68a4dab3254983fda6aeb9c06d4ff59681672dbb6905067d80c3e43cca9e14b948a852469830670446522c3bc95ecb445dd038a2b566213d1a3df6d558eead4236818a22135e6622a99d457bb37388f7afb0edc246915f975924853e558147e403673e948151dfb6b84c5550ff0762564c5215f43283470095d02729145078e05a95417767a5b3b9df6d26857f8b0decdf7917c587f395176f537e078f216438c42cc6e301f18ce8aa42bd6cfdff422af3a3a1e695894b114ab70f39bd72ce9d74413fdf2834f40a98aaa30f4d091734dc62126f69fb71aa98ccee9466dfbbd9a4d9492c4be58455f6541c614cd8d11e38cf1405e9cfa9272025c637dc35315936a58e0d95e5253606f1707efa7a1efa8bd54a25906f03b9f07f2acfe86cc3fd9cbb9f001da978a2addabe6862ebad920f2e6e5ba045ec7f168272f4ffd3b6516c40d13679d65ac52fe63fd680a9a0a26f5e17cbf959ff79bbef65c4a94243e2d5443385bb144f7608644c5ad8c45670514cd6227bac940c18daf902c575312b38ca52ca6b5aafd640520868f049d78d110d837d090e9bd9094beeae96cca445802d4dd2842c1f49324f5d60015a483c61dc6c9c1212f5e0f29fe23db3e271beb67e3999de601ceed4adeef32b043180cf898e913f58f58c72d1fd8712a2545bce990bc6b3509cc445a978a8dc8538dfb43a861d0603519bfbd67dbec3c48920e5dbf51d45b3c7e1d7d2650f2b46b0faa7359c1c1296d9a7713f836d03504bbf4e03de9b411f61580beb6ea02f2bc5e166a8cc0e64fa8bd8866da703d925156f36a196fbd03e9abeed05c9770ca0c17ac6b2ec017c37cb193b3963f04da84919574a114d058d57a61875bfc3049ed8c549f2ff9c9ac191c039eca116e8ed7d9f18b3837e52d2a0da6e4516c26180c99f0b716d08309c87ba14472751579d8c1e1e9b3fa6cb6f3145764eb7a2221fc444067def9463d3c3686db77db2f1494e4ba3a070fdede1d9be2d57e0e1451638be10dc627c2d2570a2cf0bd70343a3e48c160100e646f302d4f9a9677d02109f23c4d65e93ba4867fc27b3b0f7ca40cdfd0c7b1d980e92ec0beea9437bbe15ff7cc497b28aa690d50298d71c1271f9e4354be714c44116916252244ed0662a95181150633896b2b9fa14ea7fd58fdb057acaafd507e3e950722c92cee3ecba434e3e4ab770cb8965bae4b33d95bc3df9f82054b071e6917dc21aaba85e7a5c92c4ee916fa1ac194758154335983fd88c7570d9031d4603643f9ae85503f2968f8ccd870f33c44f51c76cd14a069617e225dfeca7d6ee9b61b7a0441db80b084ffb7c26572900cad8ed34ec0350e4660299983a039aa8b349cbccaa12568747b99f8879c2ec9a71fdf289265ab666764161786396ddd6ccfbc0f4c764d74d2b20f589a98e09f4d2dc0c10d847fe49b6662f5102b8e2cfc991aa4b8523b252127d2fd969172fab0473eeabd0d6f75e2fc4b5eb0e3190fab37fb9b087ca4726a37aa3ceca78541d46a304445fab5182ca7653b12d2726992386ffa39d935c6ab8bac9a540bceb1b45854c489a4192b865db391a23680d34836b3d9d49b268dc7d38a12dbc60d308c048eef1ae08bbaeb61bd0d8bd3ca0c11d61433383f364c3f5b9e31e4cd76817d1dbfa9d31fc3e390805b63e5482ef725f0e3ecd264846b75792a8d8bbfe141ea9b4acf104446b50441197359d636ca65860f152e4af17efcd3b4c9c97d69e6c3a8373b87db10b33f4e6c2531bf825bf4b5c5c379fe8bc4730055cd2d57bd77a6e7700082c28cc74c9493f90b95059792618525ac87a7a1e0e0a6cad30972cb683320f61c938250b905e20d04a56f51184c291369cc21c0d86dde5825d8a5eb66b564eb5878b1deb1b3f90b4cfb0bf47102b9cadabccbd7211fe3b3a1fc0d17f012faeb354855d9d28b5b744c2d8cb7e075163e58c15ffa8a7e2afc0dcbe0e9e09960404a96c2452c0b274884270b1e99a329b13307e7ee633de2d314bf5c3638b17863db359733fc9708482e344cb516843f88d6c25d8e87c563400e5d54e68d819e2f20abc0484b15fc30d992dd4b58c7bcf58a952ceb7f318f038a54f1f75fdb08644987ceee07c32ac259fb52c91d06a1e6c0d71b391c371a459624fbc750102b92d81a68ed42955d5398abc5a62dc26175425e423c4b4b4c555e7e2612452134d3e6e296ed0109792a6a0db4fd0005f0eb9741fcf7cb53fe69a9326e1770f774bb7915338925ef84649293b512ba23c5b062a6ed8390c10c94a42d9a582132c3c64f59a0663e8414f4de2f280ab00ab7b23e706d7601a588f205bf283dfe1e5fd34cc73641f7d6dddbe026db8b20dc3469bdee082c7cd64713ef0968e088c9e76eabe9201395c978f5a58629ef6fa7abb13c10fc43bfa8315d54fce6000d6a49c92defede4ec3a5706768e309c1d415a72ca4639871bd528d7f6e6c26a4fe7b6d7d6154f174c3d3e1bd6556002cd730e41a47fd30e49a5f40e90d07ccfe7dcb0750583bbabb9779a008dc41c21b734fcfef75c86de676d23e9127aecb041789172b98814467d65bfa52c95498c995537621ed76192c1b5d343a7d3f377a5384077c7a7f53b4538782f292c8e63cc35bbeeba05d9a68a7abdb1bb4f0b5cf92b234872ee6d3a1823ba182aa9c42dbaa658704df6fb8047e54ee7fe50fb903ed101d346c0c0277ce3b28d98751041892731c9a06e880faed52e03b48511424184c78de26ecdb9df76e2940ffbfddae24194c12a77c14233797c1af1b39d1a026993e0f991eacece1b1c7e8ae1b4c67624a8a28a8cea7863163764d2567711357e82a5088d8c6693421dacff02045b0d7999eadfbd04b3552f1052db338c98b445d6e9773bb3d0a552ee2343dc85925427658637631242701db8a95de1aba9a255631caab7a4d1f3639efc7bf0c64577fe6d1b07e57393770d6949f91d8ca867a1b980eaecc56855ec782d3ef99d117e471e004fe2e11173607e0e5425f3df73f8c7930922f21c3be8ce565d81f5381e5ba066a6b52bb9856479199650bc0a4eee793e52e4e4fc8ac10fb8f5b24efc952ebc981442b78c7a7a4d5bc0078c8038fee3abded3f7aefe333ac0966998cc6506352933cff25d7aec0a87c1aa541f0ca608e31bcbde00c6476e5a4919bd4e24b91bd2516708ec73570d223db31eb2e4d6f8f56ac1cee14e40f2178bade298ed6ae73f9410ba093cdb560db568e28d25f5e744d4ffd19a7dce24b5d90422fb405ff613fa737f7279d7af42202add92fc9df192762548fe7dc7232e378e7ec8eafdc82e63e43fc0a61b3b94e23d5a152d2ed5433157fdc0d1b628409f5a205a1c75e35dffbefa0f0d4afa08fdbbc984ed2ebc24840a8e9b890e610bd37046ab136ff7bff08f005a895fd1e0d14a3237b1b0cd5aeebafba91e4409a5aee0dc555f85519816b376a5b25e04b68ce92af334d5a584400a7dfdc5f3aa77884e6a59b5f4ec9db0b7798228bce5f610a1c691f8894fa818a0090a813404343186d70ec6641655da164b25e5152e6cab45aafb1f268c6292118e84d025e5a6974ef5a8da169f9863f3d07db77d44a69d9def241db4f7c9ad61ca9a7f1f6f6508b342c4ceb9b612bc95410413f9e81668771e2464d440f0a4e4414e8e95553a24d4f053b7a5407c1e609eab14b42cf585af9fb4466da3d1bbef4ad302c3c73a96e799688fc619b401350a53f0e10803732bf2d49ff35f5a99b38e9f61fb6d3ee4824d1dab52b5f487964cffb841b7beec7e1ae901778ca1769460f3bd275c4cd19790aa361ecbd440624e73b6888e03c33b8844f718053b84dc1bcb912a8b43b029faa83b53d6f466221bf15e4302fe9c7b2ddd517d88f5c0a3d3b56af612427706dae4ed98eff55d44598f6efa4e9a85ed9025fd40a36939be13d6e6f4ce241ef941402adcbea0a44a9e08ff1e81a5ad23ce2ea6bdc27d6b5ba1cfb0f13ddb103569542b52de2a99a0bf44868aa6300f5dd34f6ad69dd2dd9a95084b8254323026c543dd80a69157add0b4a69cb893ed4286d529af9baa3ded42ecec07ccb8a268488d1e2eac38e275f887ae58d07da27974bf5d760bedb4d2cf88211597e20796263334960659cd18260776103e8e68c1154abb9de42b1acf94cac6db70ef4c6b4705e7c9a5f085b655060ef8bc3e8a2cadbdd80c61fd2c3e221f2adec82d5de495a5b9da7605f97eec29168c3388fe79aee8d7f8775afff4bda5ffbf4ed56fe326414d483c7884c0fd5d143bd7e38ca93d8b94bbf3ddb059ed78d478a0fc7b6143f0aa4ed8ba1db064c534ebab5a0d49ed7616cf60ffab224863fca99509f4177c8422925b7235e4deca8b95e84e7dd6c761dd7afbf7cba3aa40798abfd7b7e76c99b4812c77e829bf7b1d7aee0077da22e5696ae239a3e632a1da8b424fe1e2ea61ecc947ff9e0d6af96a30ad6955928c654215f75a9aac0f78a61dbed930e53e43781489c783f5d7e382092b005926ba8b077586aa3d0f67b49dcc4b62625915cdf0fb19038cb87ba97ef3d1f59fec208e728b9b61dfd08957cad633532624953c84f2c162333691130133e23c594fb93598183510b9881e4e2584cb170b4c97593a8cecfff04bf375e7b77e3b5489cd28b8daeab30de4b4ba857188a9"}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) personality(0x619641b6fb4b8591) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4e2}, 0x94) readahead(0xffffffffffffffff, 0xb, 0x83) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8=0,iocharset=koi8-u,iocharset=cp850,debug,showexec,shortname=winnt,shortname=lower,check=normal,nocase,utf8=1,utf8=0,rodir,sho}tname=mixed,\x00'], 0x81, 0x2a2, &(0x7f0000000580)="$eJzs3U9rI2UYAPBn0iRNdCE5eBLBAT14Crv7CTZIhcWclBz0oovbBcmEhQaC/zDuybvgyY8g+B38AF78Bh48Ct7cgziSzEySpmlrJG2l/n6XefLO8+T9k7ctFObNh6+MR4+fTp48++KXaLWSqD2IB/E8iW7UovJVAAC3yfM8j9/zwmW59WhGRN4pX9WuYXgAwBXY5e8/AHA7vPve+2/3B4Ojd9K0FTH+ejpMorgW9/tP4uPI4jjuRif+jMiXivjOw8FR1NO0+mfAtB3DiPEHP5Wv+79FLOrvRedO2baqb5Yt6UK8Pp5Nh/Oe59dGvJBE9POkSLkfnXgpIm9Ub1Bc3no4OLqfnq2PYTPeeO27cvx/HUcvOvHzR/E0sni8eItV/Zf30vTN/Ns/Pi9mMIxIZtPh4SJvJT+48g8DAAAAAAAAAAAAAAAAAAAAAID/jV661F0/P6c6DbDX237/3POBytN9Zmvn69xN07Q6xmc6bERRX4+X61G/uZkDAAAAAAAAAAAAAAAAAADAf8fk089Gj7Ls+ORU8GM+D9oX5mwG9bWW6rH+y6u2B6MfInav+idBHJRDy5IzXSTVrT30dbhLcntbp1E7bw3rWRSD/2b3gb26rwleGFS7a/QoiUuSW9s3ydquq7bhySTZYUPmW5bu4Nyq5p7m3nzx35a3ty7UfMaN5WJm2fefrHJa809yLbmx55+UDcnef/cAAAAAAAAAAAAAAAAAAACnrR76jV/P3Hx2I0MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGu3+v7/ZRDdzZbNYFYWL1pqFycfnky2dNu95mkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0dAAD//6awUdE=") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 5m23.905419617s ago: executing program 53 (id=599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000000)="e1", 0x1, 0x20000000, 0x0, 0x0) 5m22.086129644s ago: executing program 54 (id=614): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x5}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000080)={r1, r2}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b502f3ff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x6, 0x6, 0x8001, 0xb2, "202b9809007d0000cd681ec267a000", 0x6, 0x1d}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/features/transaction_report\x00', 0x0, 0x0) 5m20.386469138s ago: executing program 55 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2, &(0x7f0000000180)=@raw=[@generic={0x40, 0x0, 0x1, 0x18}, @exit], &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) r2 = syz_usb_connect$uac1(0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0) fadvise64(0xffffffffffffffff, 0x7, 0x7fffffffffffffff, 0x5) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2, &(0x7f0000000180)=@raw=[@generic={0x40, 0x0, 0x1, 0x18}, @exit], &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) (async) syz_usb_connect$uac1(0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0) (async) fadvise64(0xffffffffffffffff, 0x7, 0x7fffffffffffffff, 0x5) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) 5m17.067994084s ago: executing program 56 (id=627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x84, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x9, 0x10, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "28adc1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x3, 0x9}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x0, 0x0, 0xe}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3ff, 0x0, 0x6, 0xffff, 0x3c}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x1f, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x1, 0x58}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x0, 0x20}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0x6, 0x20, 0x80}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xb, 0x5}]}, 0x3, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "8e6712bf88ccf8fc9fe992dda87cf3ac84ec20da5923ad858f5e685a2e5aff9363e9a05d4a50fce77937d7094f9c08b693a9fbcd25ec3f3ac8c32a856c9fcdc8d56006cf83266bc6f3b04b731980e6d41bd8dbd5f64677a6362db991d901313abaf530b32b98175e02e4f22755629c3bb6c3135b7695a45e7b32c851765c1e"}}, {0xd1, &(0x7f0000000300)=@string={0xd1, 0x3, "79aad4c0ee75db733ad9f0936a3a27afd128c4ee616cfaf249275023ad8d7c34e93b81d89b08e427445fdc6a6d1d35df11b2e023fd04d76a13fbd0cd9787ca1b0b57d9f915bc92c403ff9597d0723d48c8cedc139db5771abb88d7035b9677312de818601a79055dce3384c4526394ffd65438ff31dd5a26efd6e08b26f33a7c6b0ceb0bc639c02648647e9229852defd197aa9274ca2404c7724f2080aea7564b813be5294c6c14270177142fae27c0f08068cd571b89d07f451280f080afcc6481869b74e53a8fb84ac7977fee20"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r4, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fstat(r5, &(0x7f0000019680)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x804000, &(0x7f0000000540)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x9}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@no_bf_readahead}, {@no_bf_readahead}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x41dd}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7fffffffffffffff}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x3}}, {@readahead={'readahead', 0x3d, 0x5}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, '='}}, {@fowner_gt={'fowner>', r3}}, {@subj_role={'subj_role', 0x3d, '/dev/usb/hiddev#\x00'}}, {@euid_gt={'euid>', r6}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '(^#'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '#-%'}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x84, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x9, 0x10, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "28adc1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x3, 0x9}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x0, 0x0, 0xe}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3ff, 0x0, 0x6, 0xffff, 0x3c}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x1f, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x1, 0x58}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x0, 0x20}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0x6, 0x20, 0x80}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xb, 0x5}]}, 0x3, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "8e6712bf88ccf8fc9fe992dda87cf3ac84ec20da5923ad858f5e685a2e5aff9363e9a05d4a50fce77937d7094f9c08b693a9fbcd25ec3f3ac8c32a856c9fcdc8d56006cf83266bc6f3b04b731980e6d41bd8dbd5f64677a6362db991d901313abaf530b32b98175e02e4f22755629c3bb6c3135b7695a45e7b32c851765c1e"}}, {0xd1, &(0x7f0000000300)=@string={0xd1, 0x3, "79aad4c0ee75db733ad9f0936a3a27afd128c4ee616cfaf249275023ad8d7c34e93b81d89b08e427445fdc6a6d1d35df11b2e023fd04d76a13fbd0cd9787ca1b0b57d9f915bc92c403ff9597d0723d48c8cedc139db5771abb88d7035b9677312de818601a79055dce3384c4526394ffd65438ff31dd5a26efd6e08b26f33a7c6b0ceb0bc639c02648647e9229852defd197aa9274ca2404c7724f2080aea7564b813be5294c6c14270177142fae27c0f08068cd571b89d07f451280f080afcc6481869b74e53a8fb84ac7977fee20"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x423}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000040)=0xc) (async) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r4, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) fstat(r5, &(0x7f0000019680)) (async) setreuid(0x0, r6) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x804000, &(0x7f0000000540)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x9}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@no_bf_readahead}, {@no_bf_readahead}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x41dd}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7fffffffffffffff}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x3}}, {@readahead={'readahead', 0x3d, 0x5}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, '='}}, {@fowner_gt={'fowner>', r3}}, {@subj_role={'subj_role', 0x3d, '/dev/usb/hiddev#\x00'}}, {@euid_gt={'euid>', r6}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '(^#'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '#-%'}}]}) (async) 5m12.783974834s ago: executing program 57 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) socket(0x40000000015, 0x5, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x1803000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c6d61785f726561643d307841303030303030303030303030303035f7286c6b73697a653d3078303030303030303030303030303430302c616c6c722c616c6c6f775f6f746865722c666f776e65723c00000000000000", @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00'], 0x1, 0x0, &(0x7f0000000d00)="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") openat(r9, &(0x7f0000001d00)='./file0\x00', 0x301000, 0xd) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 5m11.198118915s ago: executing program 58 (id=648): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x80001) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) fcntl$getown(r2, 0x9) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) 5m7.413446982s ago: executing program 59 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x1c, 0x3, 0x0, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x14, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty}, {0x12, 0x8, 0x0, @local}}}, 0x26) lseek(r1, 0xffffeffffffffffe, 0x0) syz_ublk_setup_io_uring(0x3d27, &(0x7f0000000080)={0x0, 0xc31e, 0x20, 0x2, 0x3e0}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x70d6, &(0x7f00000001c0)={0x0, 0xca03, 0x100, 0x0, 0x6}, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r6 = mmap$IORING_OFF_SQES(0x0, 0xd98b0, 0x6, 0x8010, 0xffffffffffffffff, 0x10000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) r8 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) r9 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r9, 0x1) flock(r8, 0x1) r10 = dup3(r0, r0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r13, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040080) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r13, @ANYBLOB="00082bbd7000fcdbdf2509000000080005000e00000008000600050000002800018014000300fc020000000000000000000000000001070006006468000006000100020000001bf059b909bcdf956aa8bb8ad0188c240002800800040000020000060002004e20000006000f00090000000800030002000000080005000100000014000180080009005500000008000500020000003de530febf971a0440fa2a673a8cf113b453d3a0ed1c0888d7bea371006a7e5d316da544b961ce16d1a95e381b5f41df5ba8413a574788477aad5bb8f984e0d64e1fa1d2d28703e5a1371b35dbbd9c"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r4, r5, r6, &(0x7f0000000380)={0x2e, 0x18, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf547, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0x6ed, 0x0, 0x0, 0x1000, 0xffffffff, r14, 0x0, 0x120}}}, &(0x7f0000000400)) 3m29.79852878s ago: executing program 60 (id=822): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4080) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m28.564991382s ago: executing program 61 (id=836): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x1, 0x0, 0x0) r1 = userfaultfd(0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) sendto$inet(r7, &(0x7f0000000300)="b9ad874fb5eb5a9d6e1b7b3fd513a69d022f0cb847ae9eaa6a20554aeea09c8392087de474e7083e7e17821a59fb7aebe728a9e74654", 0x36, 0x4040000, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001900070426bd700851db02fd04fe0a0024000034433ff4333c08947d127fd31a1da10294b679045030dd438b7d94d7f77f9197c8f06e66f49881851f0dd87a913dd85fc88672b3354914023826ecea7c157ec57bec44"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption_v1}, {@nodiscard}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@test_dummy_encryption_v1}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x2083, 0x0, 0x0, 0x0, 0x0) socket(0x22, 0x6, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m2.206888944s ago: executing program 62 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000640), 0x7, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@minixdf}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x3, 0x294, &(0x7f0000000b80)="$eJzs3c9qI3UcAPDv5F8TPSQHTyJ0QA+eSusTtEgFsSAoOagHLbYFaULBQqAqxp58Ap/A59nLsi+wD7DL3raHZWdJMvnT7iTddtu07H4+l/74/pn5/ibT5jTTXz7pHu4dHR+c/vU46vUkSpuxGWdJtKIUY/9EoUdPi+MAwD13lmXxLBsaf+GfnK+ozumslG57NgDgdsx8/2d3PQsAsBzf//DjN1s7O9vfpWk9ovtvr53E6Ocov3UQv0Un9mM9mvEiIpsYrb/6emc7KulAKz7r9nvtQWf35wf58beeRAz7N6IZragV9W+kIzP9/V67Gh/k59/sxP63/0czPio+/xcF/dGuxeefzsy/Fs14+GscRSf28tnG/X9vpOmX2X/P//xpEB30J/1ee2VSl1eXl/rBAAAAAAAAAAAAAAAAAAAAAADwTltLJ1rn378zfvH/gvyC9wP1Z97Ps56maZaM6qf9lfi4EpW73DsAAAAAAAAAAAAAAAAAAADcF8cnfxzudjr7v9/oYvxYf0EqXp6PrETE9c+1+gY1UYqYRKKcj9ZJIoaRWuSLy45TjZVh5+XF5SvuohHDCZNKXP0ijPdzMZVMahqzqdWIydVojBYzkbe+AeoxXIzvrsPd5LIPt150k1xrkUTENJIV3H7lue21i5FGvoOC4saCMWofXmv4rDknNdhTdXIxFx+nerO/y8v5+wMAAAAAAAAAAAAAAAAAAExNH/otSJ7O76vd5lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGTT//9/hUU/b34tVcsT5UGkEnnqDrcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAe+JVAAAA//90rFpv") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x10, 0x29, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d3, 0x0, 0x0, 0x0, 0x80000001}, @ldst={0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x3, 0x3f, &(0x7f00000008c0)=""/63, 0x40f00, 0x50, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x6, 0x4, 0x160e}, 0x10, r2, r3, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) unshare(0x6020400) r5 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x10, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0)=[r6], 0x1) r7 = dup2(r5, r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) munmap(&(0x7f000062c000/0x3000)=nil, 0x3000) socket$inet(0x2, 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 3m0.02241385s ago: executing program 63 (id=961): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000005240000000d240f0100000000000000000006241a00000009058103000200"], 0x0) 2m54.437042635s ago: executing program 64 (id=982): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8f0}}, {@noquota}, {@bh}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x12a) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x800) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket(0xa, 0x3, 0xff) recvmmsg(r3, &(0x7f0000002040), 0x400000000000233, 0x10022, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0x9, 0x4) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000900)) 2m52.397576458s ago: executing program 65 (id=994): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000600)={[{@usrjquota}, {@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@delalloc}, {@quota}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10100008}}, {}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001640)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = eventfd2(0x7fffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000003240)=[{&(0x7f0000002200)=""/4108, 0x100c}], 0x1, 0x826b, 0x4000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r8 = eventfd2(0x1, 0x80001) io_submit(r4, 0x7, &(0x7f0000002900)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf67, r2, &(0x7f0000000100)="88d80ab5d4a377a12c2f44fa36f54e1849b266139d6da3e3bad81f3aff48bf122df223e4a553bae8a5e1f1be6663a24c9ebf33202cae23c5e98be4dda8dce44694dde925bb62e696a6bdffca3839555d76fe4408ce1e27684185f950b58077cd76ea3834719fdb587f22b8d9625804d1141489c8b2f760", 0x77, 0x200, 0x0, 0x0, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000001c0)="29e3a08db84a625900f780a30b9bd7c596f3cbb4d1c29a4f4ebe66b0642f3ab36f402b121c0941eafd0288affde8c6c002052415c6def9dd30cd22cd601d1782b9efedb7d9488093e98f9bef8e66107dd79c7e6522d5a159ec4b8c801d357b26fb1df4b431826c5ffc4e12833fec533d10385ecedfba9935c6ea79ed7c9aa5eff4b700f6e6cb1c669ff0", 0x8a, 0xc3e, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xff, r7, &(0x7f0000000300)="f53e9c58e34f58d0b5cff1c166fdca9e4c22413d1ee1b9ecba5827493334732e45459a1ca343faf5eb1b9b4a7f9c426b7cc83ccf2b77b3", 0x37, 0x7, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xecc7, r3, &(0x7f0000000380)="6380d317b79a819f88fa711474eee70a2cdf77c12cbd03c39131d389bf7fbccb61aa0bdd10a237bb001b422ce79d6c0a6ce68acefa53cc9bf867be311e62d7c69b6e23664ac27e0df92f33233ef2b71af8be2966b5ca8b0e5c867c4b548bb62a32f72213bba3b35117c3349f5167045728d0ca9a6df4999225f802408eda1bb0e5f76a30964f3d7652c4c7293cbd1c31ef155cb07d3cc87c2637b2a5bb7476e539440ad1400928", 0xa7, 0x5000000, 0x0, 0x2, r5}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000001680)="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", 0x1000, 0x0, 0x0, 0x2, r5}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x7, 0x3, r7, &(0x7f0000000480)="b300f7c9819c9e3f0b03692b0c9b581110f5fa29e126152748dcc1389c66cd86781560c0f978db93b0ff70b247d2a6441d3c33b5563b4ea8b938828506543de96b245dbd73f2af866c8e4eae23c7c6e1ee00279407348a11315eeb0824347b9cd3c103807402dd1e9a51154bd0876a64eeb8172de6e13a89bc219530a9f5842db99a64e96de843be9e82ee44fe58ff67ae40df74766c35779f5ea4d0460cac8708292d2e014a661711f0d12876c37afc7f3c6930b20c04c8343effc58f4e86068bd940e8d5168b837b7a37a226d9023409437a37a6ed84a9b1d927fcd6f7224dfa328b9fe21378ae96cedf9d79", 0xed, 0x6eb, 0x0, 0x0, r8}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x3, 0xe2d5, r3, &(0x7f0000002800)="9b12508e0006c02eb22c15468ff4d7847b8fd81734af2b74d8e509220100ffbfa930406a514cde322f9718b4308b532e404f44fbfdbda537d6bc6caa6858c404c5c142a52434d7e4c836409cf4e87e26214036120fd961320c9245b7874a71e941ff8991520ea72e2df803d3f1d45e65607980b4824fa38bb55ea65df019e7cbdcb5bc4dd2", 0x85, 0x10001, 0x0, 0x2, r5}]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffc, 0x7, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchdir(0xffffffffffffffff) 2m49.547063211s ago: executing program 66 (id=1008): socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='adfs\x00', 0x48545cf, 0x0) 2m41.552669278s ago: executing program 67 (id=1069): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@nogrpid}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@sysvgroups}, {@norecovery}]}, 0x5, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040004000000000010000000000000002000000000000000daa19c3ad2b71cac4df1435a4b768faa7bec184ff222f594341383665995bd369f11ff8ea5b3c0c24aa837243fac7d56caf0558220020746a460dab35f683f9c993a5029cf7c0d41b4e86878f4be1f2e2f0f5e8a015e58538c04e4ffe7f806d54d20bd36486f31d7b0820e27ed0a0e5c5152733368af5ffccee0cf0a5b2ad0bb4ce007c3cdbd01bc330536ff46baa609d046246ac48af6faaa38186a1e72a5a15227d1cd45d37dc7c73de514c48044a70c5fd0c4f3849cde64aae05ff3fc"], 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0x0) 2m38.946945136s ago: executing program 7 (id=1083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000340)='N', 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, 0x3, 0x1, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "eb090b08ece8dca0"}}, 0x48}, 0x300}, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003dc0)={[{@utf8}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@uni_xlate}, {@numtail}, {}, {@utf8no}, {@utf8}]}, 0xfd, 0x2bd, &(0x7f0000000600)="$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") connect$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f0000000540)) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8000) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.433135054s ago: executing program 7 (id=1092): syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003"], 0x0) syz_usb_connect$uac2(0x6, 0x11b, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x7000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x42, 0xb0, 0x72, {0x8, 0xb, 0x1, 0x0, 0x1, 0xb, 0x20, 0x99}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1b8, 0x9, 0x58, 0x9}, [@extension_unit={0xa, 0x24, 0x9, 0x4, 0xbd, 0x9, "a23c43"}, @processing_unit={0x7, 0x24, 0x8, 0x1, 0x4, [0x0]}, @extension_unit={0xc, 0x24, 0x9, 0x1, 0xffff, 0x8, "d83db6b71b"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, [0xb, 0x5, 0x9, 0xf0, 0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x204, 0x4, 0xae, 0x8, 0xfffffffd, 0x5, 0x2, 0x7}, @effect_unit={0x13, 0x24, 0x7, 0x2, 0x4, 0x6, [0x3, 0x2, 0x0, 0x0, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf4, 0xff, 0x2, 0x3, 0x1, 0x8749, 0xaa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xa, 0x1, 0x10, 0x8, "8aa7850096e2be3616"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x800, 0x5, 0x1, "1bb4e74a74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd, 0x6, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3, 0x38, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x1, "c2d11c46c0ca743c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xa5, 0xf8, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2, 0x9}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xfa, 0x4, 0xc, 0x40, 0x7}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3a639b0ce0e4203409b4ad529128f4f2"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0xec, &(0x7f0000000300)=@string={0xec, 0x3, "5288d6d952ea43d066237506d1d5bdc1be6987a5afb21dab13b63a21427347f5194406cdad6eecc07d4cb50e77d48e4a0c9d808822ff9b7e93fdfea8990b4bae8a256c5d289dcc9aa389963575bbb6814882bab7cb73a66e850c23d72c54ef315539ce32fe89e6f4aa1aaead396bb68da5be49eb6dac2b165db7ba76d9ac68c4b1978be631f3cdf6854ffb63d177572758f0869b96a8dfaaa88fd158cecff83be1ad5c2ca6993aa9c2b46c9a1a27fae50cb496f9dac22c891246ffd63518c699fbcf19a74ff76bba8d52ca87b0fbf38cfabbc36feaece2a38ef44f64598babb19dd1f0a2de36fd1b4714"}}]}) 2m37.412396415s ago: executing program 68 (id=1092): syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003"], 0x0) syz_usb_connect$uac2(0x6, 0x11b, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x7000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x42, 0xb0, 0x72, {0x8, 0xb, 0x1, 0x0, 0x1, 0xb, 0x20, 0x99}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1b8, 0x9, 0x58, 0x9}, [@extension_unit={0xa, 0x24, 0x9, 0x4, 0xbd, 0x9, "a23c43"}, @processing_unit={0x7, 0x24, 0x8, 0x1, 0x4, [0x0]}, @extension_unit={0xc, 0x24, 0x9, 0x1, 0xffff, 0x8, "d83db6b71b"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, [0xb, 0x5, 0x9, 0xf0, 0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x204, 0x4, 0xae, 0x8, 0xfffffffd, 0x5, 0x2, 0x7}, @effect_unit={0x13, 0x24, 0x7, 0x2, 0x4, 0x6, [0x3, 0x2, 0x0, 0x0, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf4, 0xff, 0x2, 0x3, 0x1, 0x8749, 0xaa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xa, 0x1, 0x10, 0x8, "8aa7850096e2be3616"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x800, 0x5, 0x1, "1bb4e74a74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd, 0x6, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3, 0x38, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x1, "c2d11c46c0ca743c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xa5, 0xf8, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2, 0x9}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xfa, 0x4, 0xc, 0x40, 0x7}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3a639b0ce0e4203409b4ad529128f4f2"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0xec, &(0x7f0000000300)=@string={0xec, 0x3, "5288d6d952ea43d066237506d1d5bdc1be6987a5afb21dab13b63a21427347f5194406cdad6eecc07d4cb50e77d48e4a0c9d808822ff9b7e93fdfea8990b4bae8a256c5d289dcc9aa389963575bbb6814882bab7cb73a66e850c23d72c54ef315539ce32fe89e6f4aa1aaead396bb68da5be49eb6dac2b165db7ba76d9ac68c4b1978be631f3cdf6854ffb63d177572758f0869b96a8dfaaa88fd158cecff83be1ad5c2ca6993aa9c2b46c9a1a27fae50cb496f9dac22c891246ffd63518c699fbcf19a74ff76bba8d52ca87b0fbf38cfabbc36feaece2a38ef44f64598babb19dd1f0a2de36fd1b4714"}}]}) 2m37.303814918s ago: executing program 69 (id=1094): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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") timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() syz_pidfd_open(r1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setresuid(0x0, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x141042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x200000000000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2m27.102977552s ago: executing program 70 (id=1151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8, 0x5, "4c4e0e027e"}}) 2m14.306365533s ago: executing program 71 (id=1191): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000000880)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 2m12.741560054s ago: executing program 72 (id=1148): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x87) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x3e) (fail_nth: 1) 2m2.161513188s ago: executing program 73 (id=1262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") (async, rerun: 64) r1 = open(0x0, 0x8000, 0x112) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x9, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = open(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80242, 0x1df2a23c5997fa5f) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x1000) r8 = syz_clone(0x20148411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r8, 0x0, 0x0) (async, rerun: 64) wait4(r8, 0x0, 0x2, &(0x7f0000000a80)) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000040)=0xffffffffffff8727) (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="54f2e4bad222e56e8f9f1da8826141ad7d82af96a1bd29609ff53c923094d25e6a6316d6510b2651f56a8eae1c228932935e8ece1f31657975ef663176171ae9bc", @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000038c0)={0x2020}, 0x2020) 2m0.877220841s ago: executing program 74 (id=1270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x2, 0x231, &(0x7f0000000240)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./sys\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000200)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) r8 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f0000000080), 0x0) keyctl$search(0xa, 0x0, &(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x3}, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000280)={0x1, 0x0, 0xba, 0x9}) 2m0.1104369s ago: executing program 7 (id=1263): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x11, r0, 0x4000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_read_part_table(0x637, &(0x7f0000000000)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x14e142, 0x90) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x287, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cadb7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83482dbab3f591dded505630dd9dd4828dde3fd9218fb1d041a26c60a724fd8506ba03a370721c281ff6202410dd078fc15f5c4e02b46fba33e0a772130f9a158a2e403ea61919f461358bee016e4c7c114ba7f4486aa7984fffd4555d71e049b2e933ae820bb5990ac3e27e7ebb101ad67ea47ed363de7dab4fb43769f5eca65b5918a76af8860f4d0d79805d9c08d3e27a8f041615ef85b52e521a90e511fcb303dc0ab19abaf0e37e9725bb596de8d8afecf5e15215a83652f3834bf00bf7bbc82b3c45e78a46e70a54a1925b4bf8392070e9cde0634790e444e4e4ee762db725122865a194d7ba289d9aecbba85da0a5c0de6b71a3cc"], &(0x7f0000000340)='GPL\x00'}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000021c000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xffffffffffffff72}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d202129e31"], 0x0) syz_usb_connect(0x6, 0x39, &(0x7f0000000000)=ANY=[], 0x0) 1m59.118690077s ago: executing program 2 (id=1286): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000740)={[{@noquota}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@resgid}, {@noinit_itable}, {@norecovery}, {@nombcache}, {@nodioread_nolock}, {@errors_remount}, {@mblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_emit_ethernet(0x68, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "108ec8", 0x0, 0x2c, 0x0, @private0, @private1, [], "40a8"}}}}}}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = syz_io_uring_complete(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332", 0x85, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='wl,'], 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') 1m58.916426302s ago: executing program 2 (id=1287): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8, 0x5, "4c4e0e027e"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x2, 0x85}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000000)) 1m57.387590141s ago: executing program 2 (id=1295): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000020000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m57.245533025s ago: executing program 2 (id=1298): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x0, 0x3, 0xf55a, 0x2, r2}) r4 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x183) timer_delete(r3) write(r4, &(0x7f0000000000)='3', 0x3e) 1m56.452014946s ago: executing program 7 (id=1302): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000001380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x7, 0x0) 1m56.451673886s ago: executing program 2 (id=1303): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x2, 0x7fff, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x700, 0x20, 0x8, 0x5}}) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000640)={'security\x00', 0xe7, "ee1ad5424e9d1bde051a6a2f93bad897ba7d69d66152e9efd82f97889c7a1dac97ddca92bb1bbf79add115b5ce778e0eff26b33c2c2e4584c699504bdeaed7f5bd244d029aa33806e4aedef2fbcc18a6e5fc8c8731b895cf82c0834fc431561c9c1e2dabc5781092c348e79038de76adc0ec4423851f5e18cc21eab5f07b7b3db56b6c480cdbcbca93f68d665dfc4147e8bcbe7b933a8f017cba3c522a72f6ff126eb2e9ed2542242a713123cda1f9deee9dbc1957c944777392a3dddf3c35725e528f0d342b459f9acb860f921ea3b73bd812014576a5d86df6abf96790988125d1148feb830b"}, &(0x7f0000000780)=0x10b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18094affffffffffffff00000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1m55.534087699s ago: executing program 7 (id=1307): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0xaa6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x3, &(0x7f00000001c0)=0x813) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) sendmsg$key(r5, &(0x7f0000000280)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100200a0000000600000000000000030006000000000002000000320000000000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01080000000018001400128009000100766574680000000004000280"], 0x34}}, 0x40c4) unshare(0x60400) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m55.453512031s ago: executing program 7 (id=1309): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1m55.224336027s ago: executing program 75 (id=1309): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1m55.211211698s ago: executing program 2 (id=1312): r0 = epoll_create1(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0099a50ec8ed96560e00000500000005002c000000000008000f80"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xc000200f}) (async) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000303444,\x00', @ANYRESDEC=0x0], 0x1, 0x5514, &(0x7f0000005880)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+cIYy6sKVpkkaMpPkliZNa1cuXIoL/xNRcOXSv8GFa3fiQnEnKLnn1pn6AKFpY6e/H9x855ycfPecUArfveEGcGItZr/+XIlLcS4i5iPiYkTRrpRH4XYKL0TE5YiYe+KolON/DpyOiPMRcWmSPOWslG99fnV85eZPb/3yzXdnTl344uvvZ7drYNZejIj+Rmpv91PMOyk+LMcb424R+zfGZUxv9B+V/TzF7fZakWG7sTevUcTrnTQ/39gaTuJ6r9GcxE53vRjfGKQTDsedvTzFBx42Not+q71WxO4wL2JnN61rZzf9b9sdjlKeVpnvoyJ9jEZ7MY23d9ppPxuPitgcjMrxlDdvtXcmcVzG8nTRzHutYh1rB/mm/9/e7g62drJxe3PYzQfZzVr9pVr9VrW+mbfao/aNaqPfunUjW+r0JtOqo3ajf7uT551eu9bM+8vZUqfZrNbr2dKd9lq3Mcjq9dr12rXqzeWydTV7/f57Wa+VLU3iq93B1qjbG2br+WaWPrGcrdSuv7ycXaln79xbzVYf3L17b/XdD+68f/+Ve2++Vk7627KypZVrKyvV+rXqSn35BO3/k3LRU9w/HEhl1gsAOH7U/8AsHF79v/kg4vDr/1D/T8Wxqn9Pev1/CPuHA1H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlG0VhM/Qvl+DPl0HNlvxIRcxHx+z+Yj9P7cs6XeRb+Zf7CX9bwbSWKDJNznCmP8xFxuzx+e/awvwUAAAB4en318eXPUrWeXhZnvSCOUrpoM3fxwynlq0TEwuKPU8o2N3l5fkrJir/vU7EzpWzFBayzU0qWLrmdmla2/2R+Xzj7RKikMHekywEAAI7E/krgaKsQAAAAjtKnj5vKv5OkEnu3MvfuBRe/vH98Q/Dcvh4AAABwDFVmvQAAAADg0BX1v+f/AQAAwNMtPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mDnfnLTBqI4AD8bXOg/FVXd9yrdwTF6hC67rDhAL8EBuqBXyAU4A9nlCBFE2BOCIxaRPLaV6PskY8aYH28QLGZGGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE+31Xb1/8/3v11zDsdu8vQGAAAAuGZfbVf1k0XT/piuf06XvqZ2ERFlRFwbu0/iXStzknKqp/v/Xd5fPavhJqJOOH3GLB0fIuJHOu6/9P0tAAAAwNu1W2+WzWi9eVi0Xp2NVBUDaSZtyk8/M+UVEVEt7jKllae8b5nC6t/3NH5nSqsnsOaZwpopt2mutBep/+7nWbv5xaloTuXVt52LzNZ3AABgQJPWadhRCAAAAEP6NXYBjKOIx6XM81JgWvNPy3vvWy0AAADgFSrGLgAAAADoXT3+H2j/v6P9/wAAAGAczf5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9GlfbVe79WbZNedw7CZPbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhgf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+/dto4oDAP7uzufSAqoJyEMQAokBFuq6paUbYgBFDPwJSFHqllCXH20GWlWILGwocxcEI0JIoLD1f+jcSFnClsFDkJhBd76LLz8kHH7cOcnnI717X59P977vLFn53rsYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASqN3JnGSbTrjOC72Pdl5sJT1G/v6zKO1zfmsZXFUZ9LHw0vVF1G3uUQAAAA4PZKyvg8hbKXrC1kfd/L6Py2PyWr+754dx2U9v7/uL/uy9s/ar79sv7A7UGc8TnbSG8vDwcWDqbT+v1nOtvN/e0Qrv/L5vZck/0Di91efH6X59Yy+efz43XYenqkjWwDgn7hQ9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfRani6jKMQwnxrEmc2dh4sHdY/WtucL9vVhw/XwleTc2anSEMIN5aHg4u1zma23b13/9bicDi4U3/wcgihqdHfLqZ/68MpDg6hkesj+I+CuPiwZyWf4xHs+Zo4X/sXEwAAJ05atKyu30rXF7J90VwIf36f1//tULz3WnH8Uer/7Y+uPqmOVa3/+7XOcrb1Vm5/1rt77/4by7cXbw5uDj5581L/rf7la1euXOvl90p67pgAAADw77SLVq3/47mD6//nKnGYsv7//Nv+l9WxEvX/oSaLfk1nAgAAcLo998ofv0eH7I/a7fDF4srKnf54u/v60njbQKpHdqZo1fo/mWs6KwAAAKAOo9Voz/r/9Uocplz/f+aHF3+qnjMJIZwt1v8vLH06vF7fdGZaHf9O3PQcAQAAaNbZolXX/9P8+f9495GHOITw+qvjuPgZwKnq/+S9r3+sjlV9/v9yfVOcSXF3fD3yvhtCq1t9N2kuMQAAAE6kp4qWFfu/pesLH/987oO25/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZXAAAA//8APT61") (async) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./file0\x00', 0x2037824, 0x0, 0x2, 0x0, &(0x7f0000000180)) 1m55.163847329s ago: executing program 76 (id=1312): r0 = epoll_create1(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0099a50ec8ed96560e00000500000005002c000000000008000f80"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xc000200f}) (async) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000303444,\x00', @ANYRESDEC=0x0], 0x1, 0x5514, &(0x7f0000005880)="$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") (async) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./file0\x00', 0x2037824, 0x0, 0x2, 0x0, &(0x7f0000000180)) 1m47.337719651s ago: executing program 0 (id=1348): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone(0x812c0000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000c00010001000000"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d0000000000000015000010"], 0x1c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/123, 0x0, 0x80a0000}) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r7, 0xc76ed000) (async) write(r6, &(0x7f0000000000)='7', 0x1) getuid() (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = fsmount(r5, 0x0, 0x80) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r8, 0x16, 0x0, @void}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1m46.968804551s ago: executing program 0 (id=1355): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='geneve1\x00']}, &(0x7f0000000240)={[&(0x7f0000000180)='geneve1\x00', &(0x7f00000001c0)='geneve1\x00', &(0x7f0000000200)='&#\x00']}, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'geneve1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8, 0x5, "4c4e0e027e"}}) 1m46.934656061s ago: executing program 0 (id=1357): r0 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='dmask=00000000000000000002002,fmask=00000000000000000000203,time_offset=0x0000000000000008,dmask=00000000000000000000001,fmask=00000000000000000000001,time_offset=0x000000000000007f,iocharset=cp852,dmask=00000000000000000002001,iocharset=macroman,keep_last_dots,codepage=cp863,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e745e952d726f2c6e616d65636173653d312c00bec647c6e522dc7f57a98eb334e17f0372eb6c2e6475d6f5d9a64a60a79f98ce82c316216704b53183782f6da29d24e99f3a1132eb632c16e77a7a53282e8d32235792586fd554945a7be7ffdc752e5f03ff024257be6e2575b311c1b971931474d2599948ff6c116232f5fbd7aeb6d356d43e574ae31d954fe529a39e7e1b6b1a45c2df31867ec3b89fd20249fac69f1331bfe979acb059ff2b131b82d86848fef0789a34076b2a"], 0x1, 0x1539, &(0x7f0000000480)="$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") statx(r0, &(0x7f0000004400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4000, 0x20, 0x0) (fail_nth: 1) 1m46.316716478s ago: executing program 0 (id=1359): r0 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='dmask=00000000000000000002002,fmask=00000000000000000000203,time_offset=0x0000000000000008,dmask=00000000000000000000001,fmask=00000000000000000000001,time_offset=0x000000000000007f,iocharset=cp852,dmask=00000000000000000002001,iocharset=macroman,keep_last_dots,codepage=cp863,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e745e952d726f2c6e616d65636173653d312c00bec647c6e522dc7f57a98eb334e17f0372eb6c2e6475d6f5d9a64a60a79f98ce82c316216704b53183782f6da29d24e99f3a1132eb632c16e77a7a53282e8d32235792586fd554945a7be7ffdc752e5f03ff024257be6e2575b311c1b971931474d2599948ff6c116232f5fbd7aeb6d356d43e574ae31d954fe529a39e7e1b6b1a45c2df31867ec3b89fd20249fac69f1331bfe979acb059ff2b131b82d86848fef0789a34076b2a"], 0x1, 0x1539, &(0x7f0000000480)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLklSSJCEhaZJXEhJDbklDEpLLkFyGkFwmJo37/X5JSJImSUJyS9b/MzF/9db7f9/3V29+/3ee7+ezP2c9Z+219rPP4+yz9z7HfNN5SK3Gtas3JCL4Q/DCQyIAxALAAAC4CgACACgfVz4usz+nxMQ/thH253ow5XJnwC4nrn/2xvXP3rj+2RvXP3vj+mdvXP/sjeufvXH9GcvONk0reDUv2Xfh+//ZGX/+/xfJKD3mizWlr+0CEPOvDuH6//8P/8BYrv9/reBfWYnrn71x/bOr2MudAPtfgN//2UGOf9jD9c/euP6MZWe/vBccC5f/fvRfvUDkP/kdiO954VW+/Pv5D/efMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhj7C5z2lygAyGpf7rwYY4wxxhhjjDH25/E5LncGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEQk9V/NcTBNZAXroV8kB8KQEGIh0JQGDQYsEAQQhEoClG4DorB9VAcSkBJKAUOSkMZuAHKwo1QDm6C8nAzVIBboCJUgspQBW6FqnAbVIPboTrcATWgJtSC2nAn1IG7oC7cDfXgHqgP98J9cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkOL/9H4F6A7vAg9oCckQi/oDS9BH+gL/aA/DICXYSC8AoPgVUiCwTAEXoOh8DoMgzdgOIyAkfAmjIK3YDSMgbEwDpJhPEyAt2EivAOTYDJMgamQAtNgOrwLM2AmzIL3YDa8D3NgLsyD+ZAKH8ACWAhp8CEsgo8gHRbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgI9hJ3wCu2A37IFPYS989m+OP/V347sgIKBAgQoVxmAMxmIs5sJcmBtzYx7MgxGMYBzGYV7Mi/kwHxbAAhiP8VgYC6NBg4SERbAIRjGKxbAYFsfiWBJLokOHZbAMlsUbsRyWw/JYHitgBayIlbASVsEqWBWrYjWshtWxOtbAGlgLa+GdeCf2wrpYF+thPayP9bNuT2FDbIiNsBE2xsbYBJtgU2yKzbAZtsAW2BJbYitshW2wDbbFttgO22ECJmB7bI8dsAN2xI7YCTthZ+yMXbArds14IQfgi/gi9sQaohf2xt7YB5Ny9MP+2B9fxoH4Cr6Cr2ISDsYh+Bq+hq/jMDyJw8+PwJE4EquKt3A0jkES4zAZk3ECTsCJOBEn4WScjFMxBafhdJyOM3AmzsT3cDa+j+/jXJyL8zEVU3EBLsQ0TMNFeArTcTEuwaW4DJfjMlyJq3AlrsG1uAbX43rciBtxM27GrbgVt+N2/BgVAH6Cu3E3JuFe3Iv7cB/ux/14AA9gBmbgQTyIh/AQHsbDeASP4FE8hsfxGJ7AE3gST+FpPI1n8Syew+fiv2r0cYnVSSAyKaFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkw80ghoiIqioliorgoLkqKksIJJ8qIMqKsKCvKiXKivLhZVBC3iIqikmjtqogqoqpo46qJ20V1UV3UEDVFLVFb1BZ1RB1RV9QV9UQ9UV/UF/eJ+0UD0Qv74YMiszKNxWBsIoZgU3XpCNZSDMNWorVoI54QI3A4thMtXYJ4WrQXo7GD+JsYg8+KTmIcdhbPiy6iq+gmXhDdRSvXQ/QUk7CX6C2mYh/RV/QT/cUMrCnew9k5a4lXRZIYLIaI18R8fF0ME2+I4WKEGCneFKPEW2K0GCPGinEiWYwXE8TbYqJ4R0wSk8UUMVWkiGliunhXzBAzxSzxnpgt3hdzxFwxT8wXqeIDsUAsFGniQ7FIfCTSxWKxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFDfCx2ik/ELrFb7BGfir3iM7FPfC72iy/EAfGlyBBfiYPia3FIfCMOi2/FEfGdOCqOiePie3FC/CBOilPitDgjzoofxTnxkzgvvACJUkgplQxkjMwhY2VOmUteIXPLIOv4L+PkNTKvvFbmk/llAVlQxstCsrDU0kgrSYayiCwqo/I6WUxeL4vLErKkLCWdLC3LyBtkWXmjLCdvkuXlzbKCvEVWlJVkZVlF3iqrytskRC5so4asKWvJ2vJOmQh3ybrybllP3iPry3vlffJ+2UA+IBvKB2Uj+ZBsLB+WTeQjsql8VDaTzWUL+ZhsKR+XrWRr2UY+IdvKJ2U7+ZRMkE/L9tLLC/M/KzvJ52Rn+bzsIrvKbvIneV562UP2lNALZG/5kuwj+8p+sr8cIF+WA+UrcpB8VSbJwXKIfE0Ola/LYfINOVyOkCPlm3KUfEuOlmPkWDlOJsvxcoJ8W06U78hJcrKcIqfKFDlN9rs40ywp5dDMLH49/vNfjn/7d8YP+nnrG+UmuVlukVvlNrld7pAfy51yp9wld8k9co/cK/fKfXKf3C/3ywPygMyQGfKgPCgPyUPysDwsj8gj8qg8Js/I7+UJ+YM8KU/JU/KMPCvPynMXXwNQqISSSqlAxagcKlblVLnUFSq3ulLlUVepiLpaxalrVF51rcqn8qsCqqCKV4VUYaWVUVaRClURVVRF1XV48R+MKqlKKadKqzLqhn9nvCqmrlfFVYlfjc/KL/Ef5NdCtVAtVUvVSrVSbVQb1Va1Ve1UO5WgElR71V51UB1UR9VRdVKdVGfVWXVRXVQ31U11V91VD9VDJapE1Vu9pPqovqqf6q8GqJdF5j4MUoNUkkpSQ9QQNVQNVcPUMDVcDVcj1Ug1So1So9VoNVaNVckqWU1QE9RENVFNUpPUFDVFpagUNV1NVzPUDDVLzVKz1Ww1R81R89Q8lapS1QK1QKWpNLVILVLparFarJaqpWq5Wq5WqpVqtVqt1qq1ar1ar9LVJrVJbVFb1Da1Te1QO9ROtVPtUrvUHrVH7VV71T61T+1X+9UBdUBlqAx1UB1Uh9QhdVgdVkfUEXVUHVXH1XF1Qp1QJ9VJdVqdVmfVWXVOnVPn1fnM075ABCJQgQpigpggNogNcgW5gtxB7iBPkCeIBJEgLogL8gbXBvmC/EGBoGAQHxQKCgc6MIENxMWiR4PrgmLB9UHxoERQMigVuKB0UCa4ISgb3BiUC24Kygc3BxWCW4KKQaWgclAluDWoGtwWVAtuD6oHdwQ1gppBraB2cGdQJ7grqBvcHdQL7gnqB/cG9wX3Bw2CB4KGwYNBo+ChoHHwcNAkeCRoGjwaNAuaBy3+1Pm9P5n/cddD99SJupfurV/SfXRf3U/31wP0y3qgfkUP0q/qJD1YD9Gv6aH6dT1Mv6GH6xF6pH5Tj9Jv6dF6jB6rx+lkPV5P0G/rifodPUlP1lP0VJ2ip+np+l09Q8/Us/R7erZ+X8/Rc/U8PV+n6g/0Ar1Qp+kP9SL9kU7Xi/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9Q79sd6pP9G79G69R3+q9+rP9D79ud6vv9AH9Jc6Q3+lD+qv9SH9jT6sv9VH9Hf6qD6my+nv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2mSf3mR/vRhllYkyMiTWxJpfJZXKb3CaPyWMiJmLiTJzJa/KafCafKWAKmHgTbwqbwiYTGTJFTBETNVFTzBQzxU1xU9KUNM44U8aUMWVNWVPOlDPlTXlTwVQwFU1FU9lUNreaW81t5jZzu7nd3GHuMDVNTVPb1DZ1TB1T19Q19Uw9U9/UN/eZ+0wD08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MS9PStDKtTBvTxrQ1bU07084kmATT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfTzXQz3U1308P0MIkm0fQ2vU0f08f0M/3MADPADDQDzSAzyCSZJDPEDDFDzVAzzAwzw80IMzLzRNW8ZUabMWasGWeSTbKZYCaYiWaimWQmmSlmikkxKWa6mW5mmBlmlpllZpvZZo6ZY+aZeSbVpJoFZoFJM2lmkVlk0k26WWKWmGVmmVlhVphVZpVZY9aYdbDObDAbzCazyWwxW8w2s83sMDvMTrPT7DK7zB6zx+w1e80+s8/sN/vNAXPAZJgMc9AcNIfMIXPYHDZHzBFz1Bw1x81xc8KcMCfNSXPanDZnTf6Ln5fexNqcNpe9wua2V9o89ir793EBW9DG20K2sNU2n83/q9hYa4vbErakLWWdLW3L2Bt+E1e0lWxlW8Xeaqva22y138R17F22rr3b1rP32Nr2zl/F9e299j77sG2ACGAftY1sc9vYPmyb2EdsU/uobWab27b2SdvOPmUT7NO2vX3mN/ECu9CusqvtGrvW7rK77Wl7xh6y39iz9kfbw/a0A+zLdqB9xQ6yr9okO/g38Uj7ph1l37Kj7Rg71o77TTzFTrUpdpqdbt+1M+zM38Sp9gM726bZOXaunWfn/xxn5pRmP7SL7Ec23QawxC61y+xyu8Ku/L+5LrXr7Qa70e60n9gtdqvdZrfbHRerBna33WM/tXvtZ/ag/drut1/YA/awzbBf/Rxn7t9h+609Yr+zR+0xe9x+b0/YH7LOpH/e9+/tT/a89RYICUiSooBiKAfFUk7KRVdQbrqS8tBVFKGrKY6uobx0LeWj/FSAClI8FaLCpMmQJaKQilBRitJ1lJVeSSpFjkpTGbqBytKNVI5uovJ0M1WgW6giVaLKVIVupap0G1Wj26k63UE1qCbVotp0J9Whu6gu3U316B6qT/cSwP3UgB6ghvQgNaKHqDE9TE3oEWpKj1Izak4t6DFqSY9TK2pNbegJaktPUjt6ihLoaWpPz1AH+ht1pGepEz1Hnel56kJdqRu9QN3pRepBPSmRelFveon6UF/qR/1pAL1MA+kVGkSvUhINpiH0Gg2l12kYvUHDaQSNpDdpFL1Fo2kMjaVxlEzjaQK9TRPpHZpEk2kKTaUUmkbT6V2aQTNpFr1Hs+l9mkNzaR7Np1T6gBbQQkqjD2kRfUTptJiW0FJaRstpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG22kHfUw76RPaRbtpD31Ke+kz2kef0376gg7Ql5RBX9FB+poO0Td0mL71Pek7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCKMHd4ZZgnvCqMhFeHceE1Yd7w2jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbD68Ji4fVh8bBEWDIsFbqwdFgmvCEsG94YlgtvCsuHN4cVwlvCimGl8OF7qoS3hlXD28Jq4e1h9fCOsEZYM6wV1g7vDOuEd4V1w7vDeuE9Ybnw3vC+8P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DR8NmYfOwRfhY2DJ8PGwVtg7bhFeEbcMnw3bhU2FC+HTYPnzm5/57F2b1P/Gb/sSwV9g7fCl8KfT+bjkvOj+aGv0guiC6MJoW/TC6KPpRND26OLokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujHqfe0c4NAJJ51ygYtxOVysy+lyuStcbnely+OuchGHGOeucXndtS6fy+8KuIIu3hVyhZ12xllHLnRFXFEXdde5Yu56V9yVcCVdKedcaVfGNXctXAvX0j3uWrnWro17wj3hnnRPuqfcU+5p19494zq4v7mO7lnXyT3nnnPPuy6uq+vmXnDd3fg8F96Tia636+36uD6un+vnBrgBbqAb6Aa5QS7JJbkhbogb6oa6YW6YG+6Gu5FupBvlRrnRbrQb68a6ZJfsJrgJbqKb6Ca5SW6Km+JSXIqb7qa7GW6GqzrzwlbmuDlunpvnUl2qW+AyzxnT3CK3yKW7dLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfLX3VhUrfX7XP73H633x1wX7oM95U76L52h9w37rD71h1x37mj7pg77r53J9wP7qQ75U67M+6s+9Gdcz+588675Mj4yITI25GJkXcikyKTI1MiUyMpkWmR6ZF3IzMiMyOzIu9FZkfej8yJzI3Mi8yPpEY+iCyILIykRT6MLIp8FEmPLI4siSyNLIssj3hfaEvoi/iiPuqv88X89b64L+FL+lLe+dK+jL/Bl72Qd7r3N/sK/hZf0Vfylf0jvql/1DfzzX0L/5hv6R/3rXxr38Y/4dv6J307/5RP8E/79v4Z38H/zXf0z/pO/jnf2T/vu/iuvpt/wXf3L/oevqdP9L18b/+S7+P7+n6+vx/gX/YD/St+kH/VJ/nBfoh/zQ/1r/th/g0/3I/wI2Pe9KOyLpFhnE/24/0E/7af6N/xk/xkP8VP9Sl+mp/u3/Uz/Ew/y7/nZ/v3/Rw/18/z832q/8Av8At9mv/QL/If+XS/OOuWjF/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrvf4T/2O/0nfpff7ff4T/1e/5nf5z/3+/0X/oD/0mf4r/xB/7U/5L/xh/23/oj/zh/1x/xx/70/4X/wJ/0pf9qf8Wf9j/6c/8mf5/+zxhhjjDH2Lxl/qSl+3XPhdn6v3xkjfrFybwC4cmvBjF/2Z55Rrst3od1XxMdmPj7ds/ODWUuNGomJiRfXTZcQFJ0LkPVNUKaff3pwMV4MbeBJSIDWUPZ38+8rup6lfzJ/9GaAXL8Yk5lQVnxp/s8BMPF35n/siZELKoSn4/4f888FKF700piccCleDG1+vr/SGsr9g/zzt/wn+ef8Ihmg1S/G5IZL8aX8y8Dj8Awk/GpNxhhjjDHGGGPsgr6icses68+sX3z+3vV5/C9+b5sDLsX/7PqcMcYYY4wxxhhjl9+zXbs99VhCQuuO/36j2v9o1L/caAL/qZm58bsN7wGynlEA8AcnBMhsyL9yLzb/JdtKuvjW+fuuZWd8AP87SvlnNC7zgYkxxhhjjDH2p7t00v/r59XlSogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/oo/J3a595ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi73P5PAAAA//8+2/mx") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$char_usb(r1, 0x0, 0x0) statx(r0, &(0x7f0000004400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4000, 0x20, 0x0) 1m46.166006111s ago: executing program 0 (id=1362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000700000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m45.700784904s ago: executing program 0 (id=1368): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1m45.511895969s ago: executing program 77 (id=1368): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1m36.728575596s ago: executing program 5 (id=1417): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m36.728192936s ago: executing program 5 (id=1418): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000000040000000800000006"], 0x50) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x803e, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500000000000000000090f84f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x8, [@union={0x9, 0x5, 0x0, 0x5, 0x0, 0x5, [{0xe, 0x1, 0x10}, {0xa, 0x3, 0x5}, {0xd, 0x5, 0x7}, {0x8, 0x1, 0x3ff}, {0x8, 0x2, 0x2486}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x1}, {0xe, 0x380}, {0xc, 0x5}, {0x1, 0x1}, {0x2}, {0xc}, {0xd, 0x3}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0xd1ce}}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f00000005c0)=""/75, 0x100, 0x4b, 0x0, 0x8000, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x8, 0x7, 0x533, 0x20000, 0xffffffffffffffff, 0x3ff, '\x00', r6, r8, 0x5, 0x2, 0x5}, 0x50) syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b0101010a204f0904000000010120000924010200032600c511240806060001020002000200feff03000c2403fd0004a80206f9ff0a090401"], 0x0) 1m35.277437623s ago: executing program 5 (id=1424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="000000b000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.138750727s ago: executing program 5 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xd1, &(0x7f0000001d40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0xc, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "fbd42999b3e9"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x4, 0xfa}, {0x6, 0x24, 0x1a, 0x9, 0x10}, [@mdlm_detail={0x43, 0x24, 0x13, 0x0, "2565ebd4a033755cc4275e482849d01f09b5d28dc0dca402acdacc6708872259e5d5771288245e9a6b1f7d08f2f2570a4744357e32319d50b09d5e12fe0590"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x48, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x1, 0x7d}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x40, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x1b, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x0, 0x5}}}}}}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x110, 0x5, 0xd5, 0x80, 0xdf, 0x7}, 0x113, &(0x7f0000001b00)={0x5, 0xf, 0x113, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x8, 0xf00f, 0x48, [0xf, 0xff3fff, 0x3f00, 0x180, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0xd, 0x1, 0x82f6, 0x10}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0xc8e, 0x0, 0x101}, @generic={0xd4, 0x10, 0x3, "93649b92ea6e057ba1626ebfad8a490185a6360cbd99147c58e0f83e48ed25a29b0a4c70907bc02c49d88af0046017698cbe9f6b4a37482bc2848af3053ef74a8739f0f85838badea1f0eba4e524cdf5553716d60290ed062fddb4a9831e3ffe139210fa290d2315808653611faa45c9377433c5ed4171feccc91a2259e26c2dfe38cce4117fd14f68f7e74f9a9734064bafec0394fe52f3edee85cd0428698e93bf8ebc63ecca4ba1dcb88776f37987ebbf8c0465743da8c2c873715bcdfbb38b3be66e049d50c83f115f77c705fced83"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x42f}}, {0x6e, &(0x7f0000001c80)=@string={0x6e, 0x3, "8bd2248df8e8d93aad6bfdba9c6ddfb0b319503df7f36d0a6dcc2c68cacea59ee529cd403bcd9ee9b485187c628694ad4007bbac3180e917764b0c453c365504aeea24230d3e34601d85d82caa75080452bdbbb2c025082bd37a042fae2747ed34c8b56fcbbe8f3610a45d3b"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x28f4f8, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='dmask=00000000000000000002002,fmask=00000000000000000000203,time_offset=0x0000000000000008,dmask=00000000000000000000001,fmask=00000000000000000000001,time_offset=0x000000000000007f,iocharset=cp852,dmask=00000000000000000002001,iocharset=macroman,keep_last_dots,codepage=cp863,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e745e952d726f2c6e616d65636173653d312c00bec647c6e522dc7f57a98eb334e17f0372eb6c2e6475d6f5d9a64a60a79f98ce82c316216704b53183782f6da29d24e99f3a1132eb632c16e77a7a53282e8d32235792586fd554945a7be7ffdc752e5f03ff024257be6e2575b311c1b971931474d2599948ff6c116232f5fbd7aeb6d356d43e574ae31d954fe529a39e7e1b6b1a45c2df31867ec3b89fd20249fac69f1331bfe979acb059ff2b131b82d86848fef0789a34076b2a"], 0x1, 0x1539, &(0x7f0000000480)="$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") statx(r1, &(0x7f0000004400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4000, 0x20, 0x0) 1m32.148778004s ago: executing program 5 (id=1442): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000300)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@code={0xa, 0x62, {"410f05c46171c4490078b93e0b00000f32c4e2010506b9800000c00f3235000800000f3066ba4300edf20f01f866ba400066ed66bad10466ed48b80000c0fe000000000f23c80f21f8350c0060000f23f8"}}], 0x62}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = timerfd_create(0x8, 0x800) timerfd_settime(r6, 0x3, &(0x7f0000000140), 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c009c6324d27bfcd541a8f181b265285f451ff0c2b538a5469bbab42c5d6b"]) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c106, 0x5, 0x0, 0xfffffffffffffffe, 0x7, 0x40, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x800000, 0x0, 0xfffffffffffffffa}) 1m31.850428592s ago: executing program 5 (id=1443): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x54000, 0x19, &(0x7f0000000000)=""/25}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC], 0x31) 1m31.650278467s ago: executing program 78 (id=1443): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x54000, 0x19, &(0x7f0000000000)=""/25}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC], 0x31) 27.673147373s ago: executing program 1 (id=1768): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x2, 0x1}, 0x18) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x4, 0xbb, &(0x7f0000000280)) syz_emit_ethernet(0xda, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x3, 0xcc, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x0, [0x2, 0xfffffa27, 0x9, 0x77, 0xc37]}]}}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "22455b031643b9e42dd6f42ca107661c9949181877a8fbd8ad06768cb5f16132", "062f33f667104bcb629af48a5723f66f60762b9d09cfb0a55bf3dbeb195cee7b47a506f4d8c3f0ef4016cd2039d5ac2a", "87c2dcaec36dcdb2b39f15fe241f0a370ccbfde72b22e0a3cff3d468", {"cd908bbda426f157c60f32248a2912e2", "214537db905dee7d2ee82341b144af39"}}}}}}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/197, 0xc5, 0x1, &(0x7f0000000700)=""/42, 0x2a}, &(0x7f0000000780)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 26.665453439s ago: executing program 1 (id=1774): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r1, r1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) sigaltstack(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') lseek(r3, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2001, 0xffffffff, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 26.544727582s ago: executing program 1 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 26.543860432s ago: executing program 1 (id=1776): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000003c0)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noblock_validity}, {@minixdf}, {@sysvgroups}, {@errors_remount}, {@jqfmt_vfsv0}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0080e0}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10001, 0x800, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x8, 0xc, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40), 0xc) socket$inet6(0xa, 0x1, 0x0) 25.233978396s ago: executing program 1 (id=1783): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xffffffffffffffff, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcad, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK={0x0, 0x1d, 0x7}]}, 0x138}, 0x1, 0x0, 0x0, 0xc841}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}], 0x1, 0x3, 0x2000000) getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r3, 0xf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r5, &(0x7f0000000000)='3', 0x4e) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) 24.930208894s ago: executing program 1 (id=1785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x184, 0x10, 0x2, 0xeffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@multicast1, {0x2, 0x0, 0x0, 0xffff, 0x4, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x3}, {0x2, 0xfffffffc, 0x9}, 0x70bd2a, 0x10, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ni\x00'}, 0x0, 0xa0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 13.756586564s ago: executing program 9 (id=1850): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x2, 0x1}, 0x18) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x4, 0xbb, &(0x7f0000000280)) syz_emit_ethernet(0xda, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x3, 0xcc, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x0, [0x2, 0xfffffa27, 0x9, 0x77, 0xc37]}]}}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "22455b031643b9e42dd6f42ca107661c9949181877a8fbd8ad06768cb5f16132", "062f33f667104bcb629af48a5723f66f60762b9d09cfb0a55bf3dbeb195cee7b47a506f4d8c3f0ef4016cd2039d5ac2a", "87c2dcaec36dcdb2b39f15fe241f0a370ccbfde72b22e0a3cff3d468", {"cd908bbda426f157c60f32248a2912e2", "214537db905dee7d2ee82341b144af39"}}}}}}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 13.624578807s ago: executing program 9 (id=1853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe80000000001a0000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000a2e83c348e9ec28aa713560541024aedb0dda647b7cf3f384e3a300f18d99fb431aa68b5dd3384acb3ed1a22d6a7aa7d09c83c014e742c0ff599d25812ce8a4f6918e07c2f4221ebe60690c2b0a79b648fef0ab6b4914f4a9322ce10a0fc20417eee96d395a48b6e4dd1ab01f8db79d2ac"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) readv(r6, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 13.083665561s ago: executing program 9 (id=1858): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0xfffffffffffffffc, &(0x7f0000000140)=0xfa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r9, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x826}) ioctl$KVM_RUN(r10, 0xae80, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2100, 0x0) 12.592690653s ago: executing program 9 (id=1861): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2100, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) 12.568020804s ago: executing program 9 (id=1862): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000003c0)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noblock_validity}, {@minixdf}, {@sysvgroups}, {@errors_remount}, {@jqfmt_vfsv0}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0080e0}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10001, 0x800, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x8, 0xc, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 11.283921228s ago: executing program 9 (id=1864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x1302090, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_pid(r5, &(0x7f0000002980), 0x12) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r7 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000240)={[{@nouser_xattr}, {@mb_optimize_scan}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x4}}]}, 0x6, 0x61a, &(0x7f0000000980)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r7, @ANYRES32=r6, @ANYRESOCT=r6], 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r9, &(0x7f0000000000)="c8d109c106d5b95f3b632973c9f28c7c64ca698e460a7a8e0371ceda016e1e76bec6b1", 0x23) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r10, &(0x7f00000091c0)=""/16384, 0x4000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000019040), &(0x7f0000000540), 0x6c, r8}, 0x38) 10.00738316s ago: executing program 4 (id=1872): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r1, r1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) sigaltstack(0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2001, 0xffffffff, 0x0, r9}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 9.005326526s ago: executing program 79 (id=1785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x184, 0x10, 0x2, 0xeffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@multicast1, {0x2, 0x0, 0x0, 0xffff, 0x4, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x3}, {0x2, 0xfffffffc, 0x9}, 0x70bd2a, 0x10, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ni\x00'}, 0x0, 0xa0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.563596528s ago: executing program 4 (id=1874): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2100, 0x0) ioctl$TIOCGPKT(r0, 0x7b9, 0x0) 8.427073911s ago: executing program 4 (id=1876): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x2, 0x1}, 0x18) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x4, 0xbb, &(0x7f0000000280)) syz_emit_ethernet(0xda, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x3, 0xcc, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x0, [0x2, 0xfffffa27, 0x9, 0x77, 0xc37]}]}}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "22455b031643b9e42dd6f42ca107661c9949181877a8fbd8ad06768cb5f16132", "062f33f667104bcb629af48a5723f66f60762b9d09cfb0a55bf3dbeb195cee7b47a506f4d8c3f0ef4016cd2039d5ac2a", "87c2dcaec36dcdb2b39f15fe241f0a370ccbfde72b22e0a3cff3d468", {"cd908bbda426f157c60f32248a2912e2", "214537db905dee7d2ee82341b144af39"}}}}}}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 6.441417383s ago: executing program 4 (id=1877): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e724fba498b00fdb067bc000080cd5f626c6f636b713d6d452c00"]) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x8, 0x0, 0x400, 0x6, 0x3, 0xd}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200009, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000000280)="$eJzs3EtrY+UbAPAnvcz9P/8iLtzNgUFoYRKaXgbdVe3gBTuUUReuNE3SkJkkpzRpWrty4VJc+E1EwZVLv4HgwrU7caG4E5Scc6pTbwhNGzv9/eDkOe+bN8953jAMPOeUBHBhzSU//VCKm3E1IqYj4kZEdl4qjsxaHp6JiFsRMfXYUSrmf5u4FBHXIuLmKHmes1S89fGd4e3V71/78YuvL89c/+Tzbya3a2DSno2I7k5+vt/NY9rK48NivjZsZ7G7Mixi/kb3UTFO87jf3Moy7NeO1tWyuNzK16c7e/1R3O7U6qPYam9n8zu9/IL9YesoT/aBh7XdbNxobmWx3U+z2DrM6zo4zP9vO+wP8jyNIt97WfoYDI5iPt88aOb72XmUxXpvUMznedNG82AUh0UsLhf1tNPI6tg6yTf93/Z6u7d3kAybu/122ktWK9XnKtW75epu2mgOmivlWrdxdyWZb3VGy8qDZq271krTVqdZqafdhWS+Va+Xq9Vkfr251a71kmq1slxZLK8uFGd3kpfvv5V0Gsn8KL7Y7u0N2p1+sp3uJvknFpKlyvLzC8ntavLGxmay+eDevY3NN99Zf/v+CxuvvlQs+lNZyfzS4tJSubpYXqouXKD9f1AUPcb9w4mUJl0AwPmj/wcm4fT6/90HESfs/79az8b/1P+H/n8szlX/e9H7/1PYP5yI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ML6dvbTV7KTuXx8vZj/XzH1VDEuRcRURPzyF6bj0rGc00We2b9ZP/uHGr4sRZZhdI3LxXEtItaK4+f/n/a3AAAAAE+uz96/9VHerecvc5MuiLOU37SZuvHumPKVImJ27rsxZZsavTw9pmTZv++ZOBhTtuwG1pUxJctvuc2MK9u/Mn0sXHkslPIwdablAAAAZ+J4J3C2XQgAAABn6cNJF8BklOLoUebRs+DsL+9/fyB49dgIAAAAOIdKky4AAAAAOHVZ/+/3/wAAAODJlv/+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MrO/eSmDURxAH42uNB/Kqq671W6g2P0CF12WXGAXoIDdEGvkAtwBrLLESKI8DgEEIoieWwr0fdJzmQs82MGweLNSAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06bZcL/7/+f63bc5u306e2QAAAADXbKv1ov5nlvofm/ufm1tfm34REWVEXKvdR/HuLHPU5FRPz/87fb66GMNNRJ1weI9Jc32IiB/Ndf+l608BAAAA3q7NcjVP1Xr6Mxt6QPQpLdqUn35myisioprdZUorD3nfMoXV3+9x/M6UVi9gTTOFpSW3ca60F6l/7sdVu+lJU6SmvPqy4yCzzR0AAOjR6KzptwoBAACgT7+GHgDDKOJxK/O4FThJTbO99/6sBwAAALxCxdADAAAAADpX1/89nf+3d/4fAAAA5HNZWz8nnf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl7bVerFZruZtc3b7dvLMBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uflBEMYAMLg/k/1JqnI/quSlfQgwgwIH2tyCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/0ml/eVxxz3pN8uzZ+XUaSf880lv5qrEk+ja0Xxq1PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJOd+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAxensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QHau6//9KfVOcSXF3/DzyvhtCq9t0RgAAAJxmTxQtK/Z/TdcXPvrpwvtt+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZnAAAA///vcD8V") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 6.16398014s ago: executing program 8 (id=1879): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e19a1ebd5a0a1149d48afa688507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea192c9fb34c471f65ec7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8f03d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d28", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000240)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x3}}}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x27db75abf744f360}) 4.720528417s ago: executing program 6 (id=1873): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000005400)=[{{0x0, 0x80101, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x8031e}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x90, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, '%!/,\\)', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {}, {0xffffffb7}, 0x70bd29, 0x3503, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10) 4.668449399s ago: executing program 8 (id=1881): pipe(&(0x7f0000000140)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, r4, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r4}, 0x94) 4.294352789s ago: executing program 6 (id=1882): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff010003d018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 4.25637335s ago: executing program 6 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000005c0)=@ethtool_sset_info={0x37, 0x6}}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="4000050606000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40885}, 0x24008044) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="d0fdc81429f0fa11df251f0000005a58e4012d81f73dd60e22ca7ce01e436295949e3bd22f877f1c6d0a54e544b2726b0f1cf44d6d8db7efc4620f33115ef914929db721b1e0f8275b48c09e0248c563f40afb14b4241c05e1965d4c4d72acd0401535ca1977520d6b32c264d257f282105635c3d8d93b"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x6020400) pidfd_send_signal(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005380)=ANY=[@ANYRES32=r3], 0x90}}, 0x1000) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405010080"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc, 0x1, 0xff, 0x11, 0x9, 0x49}, 0x20) 4.185162111s ago: executing program 8 (id=1884): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r1, r1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2001, 0xffffffff, 0x0, r9}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 3.980452617s ago: executing program 4 (id=1885): creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0xf2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee01, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x7, 0xffffffffffffff16}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x7, 0xffffffffffffff16}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={r3, 0x59a, 0x0, [0xc31, 0x4dec, 0x0, 0x8b, 0x6], [0x6, 0x6, 0x596e, 0x5, 0x0, 0x6ae, 0x8, 0xe507, 0xb, 0xd, 0xffba, 0x6, 0x5, 0x7, 0x5, 0x3, 0x405, 0x1, 0xfffffffffffffff0, 0x0, 0x3c8c, 0x9, 0x4e6d, 0x68a7, 0x7, 0x8bf8, 0xf, 0x4, 0x80, 0x9, 0x8, 0x7f, 0x9, 0x8, 0x5, 0x6, 0x2, 0x80, 0x8, 0x7, 0x80000001, 0x400, 0x1f0, 0x8, 0x8, 0x400, 0x3, 0x4, 0xfffffffffffffff9, 0x3, 0x6, 0x5, 0x1, 0x1, 0x76c0, 0xf1d, 0x0, 0x0, 0x62, 0x7fffffffffffffff, 0xa1, 0xff, 0x4, 0x7, 0x80, 0x4, 0x9, 0x400, 0x2, 0x5, 0x2, 0x9, 0x6a9609de, 0xf41, 0x452fcfce, 0x7fff, 0x6c6ca4a0, 0x2, 0x4, 0xffffffff00000000, 0x7, 0xfffffffffffff801, 0x4, 0x0, 0x5, 0x60000, 0x0, 0x5, 0x81, 0xffffffffffffff81, 0x0, 0x7ff, 0x10000000, 0x93a, 0x4, 0x8, 0x4, 0x1, 0x2, 0x3, 0x200, 0x48000, 0x9, 0x0, 0x7fffffff, 0x5, 0x0, 0x7, 0x0, 0xdf, 0x0, 0xfffffffffffffffd, 0x401, 0x80, 0x0, 0x5, 0x9, 0x7, 0x9, 0x6, 0x9]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0e0050", 0x12, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x20, 0x4, 0x7, 0x2, [{0x3}]}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, 0x0, &(0x7f0000000140)=""/140}, 0x20) 3.48096605s ago: executing program 8 (id=1886): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.415295001s ago: executing program 8 (id=1887): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x2, 0x1}, 0x18) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x4, 0xbb, &(0x7f0000000280)) syz_emit_ethernet(0xda, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x3, 0xcc, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x0, [0x2, 0xfffffa27, 0x9, 0x77, 0xc37]}]}}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "22455b031643b9e42dd6f42ca107661c9949181877a8fbd8ad06768cb5f16132", "062f33f667104bcb629af48a5723f66f60762b9d09cfb0a55bf3dbeb195cee7b47a506f4d8c3f0ef4016cd2039d5ac2a", "87c2dcaec36dcdb2b39f15fe241f0a370ccbfde72b22e0a3cff3d468", {"cd908bbda426f157c60f32248a2912e2", "214537db905dee7d2ee82341b144af39"}}}}}}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.300519494s ago: executing program 8 (id=1889): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000003c0)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noblock_validity}, {@minixdf}, {@sysvgroups}, {@errors_remount}, {@jqfmt_vfsv0}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0080e0}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10001, 0x800, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x8, 0xc, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.000574588s ago: executing program 6 (id=1891): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x13, 0x7, 0x8000, 0xa, "ff000d00009a468e0cd912098d00"}) syz_open_pts(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.868536701s ago: executing program 4 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000010401000000000000000000020000000500010081000000"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000f80)={0x67, 0x29, 0xffff, {0x10000}}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1bbcf12000"/15, @ANYBLOB="9e4920e6a506c7e978f30fbc2c2481fd045e59ef00a37ba98f1abdc87aa0fafc9dedca3e403631200200"/54, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00e3723bed812dd9cf0a4f18e646f6a40000010401020000000000000000020000000600064000020000"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000180)={0x200, 0x83, 0xa, 0x480, 0x13, "96ca676bc0d8a891"}) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x7, 0xd, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) read(r7, &(0x7f0000000200)=""/80, 0x50) getpid() ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x9, 0x3, 0x9}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffc, 0x0, 0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000800000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) sched_setscheduler(0x0, 0x4, &(0x7f0000000200)=0x9) 1.763729744s ago: executing program 3 (id=1894): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb0022, &(0x7f0000002280)={[{@uuid_off}, {@verity_off}, {@redirect_dir_off}, {@uuid_null}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}, {@redirect_dir_off}], [{@pcr={'pcr', 0x3d, 0x4}}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#+'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@flag='nolazytime'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@appraise_type}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), 0x800002, &(0x7f0000002480)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x542}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@uid_gt={'uid>', r3}}, {@seclabel}]}}) open$dir(&(0x7f0000002600)='./file0\x00', 0xa01, 0x0) (async) r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000002640), 0x80800) r7 = accept$unix(r6, 0x0, &(0x7f0000002680)) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000026c0), &(0x7f0000002700)=0x14) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002740), &(0x7f0000002780)}, 0x20) ioctl$XFS_IOC_GETPARENTS(r9, 0xc028583e, &(0x7f00000028c0)={{[0x6, 0x4, 0x800000, 0x6]}, 0x0, 0x1, 0x1ff, 0x0, &(0x7f0000002800)=[{{@_ha_fsid={[0xfff, 0x10]}, {0x9, 0x7, 0x800, 0x8000000000000000}}, 0x6, 0x0, '\\!:[/.(*^!]{-,@&).%*\x00'}, {{@align=0x2, {0xb974, 0x7, 0xffffffff, 0x4}}, 0xb, 0x0, 'group_id'}, {{@align=0x5, {0x10f7, 0x1, 0x2, 0x6}}, 0x9, 0x0, '])$\x00'}]}) (async) write(r5, &(0x7f0000002900)="361d51a894e9e15c1b7889cc5c91b63d31d665c0883805", 0x17) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000002ac0)=0xe8) mount$fuse(0x0, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980), 0x100023, &(0x7f0000002b00)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rootmode'}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x31, 0x35, 0x36, 0x33, 0x66, 0x66, 0x63], 0x2d, [0x37, 0x37, 0x63, 0x31], 0x2d, [0x64, 0x61, 0x30, 0x60], 0x2d, [0x38, 0x62, 0x30, 0x61], 0x2d, [0x63, 0x31, 0x63, 0x37, 0x330cf2428392cd85, 0x62, 0x31, 0x61]}}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit}, {@permit_directio}, {@euid_lt={'euid<', r3}}, {@seclabel}]}}) (async) fdatasync(r5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002e00)={0x4, 0x0}, 0x8) (async) r12 = open(&(0x7f0000002e40)='./file0\x00', 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0xd, 0x2, &(0x7f0000002c80)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000002cc0)='GPL\x00', 0xfffffff8, 0xb0, &(0x7f0000002d00)=""/176, 0x40f00, 0x24, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r12, 0x8, 0x0, &(0x7f0000002e80)=[{0x4, 0x4, 0xf, 0x7}, {0x5, 0x5, 0x4, 0x2}, {0x5, 0x2, 0x10, 0xc}, {0x2, 0x5}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x4, 0xc, 0x4}, {0x1, 0x1, 0x5, 0x1}, {0x4, 0x1, 0x9}], 0x10, 0x6}, 0x94) (async) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000002fc0)={'ip6gre0\x00', 0xd}) (async) r13 = syz_io_uring_complete(0x0, 0x0) r14 = dup2(r12, r13) statx(r14, &(0x7f0000003000)='./file0\x00', 0x2000, 0x0, &(0x7f0000003040)) (async) getdents(r12, &(0x7f0000003140)=""/224, 0xe0) (async) ioctl$XFS_IOC_GETBMAPX(r8, 0xc0205838, &(0x7f0000003240)={0x0, 0x9, 0xfb39, 0x9659, 0x463, 0x1, 0x5}) (async) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000032c0), r13) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x30, r15, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x3f33, @bearer=@l2={'eth', 0x3a, 'sit0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x85) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), r12) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000003580)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003540)={&(0x7f0000003480)={0xa8, r16, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x60, 0xbe, "c8d45dabaaff1cf21022082bbb957e4782893546c6a58f1701c148b60a148ada4467732eb290cb4b7f14256dbc2171145e05584e31f91ab04a5718c8d54e30f0a6d5035edbe13cd6da2001cb1948a6942004fb2962ca38e423c3954a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfc00}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5e9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4010}, 0x48000) 1.596726498s ago: executing program 3 (id=1895): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000003c0), 0x1, 0x5ed, &(0x7f0000000bc0)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 1.50792281s ago: executing program 3 (id=1896): r0 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) fsync(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x110, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @empty, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @remote, 0xe5f2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private1, 0x8}}}}]}]}, 0x110}}, 0x0) 1.497160521s ago: executing program 6 (id=1897): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="000000000000ffb0b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.392710373s ago: executing program 6 (id=1898): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x2010008, &(0x7f0000001980)={[{@jqfmt_vfsold}, {@discard}, {@resuid}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@norecovery}]}, 0xff, 0x558, &(0x7f0000000700)="$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") ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000080)='net/fib_triestat\x00') syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x664040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20008800, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x80003}, 0x1c) readahead(0xffffffffffffffff, 0x7ff, 0x9) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109027f000201bdf0060904000001020d000009240600018c5a4d0e05240009000d240114d30000ffffddb20806241a4900311524129ff7a362c1213baec2adfc07c0ffcb7e392a0524150100052401020509058103ff030602010904010000020d00000904010102020d00000905f789288202000405e300090503022000ef0000"], &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x67, 0x9, 0xc, 0x20, 0x4}, 0x91, &(0x7f0000000640)=ANY=[@ANYBLOB="050f9100060b10010800000305daa9090d1002c309b2c990309244b4b74f100bb0459333c0e4dbe92ab0648421c08727d33f28aaebd504c95d319aa50f8274d93c9816cf0c3803afeac5445722f5b5353a85022b2bab465dda176792e32e9426c950d3b8d45ebac980c501500a1003000000090e240014100402cbd20948f7370a90a35be99d2fc6d9290710021c95010191a5cd5376fc55bd51b43caa273418598074007bdea5910d2a125f6afb85d2bfbc60333c12a3b6fa85dd988de4e61ba257"], 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRU1(r3, 0x40047452, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1, 0xfffffffffffffee8, 0x0}) timer_create(0x6, 0x0, &(0x7f0000000280)) 1.392479094s ago: executing program 3 (id=1899): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000000880)="$eJzslE9LMlEUxp97x1fxpVbtgmiRkC0cZ8aKNhHSFxD6R7ssJ7HGFJ0gbRVt+wBt2/YV3AR9kWoVgcvWE3fuVa+hFkFJdH6LM8+de+6Zc8/AA4Ig/ixPj68PVy+tcwPABBKIqffPRi+Ha/mnufj+VGr9tnV9f7lWnakMqhkEn/9+BMBd1oDfPdt/OqGem+BdvQWOBaV3wGAqvQeObaVdMOwqfaTpisg3zcOS55oHFa8ghCWCLYIjQuZ9f+0LhoLWH9P2643mcd7z3No3io/m185yrGr96f+rMxtLm58NDlvpDBg2lF5BrDMbORLt/tORXn3jh+9PggSJ3yZ6/hTcMMxr/hTR/CPtl6vpeqOZKpXzRbfonjhOZtlatKwlJx0akYwj/C8e+tN/rf6/IblRFsVZ3vdrtozdtSPjIMflof9xJOfkWnh/dGg3cp+pcyxUSWNEOkEQxNiYBUNghLapmFQu2oeTG3ejBEEQBEEQBEEQBEF8mbcAAAD//xQ9cG4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.088783521s ago: executing program 3 (id=1900): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0xef) mount(0x0, &(0x7f00000000c0)='./sys/class/tty/ttyS0/console\x00', &(0x7f0000000040)='autofs\x00', 0x3100818, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/208, 0xd0}], 0x2}, 0x7ff}, {{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000000680)=""/230, 0xe6}, {&(0x7f0000000780)=""/220, 0xdc}], 0x7, &(0x7f0000000900)=""/226, 0xe2}, 0x1}, {{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/2, 0x2}, {&(0x7f0000000ac0)=""/111, 0x6f}], 0x2, &(0x7f0000000b80)=""/56, 0x38}, 0x8a}, {{&(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/138, 0x8a}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000e00)=""/60, 0x3c}, {&(0x7f0000000e40)=""/88, 0x58}, {&(0x7f0000000ec0)=""/16, 0x10}, {&(0x7f0000000f00)=""/95, 0x5f}, {&(0x7f0000000f80)=""/150, 0x96}], 0x7, &(0x7f00000010c0)=""/220, 0xdc}, 0x4}], 0x4, 0x20, &(0x7f00000012c0)={0x0, 0x989680}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001380)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000001480)=0xe8) mount$binder(0x0, &(0x7f0000001300)='./sys/class/tty/ttyS0/console\x00', &(0x7f0000001340), 0x2, &(0x7f00000014c0)={[{@stats}, {}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}], [{@fowner_gt={'fowner>', r2}}, {@appraise_type}]}) write$binfmt_format(r1, &(0x7f0000000080)='1\x00', 0x2) 0s ago: executing program 3 (id=1901): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x2, 0x1}, 0x18) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x4, 0xbb, &(0x7f0000000280)) syz_emit_ethernet(0xda, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x3, 0xcc, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x0, [0x2, 0xfffffa27, 0x9, 0x77, 0xc37]}]}}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "22455b031643b9e42dd6f42ca107661c9949181877a8fbd8ad06768cb5f16132", "062f33f667104bcb629af48a5723f66f60762b9d09cfb0a55bf3dbeb195cee7b47a506f4d8c3f0ef4016cd2039d5ac2a", "87c2dcaec36dcdb2b39f15fe241f0a370ccbfde72b22e0a3cff3d468", {"cd908bbda426f157c60f32248a2912e2", "214537db905dee7d2ee82341b144af39"}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) kernel console output (not intermixed with test programs): 0: bind() failure [ 438.045676][ T1832] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 438.076594][ T1832] cdc_ncm 10-1:1.1: bind() failure [ 438.092919][ T1832] usb 10-1: USB disconnect, device number 28 [ 438.186391][ T955] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 438.346483][ T955] usb 5-1: device descriptor read/64, error -71 [ 438.438395][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1750'. [ 438.466306][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1750'. [ 438.492925][T19099] 8021q: VLANs not supported on ip_vti0 [ 438.626406][ T955] usb 5-1: device descriptor read/64, error -71 [ 438.746482][ T955] usb usb5-port1: attempt power cycle [ 439.156422][ T955] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 439.197899][ T955] usb 5-1: device descriptor read/8, error -71 [ 439.218617][T19142] overlayfs: missing 'lowerdir' [ 439.329309][T19153] loop3: detected capacity change from 0 to 512 [ 439.349169][ T955] usb 5-1: device descriptor read/8, error -71 [ 439.366453][T19153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 439.474771][T19156] loop8: detected capacity change from 0 to 2048 [ 439.543882][T19153] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.588347][T19156] loop8: p1 < > p4 [ 439.595471][T19156] loop8: p4 size 722688 extends beyond EOD, truncated [ 439.623295][T19156] SELinux: policydb string does not match my string SE Linux [ 439.631047][T19156] SELinux: failed to load policy [ 439.638789][ T955] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 439.721259][ T955] usb 5-1: device descriptor read/8, error -71 [ 439.903995][T19153] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1759: Failed to acquire dquot type 1 [ 440.002387][ T955] usb 5-1: device descriptor read/8, error -71 [ 440.137873][ T955] usb usb5-port1: unable to enumerate USB device [ 440.187168][T19153] EXT4-fs (loop3): 1 truncate cleaned up [ 440.223221][T19153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 440.332869][T19172] FAULT_INJECTION: forcing a failure. [ 440.332869][T19172] name failslab, interval 1, probability 0, space 9, times 0 [ 440.347311][T19175] loop9: detected capacity change from 0 to 1024 [ 440.356157][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 440.398110][T19171] netlink: 'syz.1.1764': attribute type 32 has an invalid length. [ 440.408105][T19175] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 440.437905][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 440.472824][ T863] usb 2-1: USB disconnect, device number 32 [ 440.543443][T19171] 8021q: VLANs not supported on ip_vti0 [ 440.559302][T19172] CPU: 1 PID: 19172 Comm: syz.4.1762 Tainted: G W syzkaller #0 [ 440.568297][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 440.578380][T19172] Call Trace: [ 440.581682][T19172] [ 440.584631][T19172] __dump_stack+0x21/0x24 [ 440.588996][T19172] dump_stack_lvl+0x110/0x170 [ 440.593723][T19172] ? __cfi_dump_stack_lvl+0x8/0x8 [ 440.598789][T19172] dump_stack+0x15/0x24 [ 440.602987][T19172] should_fail_ex+0x3bf/0x510 [ 440.607698][T19172] __should_failslab+0xac/0xf0 [ 440.612496][T19172] should_failslab+0x9/0x20 [ 440.617043][T19172] __kmem_cache_alloc_node+0x3d/0x2d0 [ 440.622453][T19172] ? __request_module+0x2c3/0x910 [ 440.627511][T19172] ? __request_module+0x2c3/0x910 [ 440.632557][T19172] __kmalloc_node_track_caller+0xa1/0x1e0 [ 440.638306][T19172] ? __kasan_kmalloc+0x95/0xb0 [ 440.643114][T19172] kstrdup+0x3b/0x80 [ 440.647036][T19172] __request_module+0x2c3/0x910 [ 440.651918][T19172] ? radix_tree_next_chunk+0x95a/0xb30 [ 440.657415][T19172] ? __cfi___request_module+0x10/0x10 [ 440.662829][T19172] ? __kasan_check_write+0x14/0x20 [ 440.667971][T19172] ? mutex_unlock+0x8f/0x230 [ 440.672601][T19172] ? __cfi_mutex_unlock+0x10/0x10 [ 440.677664][T19172] ctrl_getfamily+0x233/0x5a0 [ 440.682384][T19172] ? __nla_parse+0x42/0x60 [ 440.686834][T19172] ? __cfi_ctrl_getfamily+0x10/0x10 [ 440.692072][T19172] ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0 [ 440.698440][T19172] genl_family_rcv_msg_doit+0x24f/0x370 [ 440.704031][T19172] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 440.709975][T19172] ? memcpy+0x56/0x70 [ 440.714011][T19172] genl_rcv_msg+0x618/0x7a0 [ 440.718558][T19172] ? __alloc_skb+0x226/0x4a0 [ 440.723191][T19172] ? netlink_sendmsg+0x635/0xbd0 [ 440.728156][T19172] ? __sys_sendto+0x4ac/0x660 [ 440.733927][T19172] ? __cfi_genl_rcv_msg+0x10/0x10 [ 440.738995][T19172] ? __cfi_ctrl_getfamily+0x10/0x10 [ 440.744233][T19172] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 440.749588][T19172] netlink_rcv_skb+0x200/0x450 [ 440.754390][T19172] ? __cfi_genl_rcv_msg+0x10/0x10 [ 440.759457][T19172] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 440.764781][T19172] ? __netlink_lookup+0x387/0x3b0 [ 440.769847][T19172] genl_rcv+0x28/0x40 [ 440.773866][T19172] netlink_unicast+0x8c1/0xa60 [ 440.778668][T19172] netlink_sendmsg+0x8b9/0xbd0 [ 440.783470][T19172] ? cgroup_rstat_updated+0xf0/0x360 [ 440.788792][T19172] ? __cfi_netlink_sendmsg+0x10/0x10 [ 440.794129][T19172] ? security_socket_sendmsg+0x93/0xb0 [ 440.799627][T19172] __sys_sendto+0x4ac/0x660 [ 440.804173][T19172] ? __cfi___sys_sendto+0x10/0x10 [ 440.809236][T19172] ? do_user_addr_fault+0x9a5/0x1030 [ 440.814600][T19172] __x64_sys_sendto+0xe5/0x100 [ 440.819401][T19172] x64_sys_call+0x83/0x9a0 [ 440.823852][T19172] do_syscall_64+0x4c/0xa0 [ 440.828301][T19172] ? clear_bhb_loop+0x30/0x80 [ 440.833108][T19172] ? clear_bhb_loop+0x30/0x80 [ 440.837823][T19172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.843771][T19172] RIP: 0033:0x7fe26755e9ce [ 440.848221][T19172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.867859][T19172] RSP: 002b:00007fe265ff5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 440.876301][T19172] RAX: ffffffffffffffda RBX: 00007fe265ff76c0 RCX: 00007fe26755e9ce [ 440.884307][T19172] RDX: 0000000000000024 RSI: 00007fe265ff6000 RDI: 000000000000000b [ 440.892329][T19172] RBP: 0000000000000000 R08: 00007fe265ff5f04 R09: 000000000000000c [ 440.900327][T19172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 440.908846][T19172] R13: 00007fe265ff5f58 R14: 00007fe265ff6000 R15: 0000000000000000 [ 440.916883][T19172] [ 440.920737][ T330] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 440.921847][T16260] EXT4-fs (loop9): unmounting filesystem. [ 441.037952][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 441.037970][ T28] audit: type=1326 audit(1791419618.712:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.126418][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 441.134124][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 441.144398][ T28] audit: type=1326 audit(1791419618.712:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.174705][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.201537][ T330] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 441.234486][ T28] audit: type=1326 audit(1791419618.712:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.264394][ T330] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.300852][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.328882][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.337814][ T28] audit: type=1326 audit(1791419618.712:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.376534][T19159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 441.397934][ T330] usb 4-1: Product: syz [ 441.412316][ T330] usb 4-1: Manufacturer: syz [ 441.427422][ T330] usb 4-1: SerialNumber: syz [ 441.453257][ T28] audit: type=1326 audit(1791419618.722:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.479778][T19217] loop4: detected capacity change from 0 to 512 [ 441.538933][ T28] audit: type=1326 audit(1791419618.722:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.555742][T19217] EXT4-fs: Ignoring removed oldalloc option [ 441.607435][T19217] EXT4-fs: Ignoring removed oldalloc option [ 441.639567][T19217] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 441.650584][T19153] ip_tables: iptables: counters copy to user failed while replacing table [ 441.661542][ T28] audit: type=1326 audit(1791419618.722:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.696244][T19217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 441.737658][ T330] cdc_ncm 4-1:1.0: skipping garbage [ 441.743010][ T330] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 441.757112][ T330] cdc_ncm 4-1:1.0: bind() failure [ 441.764435][ T330] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 441.771894][ T330] cdc_ncm 4-1:1.1: bind() failure [ 441.778226][ T330] usb 4-1: USB disconnect, device number 37 [ 441.785593][ T28] audit: type=1326 audit(1791419618.722:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.810144][T19206] loop9: detected capacity change from 0 to 256 [ 441.825682][T19217] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 441.844075][ T28] audit: type=1326 audit(1791419618.722:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.9.1770" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 441.849826][T19206] exfat: Bad value for 'uid' [ 441.894309][T19217] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1772: Failed to acquire dquot type 0 [ 441.916024][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 441.942406][T19206] overlayfs: unrecognized mount option "uid=00000000000000000000" or missing value [ 441.954845][T19217] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 442.020403][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 442.060676][T19217] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.1772: corrupted inode contents [ 442.127814][T19242] loop1: detected capacity change from 0 to 4096 [ 442.140197][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 442.147877][T19242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 442.172903][T19242] EXT4-fs (loop1): Test dummy encryption mode enabled [ 442.186885][T19242] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 442.198879][T19217] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #12: comm syz.4.1772: mark_inode_dirty error [ 442.209158][T19242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 442.307002][T15809] EXT4-fs (loop3): unmounting filesystem. [ 442.326739][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 442.339757][T19217] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.1772: corrupted inode contents [ 442.548940][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 442.722728][T19217] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.1772: mark_inode_dirty error [ 443.086999][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.120262][T19217] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.1772: corrupted inode contents [ 443.162155][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.196424][T19217] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 443.219878][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.243966][T19217] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.1772: corrupted inode contents [ 443.295816][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.322889][T19217] EXT4-fs error (device loop4): ext4_truncate:4327: inode #12: comm syz.4.1772: mark_inode_dirty error [ 443.365182][T16881] EXT4-fs (loop1): unmounting filesystem. [ 443.413338][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.426440][ T863] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 443.444949][T19288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1783'. [ 443.457263][T19217] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 443.497620][T19217] EXT4-fs (loop4): Remounting filesystem read-only [ 443.516426][T19217] EXT4-fs (loop4): 1 truncate cleaned up [ 443.552615][T19217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 443.626386][ T863] usb 10-1: Using ep0 maxpacket: 8 [ 443.632630][ T863] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 443.668836][ T863] usb 10-1: config 0 has no interface number 0 [ 443.682644][ T863] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 443.736904][ T863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.758567][ T863] usb 10-1: Product: syz [ 443.768354][ T863] usb 10-1: Manufacturer: syz [ 443.779774][ T863] usb 10-1: SerialNumber: syz [ 443.796946][ T863] usb 10-1: config 0 descriptor?? [ 444.019300][ T863] usb 10-1: USB disconnect, device number 29 [ 444.098867][T19321] loop3: detected capacity change from 0 to 128 [ 444.229217][T19339] loop3: detected capacity change from 0 to 16 [ 444.249805][T19339] erofs: (device loop3): mounted with root inode @ nid 36. [ 444.289405][ T46] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 444.300840][T19339] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.306904][ T487] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 444.337622][T19343] loop8: detected capacity change from 0 to 16 [ 444.344237][T19344] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.369988][T19343] erofs: (device loop8): mounted with root inode @ nid 36. [ 444.417711][T19339] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.430283][ T46] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 444.441486][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.481109][T19348] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.496549][T19339] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.526452][ T487] usb 5-1: Using ep0 maxpacket: 32 [ 444.533107][ T487] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 444.541763][T19344] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.552764][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.584178][ T487] usb 5-1: config 0 has no interface number 0 [ 444.584518][T19351] loop9: detected capacity change from 0 to 512 [ 444.597989][ T487] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 444.626694][ T487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.634809][T19348] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.635771][ T487] usb 5-1: Product: syz [ 444.667499][T19344] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.696912][ T487] usb 5-1: Manufacturer: syz [ 444.701569][ T487] usb 5-1: SerialNumber: syz [ 444.708372][T19348] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.722446][ T487] usb 5-1: config 0 descriptor?? [ 444.736566][T19339] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.749208][ T487] smsc95xx v2.0.0 [ 444.762282][T19348] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.830149][T19356] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.875062][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.908352][T19363] loop9: detected capacity change from 0 to 4096 [ 444.921553][T19356] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.938244][T19363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 444.978355][T19363] EXT4-fs (loop9): Test dummy encryption mode enabled [ 444.978745][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 444.980153][T19363] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 444.980869][T19356] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 445.014407][T19363] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 445.050323][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 445.051591][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 445.051871][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 445.052039][T19343] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 446.157709][T16260] EXT4-fs (loop9): unmounting filesystem. [ 446.337448][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 446.337464][ T28] audit: type=1400 audit(1791419624.022:2991): avc: denied { mounton } for pid=19405 comm="syz.9.1801" path="/proc/342/task" dev="proc" ino=64115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 446.366562][ T487] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 446.383926][ T487] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.390617][T19409] loop9: detected capacity change from 0 to 512 [ 446.472435][ T487] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 446.489215][T16471] EXT4-fs (loop4): unmounting filesystem. [ 446.497585][ T487] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 446.527203][ T487] usb 5-1: USB disconnect, device number 29 [ 446.599385][T19422] input: syz1 as /devices/virtual/input/input26 [ 446.706465][ T954] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 446.714246][ T28] audit: type=1400 audit(1791419624.392:2992): avc: denied { write } for pid=19421 comm="syz.4.1802" path="socket:[64127]" dev="sockfs" ino=64127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.937604][ T954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.947289][T19437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1804'. [ 446.953065][ T954] usb 10-1: config 0 has no interfaces? [ 446.986396][ T954] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 446.995582][ T954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.037303][ T954] usb 10-1: config 0 descriptor?? [ 447.237041][T19447] loop4: detected capacity change from 0 to 16 [ 447.246587][ T330] usb 10-1: USB disconnect, device number 30 [ 447.266245][T19447] erofs: (device loop4): mounted with root inode @ nid 36. [ 447.342059][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 447.353315][T19447] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 447.443793][T19457] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 447.466926][T19453] loop8: detected capacity change from 0 to 2048 [ 447.473699][T19453] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 447.762738][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 447.781869][T19393] loop3: detected capacity change from 0 to 131072 [ 447.802407][T19393] F2FS-fs (loop3): invalid crc_offset: 266236 [ 447.843746][T19393] F2FS-fs (loop3): Found nat_bits in checkpoint [ 447.856865][T19466] netlink: 'syz.4.1807': attribute type 32 has an invalid length. [ 447.927520][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 447.962056][T19393] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 447.977126][T19466] 8021q: VLANs not supported on ip_vti0 [ 448.002511][ T28] audit: type=1400 audit(1791419625.682:2993): avc: denied { write } for pid=19392 comm="syz.3.1798" dev="sockfs" ino=64240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.026756][T19484] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1809'. [ 448.071965][ T28] audit: type=1400 audit(1791419625.682:2994): avc: denied { setattr } for pid=19392 comm="syz.3.1798" name="XDP" dev="sockfs" ino=64240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.161115][T19492] loop9: detected capacity change from 0 to 4096 [ 448.176412][ T28] audit: type=1400 audit(1791419625.732:2995): avc: denied { listen } for pid=19483 comm="syz.9.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 448.201870][T19492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 448.233979][T19492] EXT4-fs (loop9): Test dummy encryption mode enabled [ 448.242035][T19502] loop8: detected capacity change from 0 to 16 [ 448.274747][T19492] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 448.286818][T19502] erofs: (device loop8): mounted with root inode @ nid 36. [ 448.337797][T19492] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 448.360059][ T46] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 448.386838][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 448.432502][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 448.499571][T19510] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 448.689915][T19515] loop4: detected capacity change from 0 to 512 [ 449.183950][T19515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 449.254863][T19515] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.416779][T16260] EXT4-fs (loop9): unmounting filesystem. [ 449.456647][T19510] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.472500][T19533] Non-string source [ 449.487292][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.537634][T19517] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.548063][T16471] EXT4-fs (loop4): unmounting filesystem. [ 449.569226][T19537] loop9: detected capacity change from 0 to 16 [ 449.588682][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.608219][T19537] erofs: (device loop9): mounted with root inode @ nid 36. [ 449.638904][ T46] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 449.650789][T19537] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.670834][T19510] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.687742][ T28] audit: type=1400 audit(1791419627.372:2996): avc: denied { getopt } for pid=19539 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.709992][T19540] loop4: detected capacity change from 0 to 256 [ 449.712589][T19537] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.727055][T19510] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.738233][T19517] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.759600][ T28] audit: type=1400 audit(1791419627.442:2997): avc: denied { bind } for pid=19539 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.790811][T19517] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.814695][T19540] /dev/loop4: Can't open blockdev [ 449.838750][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.870434][T19544] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.870556][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.914891][T19537] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 449.976575][T19502] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 450.293893][T19587] loop9: detected capacity change from 0 to 1024 [ 450.343561][T19587] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 450.548793][T16260] EXT4-fs (loop9): unmounting filesystem. [ 450.661984][T19597] loop9: detected capacity change from 0 to 4096 [ 450.697933][T19597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 450.723144][T19597] EXT4-fs (loop9): Test dummy encryption mode enabled [ 450.745562][T19597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 450.761652][T19597] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 450.896102][T19604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 451.152524][T19604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 451.357110][T19604] overlayfs: missing 'workdir' [ 451.607852][T15809] EXT4-fs (loop3): unmounting filesystem. [ 451.667110][T19617] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 451.729634][T19620] FAT-fs (loop3): Unrecognized mount option "uni_xlate=" or missing value [ 451.812448][ T28] audit: type=1400 audit(1791419629.492:2998): avc: denied { getopt } for pid=19614 comm="syz.8.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.852687][T19620] tipc: Started in network mode [ 451.876719][T19620] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 451.916529][T19620] tipc: Enabling of bearer rejected, failed to enable media [ 451.932415][T16260] EXT4-fs (loop9): unmounting filesystem. [ 451.993630][ T28] audit: type=1326 audit(1791419629.672:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.9.1831" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 452.057185][T19636] erofs: (device loop8): mounted with root inode @ nid 36. [ 452.079647][ T28] audit: type=1326 audit(1791419629.702:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.9.1831" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 452.098073][ T46] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 452.125659][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.178278][T19639] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 452.196460][ T28] audit: type=1326 audit(1791419629.702:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.9.1831" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 452.231909][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.282900][ T28] audit: type=1326 audit(1791419629.702:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.9.1831" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 452.282949][T16260] EXT4-fs (loop9): unmounting filesystem. [ 452.308923][ T28] audit: type=1326 audit(1791419629.702:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.9.1831" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 452.314869][ T954] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 452.369224][T19642] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.410679][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.452158][T19647] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.500337][T19642] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.526603][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.546682][T19647] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.566682][T19642] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.586682][T19647] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.598733][ T954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.608674][T19642] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.627594][ T954] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 452.662876][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.666534][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.702971][T19636] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 452.714666][ T954] usb 4-1: config 0 descriptor?? [ 452.756466][ T330] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 452.924212][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.954061][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.976797][ T330] usb 10-1: Using ep0 maxpacket: 32 [ 452.983470][ T330] usb 10-1: unable to get BOS descriptor or descriptor too short [ 453.012262][ T330] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.042804][ T330] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.071041][ T330] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 453.100470][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.124997][ T330] usb 10-1: Product: syz [ 453.139824][ T330] usb 10-1: Manufacturer: syz [ 453.154702][ T330] usb 10-1: SerialNumber: syz [ 453.175006][ T330] usb 10-1: selecting invalid altsetting 1 [ 453.176226][ T954] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 453.210939][ T954] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input28 [ 453.310035][ T954] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 453.375836][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1837'. [ 453.425635][T19653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.472375][T19653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.524455][T19653] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1837'. [ 453.586283][T19692] set_capacity_and_notify: 5 callbacks suppressed [ 453.586305][T19692] loop8: detected capacity change from 0 to 4096 [ 453.599274][T19653] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1837'. [ 453.626641][T19653] netlink: 'syz.9.1837': attribute type 5 has an invalid length. [ 453.636647][T19653] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1837'. [ 453.648942][ T330] usb 10-1: 6:0: failed to get current value for ch 0 (-71) [ 453.681472][ T330] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 453.691139][T19692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 453.702176][ T954] usb 4-1: USB disconnect, device number 38 [ 453.710143][T13411] udevd[13411]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 453.728138][T19692] EXT4-fs (loop8): Test dummy encryption mode enabled [ 453.737062][ T330] usb 10-1: USB disconnect, device number 31 [ 453.746043][T19692] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 453.798489][T19692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 453.936925][T19707] ip_tables: iptables: counters copy to user failed while replacing table [ 454.587236][T19714] tipc: Started in network mode [ 454.611978][T19714] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 454.641590][T19714] tipc: Enabling of bearer rejected, failed to enable media [ 454.664339][T19715] ±ÿ: renamed from team_slave_1 [ 454.809492][T19727] loop3: detected capacity change from 0 to 16 [ 454.853815][T19727] erofs: (device loop3): mounted with root inode @ nid 36. [ 454.885008][T15324] EXT4-fs (loop8): unmounting filesystem. [ 454.935748][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 454.956787][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.006813][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.066940][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.095161][T19748] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.119148][T19733] loop9: detected capacity change from 0 to 512 [ 455.126815][T19733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.141716][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.144839][T19733] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 455.173547][T19748] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.218824][T19748] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.220558][T19758] tipc: Started in network mode [ 455.247032][T19733] EXT4-fs (loop9): orphan cleanup on readonly fs [ 455.253441][T19733] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 455.262006][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.293480][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.316991][T19733] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 455.325158][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.338245][T19758] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 455.347428][T19748] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.362734][T19733] EXT4-fs (loop9): 1 truncate cleaned up [ 455.379368][T19758] tipc: Enabling of bearer rejected, failed to enable media [ 455.388672][T19733] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 455.426457][T19727] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 455.511979][T16260] EXT4-fs (loop9): unmounting filesystem. [ 455.661668][ T28] audit: type=1326 audit(1791419633.342:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.9.1858" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 455.749306][ T28] audit: type=1326 audit(1791419633.372:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.9.1858" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 455.775552][ T330] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 455.856389][ T28] audit: type=1326 audit(1791419633.372:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.9.1858" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 455.926389][ T28] audit: type=1326 audit(1791419633.372:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.9.1858" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5dfb9e199 code=0x7ffc0000 [ 455.956467][ T330] usb 5-1: device descriptor read/64, error -71 [ 456.094109][T19799] loop9: detected capacity change from 0 to 4096 [ 456.116879][T19799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 456.156025][T19799] EXT4-fs (loop9): Test dummy encryption mode enabled [ 456.196786][T19799] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 456.227118][T19799] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 456.309164][ T330] usb 5-1: device descriptor read/64, error -71 [ 456.596513][ T330] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 456.786505][ T330] usb 5-1: device descriptor read/64, error -71 [ 457.166423][ T330] usb 5-1: device descriptor read/64, error -71 [ 457.296498][ T330] usb usb5-port1: attempt power cycle [ 457.308017][T16260] EXT4-fs (loop9): unmounting filesystem. [ 457.411412][T19827] loop9: detected capacity change from 0 to 1024 [ 457.449257][T19836] loop3: detected capacity change from 0 to 256 [ 457.512433][T19827] ext4: Unknown parameter 'nouser_xattr' [ 457.530519][T13411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.561333][T19826] ------------[ cut here ]------------ [ 457.566841][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 457.577219][T19826] Modules linked in: [ 457.581139][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 457.590132][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.600217][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 457.606065][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 457.625792][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 457.631905][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 457.639917][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 457.647958][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 457.655969][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 457.663974][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 457.671985][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 457.674618][T12190] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.680942][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.680960][T19826] CR2: 00007fb5e0a2fff8 CR3: 0000000159019000 CR4: 00000000003526b0 [ 457.680981][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 457.713002][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.721005][T19826] Call Trace: [ 457.724312][T19826] [ 457.727271][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 457.732977][T19826] ? __kasan_check_write+0x14/0x20 [ 457.738146][T19826] ? _raw_spin_lock+0x94/0xf0 [ 457.742861][T19826] rb_buffer_peek+0x5f/0x930 [ 457.747489][T19826] ring_buffer_peek+0x184/0x3b0 [ 457.752371][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 457.757768][T19826] ? __kasan_check_write+0x14/0x20 [ 457.762916][T19826] ? _raw_spin_lock+0x94/0xf0 [ 457.766506][ T330] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 457.767635][T19826] ? _find_next_bit+0x8a/0x130 [ 457.780007][T19826] __find_next_entry+0x33c/0x6c0 [ 457.785014][T19826] ? trace_find_next_entry+0x380/0x380 [ 457.790516][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 457.796180][T19826] ? print_trace_line+0x393/0x6b0 [ 457.801240][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 457.806223][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 457.811723][T19826] vfs_read+0x286/0x930 [ 457.815914][T19826] ? __cfi_vfs_read+0x10/0x10 [ 457.818281][ T330] usb 5-1: device descriptor read/8, error -71 [ 457.820613][T19826] ? __kasan_check_write+0x14/0x20 [ 457.831896][T19826] ? mutex_lock+0x93/0x1b0 [ 457.836345][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 457.841236][T19826] ? __fdget_pos+0x2cd/0x380 [ 457.845866][T19826] ? ksys_read+0x70/0x260 [ 457.850250][T19826] ksys_read+0x14a/0x260 [ 457.854524][T19826] ? __cfi_ksys_read+0x10/0x10 [ 457.859325][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 457.865018][T19826] __x64_sys_read+0x7b/0x90 [ 457.869554][T19826] x64_sys_call+0x2f/0x9a0 [ 457.874031][T19826] do_syscall_64+0x4c/0xa0 [ 457.878484][T19826] ? clear_bhb_loop+0x30/0x80 [ 457.883192][T19826] ? clear_bhb_loop+0x30/0x80 [ 457.888438][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.894361][T19826] RIP: 0033:0x7fb5dfb9e199 [ 457.898809][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.918530][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.926980][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 457.934990][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 457.942997][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 457.951007][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.959036][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 457.967047][T19826] [ 457.970101][T19826] ---[ end trace 0000000000000000 ]--- [ 458.072559][T19826] ------------[ cut here ]------------ [ 458.078138][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/trace.c:2464 __trace_find_cmdline+0x166/0x1c0 [ 458.088218][T19826] Modules linked in: [ 458.092133][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 458.101306][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.111429][T19826] RIP: 0010:__trace_find_cmdline+0x166/0x1c0 [ 458.117493][T19826] Code: 65 d0 ba 06 00 00 00 4c 89 e7 48 c7 c6 00 02 ab 85 e8 ee a3 42 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8a 14 fd ff <0f> 0b ba 06 00 00 00 4c 89 e7 48 c7 c6 e0 01 ab 85 eb d4 44 89 f9 [ 458.137177][T19826] RSP: 0018:ffffc90000a67980 EFLAGS: 00010293 [ 458.143276][T19826] RAX: ffffffff817459b6 RBX: ffff88811e408000 RCX: ffff88815ba62880 [ 458.151424][T19826] RDX: 0000000000000000 RSI: 00000000811e3b60 RDI: 0000000000000000 [ 458.159445][T19826] RBP: ffffc90000a679b0 R08: 0000000000000003 R09: 0000000000000004 [ 458.167486][T19826] R10: dffffc0000000000 R11: fffff5200014cf40 R12: ffffc90000a67ac0 [ 458.175497][T19826] R13: dffffc0000000000 R14: 00000000811e3b60 R15: 0000000000000000 [ 458.183576][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 458.192567][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.199218][T19826] CR2: 00007ffe8dc0a028 CR3: 0000000159019000 CR4: 00000000003526a0 [ 458.207255][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 458.215267][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 458.223306][T19826] Call Trace: [ 458.226630][T19826] [ 458.229594][T19826] ? trace_find_cmdline+0xde/0x1c0 [ 458.234750][T19826] trace_find_cmdline+0xf1/0x1c0 [ 458.239851][T19826] ? __cfi_trace_find_cmdline+0x10/0x10 [ 458.245448][T19826] ? ring_buffer_peek+0x345/0x3b0 [ 458.250556][T19826] trace_print_context+0xf9/0x4d0 [ 458.255642][T19826] ? __cfi_trace_print_context+0x10/0x10 [ 458.261345][T19826] ? __find_next_entry+0x5af/0x6c0 [ 458.266536][T19826] print_trace_fmt+0x3c6/0x720 [ 458.271362][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 458.277062][T19826] print_trace_line+0x393/0x6b0 [ 458.281951][T19826] tracing_read_pipe+0x517/0xaf0 [ 458.286964][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 458.292463][T19826] vfs_read+0x286/0x930 [ 458.296784][T19826] ? __cfi_vfs_read+0x10/0x10 [ 458.301497][T19826] ? __kasan_check_write+0x14/0x20 [ 458.306675][T19826] ? mutex_lock+0x93/0x1b0 [ 458.311131][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 458.316020][T19826] ? __fdget_pos+0x2cd/0x380 [ 458.320696][T19826] ? ksys_read+0x70/0x260 [ 458.325059][T19826] ksys_read+0x14a/0x260 [ 458.329373][T19826] ? __cfi_ksys_read+0x10/0x10 [ 458.334175][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 458.339956][T19826] __x64_sys_read+0x7b/0x90 [ 458.344496][T19826] x64_sys_call+0x2f/0x9a0 [ 458.348986][T19826] do_syscall_64+0x4c/0xa0 [ 458.353449][T19826] ? clear_bhb_loop+0x30/0x80 [ 458.358207][T19826] ? clear_bhb_loop+0x30/0x80 [ 458.363008][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.368969][T19826] RIP: 0033:0x7fb5dfb9e199 [ 458.373416][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.393169][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.401651][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 458.409687][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 458.417745][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 458.425771][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.433812][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 458.441855][T19826] [ 458.444914][T19826] ---[ end trace 0000000000000000 ]--- [ 458.450518][ T330] usb 5-1: device descriptor read/8, error -71 [ 458.541000][T19863] loop3: detected capacity change from 0 to 512 [ 458.611937][T19863] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1871: Invalid block bitmap block 0 in block_group 0 [ 458.666482][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 458.683253][T19863] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 458.692304][T19826] ------------[ cut here ]------------ [ 458.697791][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 458.708218][T19826] Modules linked in: [ 458.712135][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 458.716617][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 458.721123][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.721139][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 458.743521][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 458.760818][T19863] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1871: attempt to clear invalid blocks 983261 len 1 [ 458.763157][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 458.782430][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 458.790448][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 458.798444][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 458.806441][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 458.814461][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 458.822465][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 458.831441][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.838053][T19826] CR2: 00007fb5dfbeb880 CR3: 0000000159019000 CR4: 00000000003526a0 [ 458.846052][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 458.847073][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 458.854046][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 458.868543][T19826] Call Trace: [ 458.871863][T19826] [ 458.874828][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 458.880499][T19826] ? __kasan_check_write+0x14/0x20 [ 458.885639][T19826] ? _raw_spin_lock+0x94/0xf0 [ 458.890351][T19826] rb_buffer_peek+0x5f/0x930 [ 458.894974][T19826] ring_buffer_consume+0x1aa/0x370 [ 458.900122][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 458.905799][T19826] ? print_trace_line+0x393/0x6b0 [ 458.907602][T19863] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1871: invalid indirect mapped block 2683928664 (level 0) [ 458.910854][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 458.929710][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 458.935224][T19826] vfs_read+0x286/0x930 [ 458.939405][T19826] ? __cfi_vfs_read+0x10/0x10 [ 458.944114][T19826] ? __kasan_check_write+0x14/0x20 [ 458.949254][T19826] ? mutex_lock+0x93/0x1b0 [ 458.953702][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 458.958611][T19826] ? __fdget_pos+0x2cd/0x380 [ 458.963228][T19826] ? ksys_read+0x70/0x260 [ 458.967583][T19826] ksys_read+0x14a/0x260 [ 458.971852][T19826] ? __cfi_ksys_read+0x10/0x10 [ 458.976649][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 458.982322][T19826] __x64_sys_read+0x7b/0x90 [ 458.982761][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 458.986851][T19826] x64_sys_call+0x2f/0x9a0 [ 458.986878][T19826] do_syscall_64+0x4c/0xa0 [ 459.002239][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.006960][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.011664][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.017592][T19826] RIP: 0033:0x7fb5dfb9e199 [ 459.019987][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 459.022038][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.054251][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.062705][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 459.070699][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 459.078697][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 459.086694][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.094686][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 459.102694][T19826] [ 459.105746][T19826] ---[ end trace 0000000000000000 ]--- [ 459.111274][T19826] ------------[ cut here ]------------ [ 459.116737][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 459.127091][T19826] Modules linked in: [ 459.131020][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 459.139967][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.150031][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 459.155857][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 459.175481][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 459.181570][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 459.189567][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 459.197586][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 459.205580][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 459.213576][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 459.221571][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 459.230528][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.237136][T19826] CR2: 00007fb5dfbeb880 CR3: 0000000159019000 CR4: 00000000003526a0 [ 459.245141][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.253216][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.261221][T19826] Call Trace: [ 459.264531][T19826] [ 459.267480][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 459.273229][T19826] ? __kasan_check_write+0x14/0x20 [ 459.278393][T19826] ? _raw_spin_lock+0x94/0xf0 [ 459.283099][T19826] rb_advance_reader+0x2b/0x770 [ 459.288061][T19826] ring_buffer_consume+0x1e7/0x370 [ 459.293195][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 459.298846][T19826] ? print_trace_line+0x393/0x6b0 [ 459.303890][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 459.308851][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 459.314341][T19826] vfs_read+0x286/0x930 [ 459.318514][T19826] ? __cfi_vfs_read+0x10/0x10 [ 459.323203][T19826] ? __kasan_check_write+0x14/0x20 [ 459.328333][T19826] ? mutex_lock+0x93/0x1b0 [ 459.332768][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 459.337640][T19826] ? __fdget_pos+0x2cd/0x380 [ 459.342263][T19826] ? ksys_read+0x70/0x260 [ 459.346609][T19826] ksys_read+0x14a/0x260 [ 459.350864][T19826] ? __cfi_ksys_read+0x10/0x10 [ 459.355641][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 459.361291][T19826] __x64_sys_read+0x7b/0x90 [ 459.365813][T19826] x64_sys_call+0x2f/0x9a0 [ 459.370248][T19826] do_syscall_64+0x4c/0xa0 [ 459.374685][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.379379][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.384075][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.389978][T19826] RIP: 0033:0x7fb5dfb9e199 [ 459.394406][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.414026][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.422454][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 459.430442][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 459.438424][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 459.446406][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.454387][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 459.462375][T19826] [ 459.465402][T19826] ---[ end trace 0000000000000000 ]--- [ 459.508576][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.515307][T19863] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 459.532125][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.549055][T19863] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 459.559843][T19826] ------------[ cut here ]------------ [ 459.565335][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 459.575711][T19826] Modules linked in: [ 459.579630][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 459.588592][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.598686][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 459.604529][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 459.619556][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.624163][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 459.636778][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 459.644783][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 459.652791][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 459.660791][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 459.668799][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 459.676807][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 459.685783][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.692391][T19826] CR2: 00007efffe770e9c CR3: 0000000159019000 CR4: 00000000003526a0 [ 459.696639][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 459.700391][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.720976][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.728984][T19826] Call Trace: [ 459.732297][T19826] [ 459.735260][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 459.740932][T19826] ? __schedule+0xcbb/0x1700 [ 459.745606][T19826] ? __kasan_check_write+0x14/0x20 [ 459.750754][T19826] ? _raw_spin_lock+0x94/0xf0 [ 459.755469][T19826] rb_buffer_peek+0x5f/0x930 [ 459.757393][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.760088][T19826] ring_buffer_peek+0x184/0x3b0 [ 459.771469][T19826] ? __kasan_check_read+0x11/0x20 [ 459.776540][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 459.781942][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 459.788136][T19826] ? _find_next_bit+0x8a/0x130 [ 459.792958][T19826] __find_next_entry+0x33c/0x6c0 [ 459.797944][T19826] ? trace_find_next_entry+0x380/0x380 [ 459.803447][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 459.809118][T19826] ? print_trace_line+0x393/0x6b0 [ 459.814183][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 459.816681][T19863] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 459.819163][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 459.834003][T19826] vfs_read+0x286/0x930 [ 459.838198][T19826] ? __cfi_vfs_read+0x10/0x10 [ 459.842905][T19826] ? __kasan_check_write+0x14/0x20 [ 459.848039][T19826] ? mutex_lock+0x93/0x1b0 [ 459.852480][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 459.857360][T19826] ? __fdget_pos+0x2cd/0x380 [ 459.861982][T19826] ? ksys_read+0x70/0x260 [ 459.866345][T19826] ksys_read+0x14a/0x260 [ 459.867154][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.870612][T19826] ? __cfi_ksys_read+0x10/0x10 [ 459.881928][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 459.887594][T19826] __x64_sys_read+0x7b/0x90 [ 459.892135][T19826] x64_sys_call+0x2f/0x9a0 [ 459.896582][T19826] do_syscall_64+0x4c/0xa0 [ 459.901034][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.905779][T19826] ? clear_bhb_loop+0x30/0x80 [ 459.910490][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.916451][T19826] RIP: 0033:0x7fb5dfb9e199 [ 459.920285][T19863] EXT4-fs error (device loop3): ext4_truncate:4327: inode #13: comm syz.3.1871: mark_inode_dirty error [ 459.920897][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.951542][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.959993][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 459.967996][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 459.975998][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 459.977434][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 459.984086][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.998611][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 460.006625][T19826] [ 460.009695][T19826] ---[ end trace 0000000000000000 ]--- [ 460.016156][T19863] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 460.066689][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 460.073317][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 460.089447][T19884] loop8: detected capacity change from 0 to 4096 [ 460.108648][T19884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 460.121876][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 460.146893][T19863] EXT4-fs (loop3): 1 truncate cleaned up [ 460.154251][T19863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 460.166658][T19884] EXT4-fs (loop8): Test dummy encryption mode enabled [ 460.182990][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 460.202888][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 460.214852][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 460.228791][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 460.228787][T19884] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 460.231207][T19884] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 460.237240][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 460.307923][T19826] ------------[ cut here ]------------ [ 460.313469][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 460.323926][T19826] Modules linked in: [ 460.327853][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 460.336818][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.346899][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 460.352751][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 460.372394][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 460.378500][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 460.386605][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 460.394646][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 460.402654][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 460.410655][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 460.418655][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 460.427613][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.434256][T19826] CR2: 00007f6cec4f1ff8 CR3: 0000000159019000 CR4: 00000000003526b0 [ 460.442260][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 460.444200][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 460.444240][ T28] audit: type=1326 audit(1791419637.992:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.450261][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.450277][T19826] Call Trace: [ 460.450284][T19826] [ 460.450297][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 460.478959][ T28] audit: type=1326 audit(1791419637.992:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.481198][T19826] ? __kasan_check_write+0x14/0x20 [ 460.516478][ T28] audit: type=1326 audit(1791419637.992:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.525907][T19826] ? _raw_spin_lock+0x94/0xf0 [ 460.556804][ T28] audit: type=1326 audit(1791419637.992:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.560550][T19826] rb_buffer_peek+0x5f/0x930 [ 460.589973][T19826] ring_buffer_consume+0x1aa/0x370 [ 460.595118][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 460.600778][T19826] ? print_trace_line+0x393/0x6b0 [ 460.605836][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 460.610809][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 460.616314][T19826] vfs_read+0x286/0x930 [ 460.619762][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 460.620532][T19826] ? __cfi_vfs_read+0x10/0x10 [ 460.631826][T19826] ? __kasan_check_write+0x14/0x20 [ 460.636967][T19826] ? mutex_lock+0x93/0x1b0 [ 460.641422][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 460.646304][T19826] ? __fdget_pos+0x2cd/0x380 [ 460.650942][T19826] ? ksys_read+0x70/0x260 [ 460.655331][T19826] ksys_read+0x14a/0x260 [ 460.659606][T19826] ? __cfi_ksys_read+0x10/0x10 [ 460.664395][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 460.668259][ T28] audit: type=1326 audit(1791419638.352:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.670056][T19826] __x64_sys_read+0x7b/0x90 [ 460.699425][T19826] x64_sys_call+0x2f/0x9a0 [ 460.703894][T19826] do_syscall_64+0x4c/0xa0 [ 460.708348][T19826] ? clear_bhb_loop+0x30/0x80 [ 460.713053][T19826] ? clear_bhb_loop+0x30/0x80 [ 460.717760][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.723707][T19826] RIP: 0033:0x7fb5dfb9e199 [ 460.728150][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.736474][ T28] audit: type=1326 audit(1791419638.352:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.747781][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.747806][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 460.789055][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 460.797087][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 460.805086][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.813078][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 460.821084][T19826] [ 460.824127][T19826] ---[ end trace 0000000000000000 ]--- [ 460.829660][T19826] ------------[ cut here ]------------ [ 460.835138][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 460.845593][T19826] Modules linked in: [ 460.849516][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 460.858511][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.868605][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 460.874454][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 460.886702][T19895] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 460.894088][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 460.913200][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 460.921224][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 460.929267][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 460.937035][T19895] EXT4-fs (loop3): Remounting filesystem read-only [ 460.937264][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 460.944211][ T28] audit: type=1326 audit(1791419638.572:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 460.951747][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 460.951765][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 460.951785][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.951800][T19826] CR2: 00007f6cec4f1ff8 CR3: 0000000159019000 CR4: 00000000003526b0 [ 460.951820][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 460.951833][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.951847][T19826] Call Trace: [ 460.951852][T19826] [ 460.951866][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 460.951894][T19826] ? __kasan_check_write+0x14/0x20 [ 461.012443][ T28] audit: type=1326 audit(1791419638.642:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 461.016233][T19826] ? _raw_spin_lock+0x94/0xf0 [ 461.070755][T19826] rb_advance_reader+0x2b/0x770 [ 461.075645][T19826] ring_buffer_consume+0x1e7/0x370 [ 461.080785][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 461.086451][T19826] ? print_trace_line+0x393/0x6b0 [ 461.091500][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 461.096496][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 461.102007][T19826] vfs_read+0x286/0x930 [ 461.106184][T19826] ? __cfi_vfs_read+0x10/0x10 [ 461.110886][T19826] ? __kasan_check_write+0x14/0x20 [ 461.116028][T19826] ? mutex_lock+0x93/0x1b0 [ 461.120523][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 461.125429][T19826] ? __fdget_pos+0x2cd/0x380 [ 461.130088][T19826] ? ksys_read+0x70/0x260 [ 461.134463][T19826] ksys_read+0x14a/0x260 [ 461.138765][T19826] ? __cfi_ksys_read+0x10/0x10 [ 461.143560][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 461.149242][T19826] __x64_sys_read+0x7b/0x90 [ 461.153784][T19826] x64_sys_call+0x2f/0x9a0 [ 461.158229][T19826] do_syscall_64+0x4c/0xa0 [ 461.162679][T19826] ? clear_bhb_loop+0x30/0x80 [ 461.167393][T19826] ? clear_bhb_loop+0x30/0x80 [ 461.172106][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.178038][T19826] RIP: 0033:0x7fb5dfb9e199 [ 461.182479][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.202116][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.210568][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 461.218581][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 461.220806][ T28] audit: type=1326 audit(1791419638.902:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 461.226587][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 461.226604][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.226618][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 461.252295][T19863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1871: Invalid inode table block 0 in block_group 0 [ 461.259531][T19826] [ 461.259548][T19826] ---[ end trace 0000000000000000 ]--- [ 461.326637][T19826] ------------[ cut here ]------------ [ 461.332149][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 461.342509][T19826] Modules linked in: [ 461.346431][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 461.355421][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.365503][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 461.371366][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 461.391012][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 461.397144][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 461.405150][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 461.413152][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 461.421180][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 461.429192][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 461.437210][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 461.446200][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.452846][T19826] CR2: 00007ff0cdf8b9c0 CR3: 0000000159019000 CR4: 00000000003526a0 [ 461.460853][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.468848][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 461.476841][T19826] Call Trace: [ 461.480142][T19826] [ 461.483089][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 461.488674][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 461.494425][T19826] ? __schedule+0xcbb/0x1700 [ 461.499050][T19826] ? __kasan_check_write+0x14/0x20 [ 461.504200][T19826] ? _raw_spin_lock+0x94/0xf0 [ 461.508913][T19826] rb_buffer_peek+0x5f/0x930 [ 461.513529][T19826] ring_buffer_peek+0x184/0x3b0 [ 461.518407][T19826] ? __kasan_check_read+0x11/0x20 [ 461.523480][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 461.528895][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 461.535077][T19826] ? _find_next_bit+0x8a/0x130 [ 461.539872][T19826] __find_next_entry+0x33c/0x6c0 [ 461.544850][T19826] ? trace_find_next_entry+0x380/0x380 [ 461.550339][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 461.556014][T19826] ? print_trace_line+0x393/0x6b0 [ 461.561085][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 461.566061][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 461.571546][T19826] vfs_read+0x286/0x930 [ 461.575723][T19826] ? __cfi_vfs_read+0x10/0x10 [ 461.580415][T19826] ? __kasan_check_write+0x14/0x20 [ 461.585568][T19826] ? mutex_lock+0x93/0x1b0 [ 461.590040][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 461.594935][T19826] ? __fdget_pos+0x2cd/0x380 [ 461.599549][T19826] ? ksys_read+0x70/0x260 [ 461.603904][T19826] ksys_read+0x14a/0x260 [ 461.608169][T19826] ? __cfi_ksys_read+0x10/0x10 [ 461.612970][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 461.618650][T19826] __x64_sys_read+0x7b/0x90 [ 461.623182][T19826] x64_sys_call+0x2f/0x9a0 [ 461.627643][T19826] do_syscall_64+0x4c/0xa0 [ 461.632088][T19826] ? clear_bhb_loop+0x30/0x80 [ 461.636795][T19826] ? clear_bhb_loop+0x30/0x80 [ 461.641503][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.647420][T19826] RIP: 0033:0x7fb5dfb9e199 [ 461.651861][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.671498][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.679933][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 461.687951][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 461.695948][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 461.703942][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.711949][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 461.719960][T19826] [ 461.723004][T19826] ---[ end trace 0000000000000000 ]--- [ 461.779227][T19896] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.834147][T19896] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.923141][T19896] device bridge_slave_0 entered promiscuous mode [ 462.068219][ T28] audit: type=1326 audit(1791419638.902:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.1871" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6ceb59e199 code=0x7ffc0000 [ 462.105376][T19896] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.127116][T19896] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.155446][T19896] device bridge_slave_1 entered promiscuous mode [ 462.166754][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 462.225712][T15809] EXT4-fs (loop3): unmounting filesystem. [ 462.357810][ T390] tipc: Disabling bearer [ 462.363268][ T390] tipc: Left network mode [ 462.435103][T15324] EXT4-fs (loop8): unmounting filesystem. [ 462.530949][T19930] loop3: detected capacity change from 0 to 512 [ 462.547324][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.554909][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.594357][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 462.603878][T19930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 462.621815][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.632409][T19930] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.650296][ T2756] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.657404][ T2756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.679987][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.698247][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.709930][T19930] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1880: Failed to acquire dquot type 1 [ 462.728006][ T2756] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.735097][ T2756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.744468][T19930] EXT4-fs (loop3): 1 truncate cleaned up [ 462.756743][T19930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 462.784182][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.809660][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.827137][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.855620][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.871850][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.898259][T19896] device veth0_vlan entered promiscuous mode [ 462.912687][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.924142][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.951219][T19896] device veth1_macvtap entered promiscuous mode [ 462.976979][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.985675][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.997674][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.011227][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.023870][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.041924][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.051847][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.066603][ T330] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 463.074598][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.089407][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.112611][T19826] ------------[ cut here ]------------ [ 463.118115][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 463.128480][T19826] Modules linked in: [ 463.132394][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 463.141359][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 463.151448][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 463.157297][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 463.176929][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 463.183034][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 463.191041][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 463.191942][T19920] loop4: detected capacity change from 0 to 40427 [ 463.199043][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 463.199061][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 463.199076][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 463.199091][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 463.199109][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.199124][T19826] CR2: 00007f6cec511fd0 CR3: 0000000159019000 CR4: 00000000003526a0 [ 463.199142][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.199154][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.199168][T19826] Call Trace: [ 463.199174][T19826] [ 463.199187][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 463.199218][T19826] ? __kasan_check_write+0x14/0x20 [ 463.199239][T19826] ? _raw_spin_lock+0x94/0xf0 [ 463.290745][T19826] rb_buffer_peek+0x5f/0x930 [ 463.295366][T19826] ring_buffer_consume+0x1aa/0x370 [ 463.300507][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 463.304118][T19920] F2FS-fs (loop4): heap/no_heap options were deprecated [ 463.306174][T19826] ? print_trace_line+0x393/0x6b0 [ 463.318157][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 463.323154][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 463.328642][T19826] vfs_read+0x286/0x930 [ 463.332834][T19826] ? __cfi_vfs_read+0x10/0x10 [ 463.337543][T19826] ? __kasan_check_write+0x14/0x20 [ 463.342682][T19826] ? mutex_lock+0x93/0x1b0 [ 463.347128][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 463.350483][T19920] F2FS-fs (loop4): fault_injection options not supported [ 463.352009][T19826] ? __fdget_pos+0x2cd/0x380 [ 463.363645][T19826] ? ksys_read+0x70/0x260 [ 463.367999][T19826] ksys_read+0x14a/0x260 [ 463.372293][T19826] ? __cfi_ksys_read+0x10/0x10 [ 463.377099][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 463.382765][T19826] __x64_sys_read+0x7b/0x90 [ 463.387315][T19826] x64_sys_call+0x2f/0x9a0 [ 463.391775][T19826] do_syscall_64+0x4c/0xa0 [ 463.396230][T19826] ? clear_bhb_loop+0x30/0x80 [ 463.399952][T19920] F2FS-fs (loop4): fault_type options not supported [ 463.400931][T19826] ? clear_bhb_loop+0x30/0x80 [ 463.412208][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.418155][T19826] RIP: 0033:0x7fb5dfb9e199 [ 463.422597][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.440591][T19920] F2FS-fs (loop4): FLUSH_MERGE not compatible with readonly mode [ 463.442237][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.458393][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 463.466393][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 463.474392][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 463.482395][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.490406][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 463.498400][T19826] [ 463.501431][T19826] ---[ end trace 0000000000000000 ]--- [ 463.506947][T19826] ------------[ cut here ]------------ [ 463.512410][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 463.522750][T19826] Modules linked in: [ 463.526650][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 463.535600][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 463.545667][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 463.551494][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 463.571138][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 463.577224][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 463.585208][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 463.593210][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 463.601192][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 463.609176][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 463.617156][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 463.626097][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.632692][T19826] CR2: 00007f6cec511fd0 CR3: 0000000159019000 CR4: 00000000003526a0 [ 463.640681][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.648660][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.656642][T19826] Call Trace: [ 463.659950][T19826] [ 463.662899][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 463.668550][T19826] ? __kasan_check_write+0x14/0x20 [ 463.673676][T19826] ? _raw_spin_lock+0x94/0xf0 [ 463.678376][T19826] rb_advance_reader+0x2b/0x770 [ 463.683234][T19826] ring_buffer_consume+0x1e7/0x370 [ 463.688447][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 463.694106][T19826] ? print_trace_line+0x393/0x6b0 [ 463.699191][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 463.704156][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 463.709634][T19826] vfs_read+0x286/0x930 [ 463.713807][T19826] ? __cfi_vfs_read+0x10/0x10 [ 463.718496][T19826] ? __kasan_check_write+0x14/0x20 [ 463.723628][T19826] ? mutex_lock+0x93/0x1b0 [ 463.728088][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 463.732970][T19826] ? __fdget_pos+0x2cd/0x380 [ 463.737577][T19826] ? ksys_read+0x70/0x260 [ 463.741929][T19826] ksys_read+0x14a/0x260 [ 463.746192][T19826] ? __cfi_ksys_read+0x10/0x10 [ 463.750971][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 463.756622][T19826] __x64_sys_read+0x7b/0x90 [ 463.761138][T19826] x64_sys_call+0x2f/0x9a0 [ 463.765567][T19826] do_syscall_64+0x4c/0xa0 [ 463.770005][T19826] ? clear_bhb_loop+0x30/0x80 [ 463.774717][T19826] ? clear_bhb_loop+0x30/0x80 [ 463.779423][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.785342][T19826] RIP: 0033:0x7fb5dfb9e199 [ 463.789773][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.809394][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.817909][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 463.825980][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 463.833962][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 463.841943][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.849923][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 463.857915][T19826] [ 463.860946][T19826] ---[ end trace 0000000000000000 ]--- [ 463.912196][ T390] device bridge_slave_1 left promiscuous mode [ 463.921939][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.948734][ T390] device bridge_slave_0 left promiscuous mode [ 463.966055][T19950] netlink: 'syz.6.1873': attribute type 32 has an invalid length. [ 463.974017][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.976676][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 463.992950][ T390] device veth1_macvtap left promiscuous mode [ 463.994911][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.009214][ T390] device veth0_vlan left promiscuous mode [ 464.019995][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.037374][ T330] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 464.058141][ T330] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.087998][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.106477][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.124668][ T330] usb 4-1: Product: syz [ 464.129068][ T330] usb 4-1: Manufacturer: syz [ 464.133689][ T330] usb 4-1: SerialNumber: syz [ 464.250986][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1873'. [ 464.270231][T19950] 8021q: VLANs not supported on ip_vti0 [ 464.436260][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'. [ 464.448920][ T330] cdc_ncm 4-1:1.0: skipping garbage [ 464.454192][ T330] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 464.471817][ T330] cdc_ncm 4-1:1.0: bind() failure [ 464.482618][ T330] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 464.504132][ T330] cdc_ncm 4-1:1.1: bind() failure [ 464.527359][ T330] usb 4-1: USB disconnect, device number 39 [ 464.676495][T19826] ------------[ cut here ]------------ [ 464.682021][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 464.692408][T19826] Modules linked in: [ 464.696326][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 464.705287][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.715370][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 464.721215][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 464.740849][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010006 [ 464.746949][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 464.754972][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 464.762970][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 464.770966][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 464.778959][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 464.786948][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 464.795923][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.802519][T19826] CR2: 00007fb16520cff8 CR3: 0000000159019000 CR4: 00000000003526b0 [ 464.810504][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 464.818486][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.826466][T19826] Call Trace: [ 464.829761][T19826] [ 464.832702][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 464.838275][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 464.843920][T19826] ? __schedule+0xcbb/0x1700 [ 464.848534][T19826] ? __kasan_check_write+0x14/0x20 [ 464.853675][T19826] ? _raw_spin_lock+0x94/0xf0 [ 464.858373][T19826] rb_buffer_peek+0x5f/0x930 [ 464.862978][T19826] ring_buffer_peek+0x184/0x3b0 [ 464.867856][T19826] ? __kasan_check_read+0x11/0x20 [ 464.872890][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 464.878294][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 464.884464][T19826] ? _find_next_bit+0x8a/0x130 [ 464.889242][T19826] __find_next_entry+0x33c/0x6c0 [ 464.894293][T19826] ? trace_find_next_entry+0x380/0x380 [ 464.899776][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 464.905444][T19826] ? print_trace_line+0x393/0x6b0 [ 464.910477][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 464.915437][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 464.920909][T19826] vfs_read+0x286/0x930 [ 464.925084][T19826] ? __cfi_vfs_read+0x10/0x10 [ 464.929773][T19826] ? __kasan_check_write+0x14/0x20 [ 464.934906][T19826] ? mutex_lock+0x93/0x1b0 [ 464.939333][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 464.944210][T19826] ? __fdget_pos+0x2cd/0x380 [ 464.948823][T19826] ? ksys_read+0x70/0x260 [ 464.953187][T19826] ksys_read+0x14a/0x260 [ 464.957451][T19826] ? __cfi_ksys_read+0x10/0x10 [ 464.962230][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 464.967896][T19826] __x64_sys_read+0x7b/0x90 [ 464.972422][T19826] x64_sys_call+0x2f/0x9a0 [ 464.976851][T19826] do_syscall_64+0x4c/0xa0 [ 464.981290][T19826] ? clear_bhb_loop+0x30/0x80 [ 464.985985][T19826] ? clear_bhb_loop+0x30/0x80 [ 464.990679][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.996579][T19826] RIP: 0033:0x7fb5dfb9e199 [ 465.001000][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.020610][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.029032][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 465.037022][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 465.045006][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 465.052987][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.060977][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 465.068974][T19826] [ 465.071998][T19826] ---[ end trace 0000000000000000 ]--- [ 465.118683][T19999] loop8: detected capacity change from 0 to 256 [ 465.146393][ T863] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 465.189005][T15809] EXT4-fs (loop3): unmounting filesystem. [ 465.276138][T20012] loop8: detected capacity change from 0 to 4096 [ 465.310630][T20012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 465.321734][T20012] EXT4-fs (loop8): Test dummy encryption mode enabled [ 465.337053][ T863] usb 7-1: not running at top speed; connect to a high speed hub [ 465.345002][T20012] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 465.357333][ T863] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.388224][ T863] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 465.401695][T20012] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 465.406253][T19826] ------------[ cut here ]------------ [ 465.416146][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 465.420693][ T863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.426507][T19826] Modules linked in: [ 465.426521][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 465.426543][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.426556][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 465.463226][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 465.482865][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 465.488964][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 465.496972][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 465.497768][ T863] usb 7-1: Found UVC 1.00 device (0000:0000) [ 465.504965][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 465.504986][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 465.505003][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 465.535844][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 465.544827][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.551438][T19826] CR2: 0000557f4f157ce8 CR3: 0000000159019000 CR4: 00000000003526a0 [ 465.555713][ T863] usb 7-1: No streaming interface found for terminal 2. [ 465.559436][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.559453][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.559468][T19826] Call Trace: [ 465.559475][T19826] [ 465.588659][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 465.594326][T19826] ? __kasan_check_write+0x14/0x20 [ 465.599469][T19826] ? _raw_spin_lock+0x94/0xf0 [ 465.604188][T19826] rb_buffer_peek+0x5f/0x930 [ 465.608820][T19826] ring_buffer_consume+0x1aa/0x370 [ 465.613995][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 465.619659][T19826] ? print_trace_line+0x393/0x6b0 [ 465.624715][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 465.629687][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 465.635184][T19826] vfs_read+0x286/0x930 [ 465.639376][T19826] ? __cfi_vfs_read+0x10/0x10 [ 465.644079][T19826] ? __kasan_check_write+0x14/0x20 [ 465.649228][T19826] ? mutex_lock+0x93/0x1b0 [ 465.653679][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 465.658559][T19826] ? __fdget_pos+0x2cd/0x380 [ 465.663199][T19826] ? ksys_read+0x70/0x260 [ 465.667579][T19826] ksys_read+0x14a/0x260 [ 465.671854][T19826] ? __cfi_ksys_read+0x10/0x10 [ 465.676650][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 465.682315][T19826] __x64_sys_read+0x7b/0x90 [ 465.686857][T19826] x64_sys_call+0x2f/0x9a0 [ 465.691319][T19826] do_syscall_64+0x4c/0xa0 [ 465.695773][T19826] ? clear_bhb_loop+0x30/0x80 [ 465.700476][T19826] ? clear_bhb_loop+0x30/0x80 [ 465.705182][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.711113][T19826] RIP: 0033:0x7fb5dfb9e199 [ 465.715569][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.735200][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.743642][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 465.751738][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 465.759736][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 465.767730][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.775723][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 465.783740][T19826] [ 465.786782][T19826] ---[ end trace 0000000000000000 ]--- [ 465.792313][T19826] ------------[ cut here ]------------ [ 465.797797][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 465.808158][T19826] Modules linked in: [ 465.812069][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 465.821035][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.831117][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 465.836958][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 465.856592][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 465.862695][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 465.870701][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 465.878711][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 465.886707][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 465.894797][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 465.902800][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 465.911777][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.918388][T19826] CR2: 0000557f4f157ce8 CR3: 0000000159019000 CR4: 00000000003526a0 [ 465.926405][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.934396][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.942405][T19826] Call Trace: [ 465.945724][T19826] [ 465.948683][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 465.954356][T19826] ? __kasan_check_write+0x14/0x20 [ 465.959500][T19826] ? _raw_spin_lock+0x94/0xf0 [ 465.964217][T19826] rb_advance_reader+0x2b/0x770 [ 465.969098][T19826] ring_buffer_consume+0x1e7/0x370 [ 465.974267][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 465.979935][T19826] ? print_trace_line+0x393/0x6b0 [ 465.984988][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 465.989961][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 465.995452][T19826] vfs_read+0x286/0x930 [ 465.999637][T19826] ? __cfi_vfs_read+0x10/0x10 [ 466.004343][T19826] ? __kasan_check_write+0x14/0x20 [ 466.009484][T19826] ? mutex_lock+0x93/0x1b0 [ 466.014015][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 466.018907][T19826] ? __fdget_pos+0x2cd/0x380 [ 466.023525][T19826] ? ksys_read+0x70/0x260 [ 466.027892][T19826] ksys_read+0x14a/0x260 [ 466.032165][T19826] ? __cfi_ksys_read+0x10/0x10 [ 466.036953][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 466.042619][T19826] __x64_sys_read+0x7b/0x90 [ 466.047148][T19826] x64_sys_call+0x2f/0x9a0 [ 466.051696][T19826] do_syscall_64+0x4c/0xa0 [ 466.056162][T19826] ? clear_bhb_loop+0x30/0x80 [ 466.060872][T19826] ? clear_bhb_loop+0x30/0x80 [ 466.065577][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.071519][T19826] RIP: 0033:0x7fb5dfb9e199 [ 466.075975][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.095703][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.104154][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 466.112157][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 466.120162][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 466.128162][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.136160][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 466.144165][T19826] [ 466.147205][T19826] ---[ end trace 0000000000000000 ]--- [ 466.180530][T19826] ------------[ cut here ]------------ [ 466.186029][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 466.196404][T19826] Modules linked in: [ 466.200326][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 466.209287][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 466.219365][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 466.225234][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 466.244870][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 466.250971][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 466.258973][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 466.266972][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 466.274971][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 466.282993][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 466.290995][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 466.299961][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.306595][T19826] CR2: 000055577792b300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 466.314599][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.322597][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.330599][T19826] Call Trace: [ 466.333896][T19826] [ 466.336849][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 466.342461][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 466.348131][T19826] ? __schedule+0xcbb/0x1700 [ 466.352770][T19826] ? __kasan_check_write+0x14/0x20 [ 466.357931][T19826] ? _raw_spin_lock+0x94/0xf0 [ 466.362659][T19826] rb_buffer_peek+0x5f/0x930 [ 466.367276][T19826] ring_buffer_peek+0x184/0x3b0 [ 466.372218][T19826] ? __kasan_check_read+0x11/0x20 [ 466.377280][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 466.382833][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 466.389042][T19826] ? _find_next_bit+0x8a/0x130 [ 466.393843][T19826] __find_next_entry+0x33c/0x6c0 [ 466.398829][T19826] ? trace_find_next_entry+0x380/0x380 [ 466.404345][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 466.410013][T19826] ? print_trace_line+0x393/0x6b0 [ 466.415103][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 466.420084][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 466.425579][T19826] vfs_read+0x286/0x930 [ 466.429764][T19826] ? __cfi_vfs_read+0x10/0x10 [ 466.434472][T19826] ? __kasan_check_write+0x14/0x20 [ 466.439606][T19826] ? mutex_lock+0x93/0x1b0 [ 466.444136][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 466.449015][T19826] ? __fdget_pos+0x2cd/0x380 [ 466.453634][T19826] ? ksys_read+0x70/0x260 [ 466.457992][T19826] ksys_read+0x14a/0x260 [ 466.462262][T19826] ? __cfi_ksys_read+0x10/0x10 [ 466.467047][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 466.472731][T19826] __x64_sys_read+0x7b/0x90 [ 466.477262][T19826] x64_sys_call+0x2f/0x9a0 [ 466.481711][T19826] do_syscall_64+0x4c/0xa0 [ 466.486165][T19826] ? clear_bhb_loop+0x30/0x80 [ 466.490871][T19826] ? clear_bhb_loop+0x30/0x80 [ 466.495576][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.501497][T19826] RIP: 0033:0x7fb5dfb9e199 [ 466.505957][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.525585][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.534027][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 466.542058][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 466.550061][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 466.558066][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.566062][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 466.574070][T19826] [ 466.577117][T19826] ---[ end trace 0000000000000000 ]--- [ 466.588252][T12380] usb 7-1: USB disconnect, device number 24 [ 466.605347][T20033] loop6: detected capacity change from 0 to 16 [ 466.655496][T20033] erofs: (device loop6): mounted with root inode @ nid 36. [ 466.737376][T20041] @0Ù: renamed from bond_slave_1 [ 466.744801][ T47] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 466.765467][T20033] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.799368][T20033] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.810960][T20047] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.830489][T20033] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.859161][T20047] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.885703][T20049] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.907320][T20033] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.927601][T20047] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.951940][T20049] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 466.969350][T20059] loop3: detected capacity change from 0 to 1024 [ 466.984083][T20047] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.010540][T20059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 467.024518][T20049] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.045662][T20049] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.083911][T15809] EXT4-fs (loop3): unmounting filesystem. [ 467.175137][T20073] loop6: detected capacity change from 0 to 512 [ 467.192403][T20076] loop3: detected capacity change from 0 to 16 [ 467.233077][T20073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 467.238967][T20076] erofs: (device loop3): mounted with root inode @ nid 36. [ 467.277225][ T46] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 467.288432][T20076] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.306697][T20073] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 467.316371][T20076] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.344238][T20076] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.363413][T19826] ------------[ cut here ]------------ [ 467.368916][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 467.379291][T19826] Modules linked in: [ 467.383210][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 467.384994][T20081] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 467.392194][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.392209][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 467.418882][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 467.438540][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 467.444663][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 467.452666][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 467.460676][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 467.468684][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 467.476696][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 467.484693][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 467.493652][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.500266][T19826] CR2: 00007fe2675eb880 CR3: 0000000159019000 CR4: 00000000003526b0 [ 467.508275][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 467.516271][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.524315][T19826] Call Trace: [ 467.527616][T19826] [ 467.530582][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 467.536250][T19826] ? __kasan_check_write+0x14/0x20 [ 467.541394][T19826] ? _raw_spin_lock+0x94/0xf0 [ 467.546134][T19826] rb_buffer_peek+0x5f/0x930 [ 467.550760][T19826] ring_buffer_consume+0x1aa/0x370 [ 467.555910][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 467.561586][T19826] ? print_trace_line+0x393/0x6b0 [ 467.566640][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 467.571613][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 467.577105][T19826] vfs_read+0x286/0x930 [ 467.581288][T19826] ? __cfi_vfs_read+0x10/0x10 [ 467.585998][T19826] ? __kasan_check_write+0x14/0x20 [ 467.591141][T19826] ? mutex_lock+0x93/0x1b0 [ 467.595580][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 467.600467][T19826] ? __fdget_pos+0x2cd/0x380 [ 467.605091][T19826] ? ksys_read+0x70/0x260 [ 467.609457][T19826] ksys_read+0x14a/0x260 [ 467.613728][T19826] ? __cfi_ksys_read+0x10/0x10 [ 467.618515][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 467.624206][T19826] __x64_sys_read+0x7b/0x90 [ 467.628732][T19826] x64_sys_call+0x2f/0x9a0 [ 467.633186][T19826] do_syscall_64+0x4c/0xa0 [ 467.637660][T19826] ? clear_bhb_loop+0x30/0x80 [ 467.642384][T19826] ? clear_bhb_loop+0x30/0x80 [ 467.647085][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.653006][T19826] RIP: 0033:0x7fb5dfb9e199 [ 467.657453][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.677104][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.685541][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 467.693532][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 467.701523][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 467.709523][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.717511][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 467.725513][T19826] [ 467.728539][T19826] ---[ end trace 0000000000000000 ]--- [ 467.734050][T19826] ------------[ cut here ]------------ [ 467.739512][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 467.749861][T19826] Modules linked in: [ 467.753762][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 467.762706][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.772860][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 467.778687][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 467.798307][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 467.804389][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 467.812376][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 467.820355][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 467.828336][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 467.836337][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 467.844324][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 467.853268][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.859861][T19826] CR2: 00007fe2675eb880 CR3: 0000000159019000 CR4: 00000000003526b0 [ 467.867849][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 467.875836][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.883819][T19826] Call Trace: [ 467.887127][T19826] [ 467.890094][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 467.895772][T19826] ? __kasan_check_write+0x14/0x20 [ 467.900897][T19826] ? _raw_spin_lock+0x94/0xf0 [ 467.905600][T19826] rb_advance_reader+0x2b/0x770 [ 467.910464][T19826] ring_buffer_consume+0x1e7/0x370 [ 467.915597][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 467.921246][T19826] ? print_trace_line+0x393/0x6b0 [ 467.926282][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 467.931241][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 467.936713][T19826] vfs_read+0x286/0x930 [ 467.940884][T19826] ? __cfi_vfs_read+0x10/0x10 [ 467.945578][T19826] ? __kasan_check_write+0x14/0x20 [ 467.950705][T19826] ? mutex_lock+0x93/0x1b0 [ 467.955137][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 467.960007][T19826] ? __fdget_pos+0x2cd/0x380 [ 467.964604][T19826] ? ksys_read+0x70/0x260 [ 467.968945][T19826] ksys_read+0x14a/0x260 [ 467.973200][T19826] ? __cfi_ksys_read+0x10/0x10 [ 467.977971][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 467.983638][T19826] __x64_sys_read+0x7b/0x90 [ 467.988157][T19826] x64_sys_call+0x2f/0x9a0 [ 467.992592][T19826] do_syscall_64+0x4c/0xa0 [ 467.997025][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.001742][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.006427][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.012334][T19826] RIP: 0033:0x7fb5dfb9e199 [ 468.016764][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.036379][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.044812][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 468.052795][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 468.060782][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 468.068768][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.076759][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 468.084747][T19826] [ 468.087778][T19826] ---[ end trace 0000000000000000 ]--- [ 468.106202][T20073] __quota_error: 6 callbacks suppressed [ 468.106220][T20073] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 468.121444][T20073] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 468.133911][T20073] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1898: Failed to acquire dquot type 1 [ 468.145956][T20073] EXT4-fs (loop6): 1 truncate cleaned up [ 468.151658][T20073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 468.170947][T19826] ------------[ cut here ]------------ [ 468.176446][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 468.186814][T19826] Modules linked in: [ 468.190757][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 468.199723][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.209805][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 468.215656][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 468.235291][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010012 [ 468.241388][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 468.249389][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 468.257387][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 468.265386][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 468.273403][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 468.281406][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 468.290363][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.296973][T19826] CR2: 00005555828e4948 CR3: 0000000159019000 CR4: 00000000003526a0 [ 468.304976][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.312974][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.320976][T19826] Call Trace: [ 468.324296][T19826] [ 468.327251][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 468.332837][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 468.338505][T19826] ? __schedule+0xcbb/0x1700 [ 468.343135][T19826] ? __kasan_check_write+0x14/0x20 [ 468.348274][T19826] ? _raw_spin_lock+0x94/0xf0 [ 468.352987][T19826] rb_buffer_peek+0x5f/0x930 [ 468.357626][T19826] ring_buffer_peek+0x184/0x3b0 [ 468.362501][T19826] ? __kasan_check_read+0x11/0x20 [ 468.367559][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 468.372964][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 468.379157][T19826] ? _find_next_bit+0x8a/0x130 [ 468.383956][T19826] __find_next_entry+0x33c/0x6c0 [ 468.388948][T19826] ? trace_find_next_entry+0x380/0x380 [ 468.394451][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 468.400127][T19826] ? print_trace_line+0x393/0x6b0 [ 468.405204][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 468.410173][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 468.415673][T19826] vfs_read+0x286/0x930 [ 468.419871][T19826] ? __cfi_vfs_read+0x10/0x10 [ 468.424577][T19826] ? __kasan_check_write+0x14/0x20 [ 468.429734][T19826] ? mutex_lock+0x93/0x1b0 [ 468.434182][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 468.439075][T19826] ? __fdget_pos+0x2cd/0x380 [ 468.443779][T19826] ? ksys_read+0x70/0x260 [ 468.448157][T19826] ksys_read+0x14a/0x260 [ 468.452428][T19826] ? __cfi_ksys_read+0x10/0x10 [ 468.457213][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 468.462883][T19826] __x64_sys_read+0x7b/0x90 [ 468.467413][T19826] x64_sys_call+0x2f/0x9a0 [ 468.471862][T19826] do_syscall_64+0x4c/0xa0 [ 468.476332][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.481048][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.485748][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.491669][T19826] RIP: 0033:0x7fb5dfb9e199 [ 468.496113][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.515761][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.524207][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 468.532229][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 468.540329][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 468.548321][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.556320][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 468.562616][T12380] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 468.564319][T19826] [ 468.574897][T19826] ---[ end trace 0000000000000000 ]--- [ 468.580388][T19826] ================================================================== [ 468.588476][T19826] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 468.595729][T19826] Read of size 4 at addr ffff88816f3b6055 by task syz.9.1864/19826 [ 468.603646][T19826] [ 468.605993][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G W syzkaller #0 [ 468.614955][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.625039][T19826] Call Trace: [ 468.628342][T19826] [ 468.631293][T19826] __dump_stack+0x21/0x24 [ 468.635660][T19826] dump_stack_lvl+0x110/0x170 [ 468.640377][T19826] ? __cfi_dump_stack_lvl+0x8/0x8 [ 468.645437][T19826] ? rb_get_reader_page+0x9f6/0xc60 [ 468.650684][T19826] ? rb_buffer_peek+0x88d/0x930 [ 468.655557][T19826] print_address_description+0x71/0x200 [ 468.661136][T19826] print_report+0x4a/0x60 [ 468.665500][T19826] kasan_report+0x122/0x150 [ 468.670032][T19826] ? rb_buffer_peek+0x88d/0x930 [ 468.674919][T19826] ? __kasan_check_write+0x14/0x20 [ 468.680062][T19826] __asan_report_load4_noabort+0x14/0x20 [ 468.685724][T19826] rb_buffer_peek+0x88d/0x930 [ 468.690431][T19826] ring_buffer_peek+0x184/0x3b0 [ 468.695307][T19826] ? __kasan_check_read+0x11/0x20 [ 468.700356][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 468.705754][T19826] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 468.711942][T19826] ? _find_next_bit+0x8a/0x130 [ 468.716740][T19826] __find_next_entry+0x33c/0x6c0 [ 468.721724][T19826] ? trace_find_next_entry+0x380/0x380 [ 468.727218][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 468.732882][T19826] ? print_trace_line+0x393/0x6b0 [ 468.737937][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 468.742916][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 468.748412][T19826] vfs_read+0x286/0x930 [ 468.752601][T19826] ? __cfi_vfs_read+0x10/0x10 [ 468.757307][T19826] ? __kasan_check_write+0x14/0x20 [ 468.762442][T19826] ? mutex_lock+0x93/0x1b0 [ 468.766884][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 468.766937][T12380] usb 7-1: Using ep0 maxpacket: 8 [ 468.771789][T19826] ? __fdget_pos+0x2cd/0x380 [ 468.781445][T19826] ? ksys_read+0x70/0x260 [ 468.785805][T19826] ksys_read+0x14a/0x260 [ 468.790097][T19826] ? __cfi_ksys_read+0x10/0x10 [ 468.794894][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 468.800562][T19826] __x64_sys_read+0x7b/0x90 [ 468.805108][T19826] x64_sys_call+0x2f/0x9a0 [ 468.808246][T12380] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 468.809555][T19826] do_syscall_64+0x4c/0xa0 [ 468.822675][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.827394][T19826] ? clear_bhb_loop+0x30/0x80 [ 468.832106][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.838028][T19826] RIP: 0033:0x7fb5dfb9e199 [ 468.839719][T12380] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.842463][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.872161][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.880616][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 468.888613][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 468.894015][T12380] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 468.896609][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 468.915097][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.923096][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 468.931096][T19826] [ 468.932714][T12380] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.934137][T19826] [ 468.934143][T19826] The buggy address belongs to the physical page: [ 468.955703][T19826] page:ffffea0005bced80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16f3b6 [ 468.966048][T19826] flags: 0x4000000000000000(zone=1) [ 468.971281][T19826] raw: 4000000000000000 ffffea0005bced88 ffffea0005bced88 0000000000000000 [ 468.979887][T19826] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 468.988486][T19826] page dumped because: kasan: bad access detected [ 468.993444][T12380] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.994958][T19826] page_owner info is not present (never set?) [ 469.010022][T19826] [ 469.012365][T19826] Memory state around the buggy address: [ 469.018009][T19826] ffff88816f3b5f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 469.026093][T19826] ffff88816f3b5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 469.034175][T19826] >ffff88816f3b6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 469.039984][T12380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.042246][T19826] ^ [ 469.056936][T19826] ffff88816f3b6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 469.065024][T19826] ffff88816f3b6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 469.073095][T19826] ================================================================== [ 469.080262][T12380] usb 7-1: Product: syz [ 469.081165][T19826] Disabling lock debugging due to kernel taint [ 469.095666][T19826] ------------[ cut here ]------------ [ 469.101181][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 469.111541][T19826] Modules linked in: [ 469.115459][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 469.120808][T12380] usb 7-1: Manufacturer: syz [ 469.124436][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.124450][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 469.144946][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 469.153950][T12380] usb 7-1: SerialNumber: syz [ 469.164577][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 469.164600][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 469.164617][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 469.191241][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 469.199242][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 469.207249][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 469.215249][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 469.224209][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.230824][T19826] CR2: 00007ffe4cca77d8 CR3: 0000000159019000 CR4: 00000000003526a0 [ 469.238832][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.246839][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.254841][T19826] Call Trace: [ 469.258139][T19826] [ 469.261101][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 469.266802][T19826] ? __kasan_check_write+0x14/0x20 [ 469.271956][T19826] ? _raw_spin_lock+0x94/0xf0 [ 469.276680][T19826] rb_buffer_peek+0x5f/0x930 [ 469.281301][T19826] ring_buffer_consume+0x1aa/0x370 [ 469.286449][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 469.292119][T19826] ? print_trace_line+0x393/0x6b0 [ 469.297175][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 469.302146][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 469.307641][T19826] vfs_read+0x286/0x930 [ 469.311822][T19826] ? __cfi_vfs_read+0x10/0x10 [ 469.316561][T19826] ? __kasan_check_write+0x14/0x20 [ 469.321705][T19826] ? mutex_lock+0x93/0x1b0 [ 469.326151][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 469.331029][T19826] ? __fdget_pos+0x2cd/0x380 [ 469.335647][T19826] ? ksys_read+0x70/0x260 [ 469.340005][T19826] ksys_read+0x14a/0x260 [ 469.344273][T19826] ? __cfi_ksys_read+0x10/0x10 [ 469.349062][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 469.354726][T19826] __x64_sys_read+0x7b/0x90 [ 469.359257][T19826] x64_sys_call+0x2f/0x9a0 [ 469.363705][T19826] do_syscall_64+0x4c/0xa0 [ 469.368153][T19826] ? clear_bhb_loop+0x30/0x80 [ 469.372862][T19826] ? clear_bhb_loop+0x30/0x80 [ 469.377572][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.383489][T19826] RIP: 0033:0x7fb5dfb9e199 [ 469.387930][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.407556][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.416006][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 469.424009][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 469.432016][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 469.440008][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.448003][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 469.456009][T19826] [ 469.459046][T19826] ---[ end trace 0000000000000000 ]--- [ 469.464602][T19826] ------------[ cut here ]------------ [ 469.470081][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 469.480440][T19826] Modules linked in: [ 469.484356][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 469.493322][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.503411][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 469.509256][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 469.528888][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 469.534990][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 469.542988][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 469.550986][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 469.558987][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 469.566982][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 469.574982][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 469.583938][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.590548][T19826] CR2: 00007ffe4cca77d8 CR3: 0000000159019000 CR4: 00000000003526a0 [ 469.598545][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.606543][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.614545][T19826] Call Trace: [ 469.617848][T19826] [ 469.620831][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 469.626503][T19826] rb_advance_reader+0x2b/0x770 [ 469.631383][T19826] ring_buffer_consume+0x1e7/0x370 [ 469.636527][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 469.642190][T19826] ? print_trace_line+0x393/0x6b0 [ 469.647235][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 469.652209][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 469.657738][T19826] vfs_read+0x286/0x930 [ 469.661922][T19826] ? __cfi_vfs_read+0x10/0x10 [ 469.666619][T19826] ? __kasan_check_write+0x14/0x20 [ 469.671755][T19826] ? mutex_lock+0x93/0x1b0 [ 469.676199][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 469.681077][T19826] ? __fdget_pos+0x2cd/0x380 [ 469.685708][T19826] ? ksys_read+0x70/0x260 [ 469.690067][T19826] ksys_read+0x14a/0x260 [ 469.694337][T19826] ? __cfi_ksys_read+0x10/0x10 [ 469.699130][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 469.704816][T19826] __x64_sys_read+0x7b/0x90 [ 469.709355][T19826] x64_sys_call+0x2f/0x9a0 [ 469.713803][T19826] do_syscall_64+0x4c/0xa0 [ 469.718260][T19826] ? clear_bhb_loop+0x30/0x80 [ 469.722967][T19826] ? clear_bhb_loop+0x30/0x80 [ 469.727678][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.733608][T19826] RIP: 0033:0x7fb5dfb9e199 [ 469.738073][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.757710][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.766166][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 469.774157][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 469.782181][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 469.790175][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.798173][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 469.806181][T19826] [ 469.809218][T19826] ---[ end trace 0000000000000000 ]--- [ 469.833196][T19826] ------------[ cut here ]------------ [ 469.838798][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 469.849174][T19826] Modules linked in: [ 469.853097][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 469.862065][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.872142][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 469.877984][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 469.897703][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 469.903805][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 469.911814][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 469.919841][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 469.927850][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 469.935852][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 469.943856][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 469.952827][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.959441][T19826] CR2: 00007f9f716b8368 CR3: 0000000159019000 CR4: 00000000003526a0 [ 469.967442][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.975453][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.983447][T19826] Call Trace: [ 469.986746][T19826] [ 469.989705][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 469.995293][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 470.000952][T19826] ? __schedule+0xcbb/0x1700 [ 470.005597][T19826] ? __kasan_check_write+0x14/0x20 [ 470.010733][T19826] ? _raw_spin_lock+0x94/0xf0 [ 470.015448][T19826] rb_buffer_peek+0x5f/0x930 [ 470.020067][T19826] ring_buffer_peek+0x184/0x3b0 [ 470.024947][T19826] ? __kasan_check_read+0x11/0x20 [ 470.029995][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 470.035395][T19826] ? _find_next_bit+0x8a/0x130 [ 470.040191][T19826] __find_next_entry+0x33c/0x6c0 [ 470.045186][T19826] ? trace_find_next_entry+0x380/0x380 [ 470.050678][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 470.056342][T19826] ? print_trace_line+0x393/0x6b0 [ 470.061400][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 470.066396][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 470.071885][T19826] vfs_read+0x286/0x930 [ 470.076055][T19826] ? __cfi_vfs_read+0x10/0x10 [ 470.080741][T19826] ? __kasan_check_write+0x14/0x20 [ 470.085878][T19826] ? mutex_lock+0x93/0x1b0 [ 470.090321][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 470.095206][T19826] ? __fdget_pos+0x2cd/0x380 [ 470.099813][T19826] ? ksys_read+0x70/0x260 [ 470.104162][T19826] ksys_read+0x14a/0x260 [ 470.108415][T19826] ? __cfi_ksys_read+0x10/0x10 [ 470.113218][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 470.118889][T19826] __x64_sys_read+0x7b/0x90 [ 470.123412][T19826] x64_sys_call+0x2f/0x9a0 [ 470.127865][T19826] do_syscall_64+0x4c/0xa0 [ 470.132296][T19826] ? clear_bhb_loop+0x30/0x80 [ 470.136983][T19826] ? clear_bhb_loop+0x30/0x80 [ 470.141672][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.147573][T19826] RIP: 0033:0x7fb5dfb9e199 [ 470.151994][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.171611][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.180039][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 470.188025][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 470.196038][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 470.204025][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.212005][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 470.219996][T19826] [ 470.223023][T19826] ---[ end trace 0000000000000000 ]--- [ 470.246313][T19868] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 470.312938][T12380] cdc_ncm 7-1:1.0: skipping garbage [ 470.318608][T12380] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 470.339167][T12380] cdc_ncm 7-1:1.0: bind() failure [ 470.359662][T12380] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 470.383897][T12380] cdc_ncm 7-1:1.1: bind() failure [ 470.408601][T12380] usb 7-1: USB disconnect, device number 25 [ 470.595482][T15324] EXT4-fs (loop8): unmounting filesystem. [ 470.610953][T19826] ------------[ cut here ]------------ [ 470.616459][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 470.626836][T19826] Modules linked in: [ 470.630758][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 470.639723][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 470.649829][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 470.655668][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 470.675295][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 470.681389][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 470.689384][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 470.697377][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 470.705374][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 470.713372][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 470.721371][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 470.730337][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.736948][T19826] CR2: 000055b518f32300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 470.744944][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.752940][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 470.760966][T19826] Call Trace: [ 470.764264][T19826] [ 470.767224][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 470.772889][T19826] ? __kasan_check_write+0x14/0x20 [ 470.778032][T19826] ? _raw_spin_lock+0x94/0xf0 [ 470.782745][T19826] rb_buffer_peek+0x5f/0x930 [ 470.787369][T19826] ring_buffer_consume+0x1aa/0x370 [ 470.792514][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 470.798172][T19826] ? print_trace_line+0x393/0x6b0 [ 470.803231][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 470.808218][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 470.813702][T19826] vfs_read+0x286/0x930 [ 470.817888][T19826] ? __cfi_vfs_read+0x10/0x10 [ 470.822588][T19826] ? __kasan_check_write+0x14/0x20 [ 470.827734][T19826] ? mutex_lock+0x93/0x1b0 [ 470.832182][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 470.837069][T19826] ? __fdget_pos+0x2cd/0x380 [ 470.841693][T19826] ? ksys_read+0x70/0x260 [ 470.846037][T19826] ksys_read+0x14a/0x260 [ 470.850290][T19826] ? __cfi_ksys_read+0x10/0x10 [ 470.855072][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 470.860726][T19826] __x64_sys_read+0x7b/0x90 [ 470.865242][T19826] x64_sys_call+0x2f/0x9a0 [ 470.869673][T19826] do_syscall_64+0x4c/0xa0 [ 470.874107][T19826] ? clear_bhb_loop+0x30/0x80 [ 470.878801][T19826] ? clear_bhb_loop+0x30/0x80 [ 470.883501][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.889407][T19826] RIP: 0033:0x7fb5dfb9e199 [ 470.893837][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.913456][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.921889][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 470.929877][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 470.937949][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 470.945934][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.953917][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 470.961908][T19826] [ 470.964934][T19826] ---[ end trace 0000000000000000 ]--- [ 470.970472][T19826] ------------[ cut here ]------------ [ 470.975931][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 470.986284][T19826] Modules linked in: [ 470.990207][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 470.999152][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 471.009227][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 471.015058][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 471.034676][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 471.040761][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 471.048748][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 471.056749][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 471.064742][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 471.072736][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 471.080733][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 471.089679][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.096285][T19826] CR2: 000055b518f32300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 471.104358][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.112349][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.120332][T19826] Call Trace: [ 471.123619][T19826] [ 471.126569][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 471.132224][T19826] rb_advance_reader+0x2b/0x770 [ 471.137089][T19826] ring_buffer_consume+0x1e7/0x370 [ 471.142220][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 471.147866][T19826] ? print_trace_line+0x393/0x6b0 [ 471.152905][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 471.157863][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 471.163334][T19826] vfs_read+0x286/0x930 [ 471.167509][T19826] ? __cfi_vfs_read+0x10/0x10 [ 471.172200][T19826] ? __kasan_check_write+0x14/0x20 [ 471.177358][T19826] ? mutex_lock+0x93/0x1b0 [ 471.181799][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 471.186673][T19826] ? __fdget_pos+0x2cd/0x380 [ 471.191283][T19826] ? ksys_read+0x70/0x260 [ 471.195630][T19826] ksys_read+0x14a/0x260 [ 471.199885][T19826] ? __cfi_ksys_read+0x10/0x10 [ 471.204665][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 471.210313][T19826] __x64_sys_read+0x7b/0x90 [ 471.214831][T19826] x64_sys_call+0x2f/0x9a0 [ 471.219268][T19826] do_syscall_64+0x4c/0xa0 [ 471.223709][T19826] ? clear_bhb_loop+0x30/0x80 [ 471.228402][T19826] ? clear_bhb_loop+0x30/0x80 [ 471.233095][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.239022][T19826] RIP: 0033:0x7fb5dfb9e199 [ 471.243447][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.263065][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.271491][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 471.279474][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 471.287452][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 471.295435][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.303419][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 471.311418][T19826] [ 471.314462][T19826] ---[ end trace 0000000000000000 ]--- [ 471.351622][T19826] ------------[ cut here ]------------ [ 471.352670][T19896] EXT4-fs (loop6): unmounting filesystem. [ 471.357115][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 471.357154][T19826] Modules linked in: [ 471.357166][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 471.357189][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 471.357205][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 471.401987][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 471.421627][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 471.427732][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 471.435765][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 471.443770][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 471.451804][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 471.459809][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 471.467809][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 471.476768][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.483377][T19826] CR2: 00007fe738a05286 CR3: 0000000159019000 CR4: 00000000003526a0 [ 471.491375][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.499402][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.507404][T19826] Call Trace: [ 471.510698][T19826] [ 471.513739][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 471.519359][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 471.525023][T19826] ? __schedule+0xcbb/0x1700 [ 471.529651][T19826] ? __kasan_check_write+0x14/0x20 [ 471.534790][T19826] ? _raw_spin_lock+0x94/0xf0 [ 471.539510][T19826] rb_buffer_peek+0x5f/0x930 [ 471.544130][T19826] ring_buffer_peek+0x184/0x3b0 [ 471.549003][T19826] ? __kasan_check_read+0x11/0x20 [ 471.554052][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 471.559452][T19826] ? _find_next_bit+0x8a/0x130 [ 471.564263][T19826] __find_next_entry+0x33c/0x6c0 [ 471.569269][T19826] ? trace_find_next_entry+0x380/0x380 [ 471.574769][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 471.580515][T19826] ? print_trace_line+0x393/0x6b0 [ 471.585568][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 471.590539][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 471.596027][T19826] vfs_read+0x286/0x930 [ 471.600207][T19826] ? __cfi_vfs_read+0x10/0x10 [ 471.604911][T19826] ? __kasan_check_write+0x14/0x20 [ 471.610047][T19826] ? mutex_lock+0x93/0x1b0 [ 471.614487][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 471.619361][T19826] ? __fdget_pos+0x2cd/0x380 [ 471.623976][T19826] ? ksys_read+0x70/0x260 [ 471.628334][T19826] ksys_read+0x14a/0x260 [ 471.632602][T19826] ? __cfi_ksys_read+0x10/0x10 [ 471.637419][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 471.643084][T19826] __x64_sys_read+0x7b/0x90 [ 471.647617][T19826] x64_sys_call+0x2f/0x9a0 [ 471.652069][T19826] do_syscall_64+0x4c/0xa0 [ 471.656526][T19826] ? clear_bhb_loop+0x30/0x80 [ 471.661228][T19826] ? clear_bhb_loop+0x30/0x80 [ 471.665934][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.671938][T19826] RIP: 0033:0x7fb5dfb9e199 [ 471.676379][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.696015][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.704455][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 471.712454][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 471.720475][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 471.728476][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.736506][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 471.744505][T19826] [ 471.747541][T19826] ---[ end trace 0000000000000000 ]--- [ 471.764595][T19826] ------------[ cut here ]------------ [ 471.770086][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 471.780451][T19826] Modules linked in: [ 471.784367][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 471.793362][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 471.803439][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 471.809279][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 471.828911][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 471.834994][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 471.842974][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 471.850957][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 471.858958][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 471.866943][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 471.874925][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 471.883864][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.890461][T19826] CR2: 000055b518f32300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 471.898465][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.906450][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.914538][T19826] Call Trace: [ 471.917828][T19826] [ 471.920774][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 471.926429][T19826] ? __kasan_check_write+0x14/0x20 [ 471.931559][T19826] ? _raw_spin_lock+0x94/0xf0 [ 471.936256][T19826] rb_buffer_peek+0x5f/0x930 [ 471.940859][T19826] ring_buffer_consume+0x1aa/0x370 [ 471.945985][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 471.951634][T19826] ? print_trace_line+0x393/0x6b0 [ 471.956669][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 471.961629][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 471.967100][T19826] vfs_read+0x286/0x930 [ 471.971285][T19826] ? __cfi_vfs_read+0x10/0x10 [ 471.975976][T19826] ? __kasan_check_write+0x14/0x20 [ 471.981101][T19826] ? mutex_lock+0x93/0x1b0 [ 471.985555][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 471.990423][T19826] ? __fdget_pos+0x2cd/0x380 [ 471.995030][T19826] ? ksys_read+0x70/0x260 [ 471.999376][T19826] ksys_read+0x14a/0x260 [ 472.003630][T19826] ? __cfi_ksys_read+0x10/0x10 [ 472.008404][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 472.014058][T19826] __x64_sys_read+0x7b/0x90 [ 472.018571][T19826] x64_sys_call+0x2f/0x9a0 [ 472.023006][T19826] do_syscall_64+0x4c/0xa0 [ 472.027447][T19826] ? clear_bhb_loop+0x30/0x80 [ 472.032135][T19826] ? clear_bhb_loop+0x30/0x80 [ 472.036827][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.042736][T19826] RIP: 0033:0x7fb5dfb9e199 [ 472.047163][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.066779][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.075204][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 472.083187][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 472.091173][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 472.099157][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.107135][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 472.115122][T19826] [ 472.118145][T19826] ---[ end trace 0000000000000000 ]--- [ 472.123659][T19826] ------------[ cut here ]------------ [ 472.129113][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 472.139462][T19826] Modules linked in: [ 472.143368][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 472.152328][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.162395][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 472.168216][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 472.187843][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 472.193926][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 472.201917][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 472.209997][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 472.217995][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 472.225980][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 472.233969][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 472.242917][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.249517][T19826] CR2: 000055b518f32300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 472.257508][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.265493][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.273473][T19826] Call Trace: [ 472.276762][T19826] [ 472.279713][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 472.285376][T19826] rb_advance_reader+0x2b/0x770 [ 472.290239][T19826] ring_buffer_consume+0x1e7/0x370 [ 472.295377][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 472.301020][T19826] ? print_trace_line+0x393/0x6b0 [ 472.306057][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 472.311014][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 472.316494][T19826] vfs_read+0x286/0x930 [ 472.320667][T19826] ? __cfi_vfs_read+0x10/0x10 [ 472.325354][T19826] ? __kasan_check_write+0x14/0x20 [ 472.330500][T19826] ? mutex_lock+0x93/0x1b0 [ 472.334933][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 472.339802][T19826] ? __fdget_pos+0x2cd/0x380 [ 472.344408][T19826] ? ksys_read+0x70/0x260 [ 472.348749][T19826] ksys_read+0x14a/0x260 [ 472.353001][T19826] ? __cfi_ksys_read+0x10/0x10 [ 472.357780][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 472.363427][T19826] __x64_sys_read+0x7b/0x90 [ 472.367941][T19826] x64_sys_call+0x2f/0x9a0 [ 472.372377][T19826] do_syscall_64+0x4c/0xa0 [ 472.376812][T19826] ? clear_bhb_loop+0x30/0x80 [ 472.381520][T19826] ? clear_bhb_loop+0x30/0x80 [ 472.386231][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.392145][T19826] RIP: 0033:0x7fb5dfb9e199 [ 472.396574][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.416211][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.424681][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 472.432676][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 472.440668][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 472.448654][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.456649][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 472.464667][T19826] [ 472.467702][T19826] ---[ end trace 0000000000000000 ]--- [ 472.806537][T19826] ------------[ cut here ]------------ [ 472.812061][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 472.822474][T19826] Modules linked in: [ 472.826447][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 472.835428][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.845509][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 472.851357][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 472.870997][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 472.877127][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 472.885122][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 472.893119][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 472.901118][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 472.909125][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 472.917125][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 472.926080][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.932689][T19826] CR2: 000055d3e0ef4300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 472.940691][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.948898][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.956900][T19826] Call Trace: [ 472.960204][T19826] [ 472.963194][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 472.968789][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 472.974457][T19826] ? __schedule+0xcbb/0x1700 [ 472.979089][T19826] ? __kasan_check_write+0x14/0x20 [ 472.984275][T19826] ? _raw_spin_lock+0x94/0xf0 [ 472.988997][T19826] rb_buffer_peek+0x5f/0x930 [ 472.993636][T19826] ring_buffer_peek+0x184/0x3b0 [ 472.998540][T19826] ? __kasan_check_read+0x11/0x20 [ 473.003603][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 473.009012][T19826] ? _find_next_bit+0x8a/0x130 [ 473.013812][T19826] __find_next_entry+0x33c/0x6c0 [ 473.018790][T19826] ? trace_find_next_entry+0x380/0x380 [ 473.024299][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 473.029966][T19826] ? print_trace_line+0x393/0x6b0 [ 473.035031][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 473.040010][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 473.045514][T19826] vfs_read+0x286/0x930 [ 473.049711][T19826] ? __cfi_vfs_read+0x10/0x10 [ 473.054420][T19826] ? __kasan_check_write+0x14/0x20 [ 473.059563][T19826] ? mutex_lock+0x93/0x1b0 [ 473.064039][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 473.068921][T19826] ? __fdget_pos+0x2cd/0x380 [ 473.073543][T19826] ? ksys_read+0x70/0x260 [ 473.077906][T19826] ksys_read+0x14a/0x260 [ 473.082177][T19826] ? __cfi_ksys_read+0x10/0x10 [ 473.086973][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 473.092647][T19826] __x64_sys_read+0x7b/0x90 [ 473.097184][T19826] x64_sys_call+0x2f/0x9a0 [ 473.101637][T19826] do_syscall_64+0x4c/0xa0 [ 473.106098][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.110808][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.115523][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.121446][T19826] RIP: 0033:0x7fb5dfb9e199 [ 473.125908][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.145546][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.153996][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 473.162006][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 473.170018][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 473.178019][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.186019][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 473.194054][T19826] [ 473.197108][T19826] ---[ end trace 0000000000000000 ]--- [ 473.218134][T19826] ------------[ cut here ]------------ [ 473.223643][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 473.234011][T19826] Modules linked in: [ 473.237933][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 473.246898][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.256974][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 473.262824][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 473.282463][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 473.288571][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 473.296571][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 473.304569][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 473.312611][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 473.320627][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 473.328804][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 473.337767][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.344409][T19826] CR2: 00007f23610cc368 CR3: 0000000159019000 CR4: 00000000003526a0 [ 473.352415][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.360422][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.368455][T19826] Call Trace: [ 473.371760][T19826] [ 473.374728][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 473.380399][T19826] ? __kasan_check_write+0x14/0x20 [ 473.385563][T19826] ? _raw_spin_lock+0x94/0xf0 [ 473.390281][T19826] rb_buffer_peek+0x5f/0x930 [ 473.394909][T19826] ring_buffer_consume+0x1aa/0x370 [ 473.400049][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 473.405718][T19826] ? print_trace_line+0x393/0x6b0 [ 473.410773][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 473.415751][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 473.421247][T19826] vfs_read+0x286/0x930 [ 473.425445][T19826] ? __cfi_vfs_read+0x10/0x10 [ 473.430147][T19826] ? __kasan_check_write+0x14/0x20 [ 473.435293][T19826] ? mutex_lock+0x93/0x1b0 [ 473.439739][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 473.444620][T19826] ? __fdget_pos+0x2cd/0x380 [ 473.449244][T19826] ? ksys_read+0x70/0x260 [ 473.453601][T19826] ksys_read+0x14a/0x260 [ 473.457874][T19826] ? __cfi_ksys_read+0x10/0x10 [ 473.462678][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 473.468348][T19826] __x64_sys_read+0x7b/0x90 [ 473.472886][T19826] x64_sys_call+0x2f/0x9a0 [ 473.477343][T19826] do_syscall_64+0x4c/0xa0 [ 473.481886][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.486600][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.491316][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.497271][T19826] RIP: 0033:0x7fb5dfb9e199 [ 473.501719][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.521353][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.529816][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 473.537820][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 473.545859][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 473.553858][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.561859][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 473.569882][T19826] [ 473.572943][T19826] ---[ end trace 0000000000000000 ]--- [ 473.578482][T19826] ------------[ cut here ]------------ [ 473.583954][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 473.594314][T19826] Modules linked in: [ 473.598240][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 473.607291][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.617373][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 473.623206][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 473.642829][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 473.648927][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 473.656973][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 473.664961][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 473.672972][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 473.680962][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 473.688953][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 473.697901][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.704500][T19826] CR2: 00007f23610cc368 CR3: 0000000159019000 CR4: 00000000003526a0 [ 473.712520][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.720509][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.728523][T19826] Call Trace: [ 473.731815][T19826] [ 473.734766][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 473.740418][T19826] rb_advance_reader+0x2b/0x770 [ 473.745288][T19826] ring_buffer_consume+0x1e7/0x370 [ 473.750416][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 473.756065][T19826] ? print_trace_line+0x393/0x6b0 [ 473.761102][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 473.766064][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 473.771539][T19826] vfs_read+0x286/0x930 [ 473.775710][T19826] ? __cfi_vfs_read+0x10/0x10 [ 473.780399][T19826] ? __kasan_check_write+0x14/0x20 [ 473.785532][T19826] ? mutex_lock+0x93/0x1b0 [ 473.789969][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 473.794842][T19826] ? __fdget_pos+0x2cd/0x380 [ 473.799458][T19826] ? ksys_read+0x70/0x260 [ 473.803834][T19826] ksys_read+0x14a/0x260 [ 473.808098][T19826] ? __cfi_ksys_read+0x10/0x10 [ 473.812903][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 473.818557][T19826] __x64_sys_read+0x7b/0x90 [ 473.823075][T19826] x64_sys_call+0x2f/0x9a0 [ 473.827509][T19826] do_syscall_64+0x4c/0xa0 [ 473.831946][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.836642][T19826] ? clear_bhb_loop+0x30/0x80 [ 473.841335][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.847249][T19826] RIP: 0033:0x7fb5dfb9e199 [ 473.851709][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.871331][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.879763][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 473.887755][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 473.895770][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 473.903847][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.911838][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 473.919948][T19826] [ 473.922979][T19826] ---[ end trace 0000000000000000 ]--- [ 474.799854][T19826] ------------[ cut here ]------------ [ 474.805368][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 474.815748][T19826] Modules linked in: [ 474.819675][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 474.828636][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 474.838720][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 474.844576][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 474.864223][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 474.870332][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 474.878334][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 474.886338][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 474.894339][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 474.902344][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 474.910355][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 474.919328][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.925944][T19826] CR2: 00007efe18a60286 CR3: 0000000159019000 CR4: 00000000003526a0 [ 474.933960][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.941971][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.949987][T19826] Call Trace: [ 474.953303][T19826] [ 474.956269][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 474.961868][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 474.967535][T19826] ? __schedule+0xcbb/0x1700 [ 474.972169][T19826] ? __kasan_check_write+0x14/0x20 [ 474.977322][T19826] ? _raw_spin_lock+0x94/0xf0 [ 474.982047][T19826] rb_buffer_peek+0x5f/0x930 [ 474.986677][T19826] ring_buffer_peek+0x184/0x3b0 [ 474.991567][T19826] ? __kasan_check_read+0x11/0x20 [ 474.996635][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 475.002041][T19826] ? _find_next_bit+0x8a/0x130 [ 475.006848][T19826] __find_next_entry+0x33c/0x6c0 [ 475.011837][T19826] ? trace_find_next_entry+0x380/0x380 [ 475.017346][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 475.023016][T19826] ? print_trace_line+0x393/0x6b0 [ 475.028120][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 475.033101][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 475.038605][T19826] vfs_read+0x286/0x930 [ 475.042798][T19826] ? __cfi_vfs_read+0x10/0x10 [ 475.047510][T19826] ? __kasan_check_write+0x14/0x20 [ 475.052660][T19826] ? mutex_lock+0x93/0x1b0 [ 475.057108][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 475.062003][T19826] ? __fdget_pos+0x2cd/0x380 [ 475.066640][T19826] ? ksys_read+0x70/0x260 [ 475.071007][T19826] ksys_read+0x14a/0x260 [ 475.075284][T19826] ? __cfi_ksys_read+0x10/0x10 [ 475.080085][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 475.085758][T19826] __x64_sys_read+0x7b/0x90 [ 475.090294][T19826] x64_sys_call+0x2f/0x9a0 [ 475.094751][T19826] do_syscall_64+0x4c/0xa0 [ 475.099211][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.103925][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.108647][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.114575][T19826] RIP: 0033:0x7fb5dfb9e199 [ 475.119023][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.138662][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.147113][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 475.155126][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 475.163129][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 475.171134][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.179139][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 475.187154][T19826] [ 475.190207][T19826] ---[ end trace 0000000000000000 ]--- [ 475.261249][T19826] ------------[ cut here ]------------ [ 475.266852][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 475.277232][T19826] Modules linked in: [ 475.281152][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 475.290118][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 475.300212][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 475.306058][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 475.325701][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 475.331842][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 475.339847][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 475.347856][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 475.355866][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 475.363884][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 475.371891][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 475.380859][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.387476][T19826] CR2: 0000558f7c019300 CR3: 0000000159019000 CR4: 00000000003526b0 [ 475.395480][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 475.403487][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.411495][T19826] Call Trace: [ 475.414798][T19826] [ 475.417764][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 475.423435][T19826] ? __kasan_check_write+0x14/0x20 [ 475.428583][T19826] ? _raw_spin_lock+0x94/0xf0 [ 475.433305][T19826] rb_buffer_peek+0x5f/0x930 [ 475.437927][T19826] ring_buffer_consume+0x1aa/0x370 [ 475.443083][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 475.448756][T19826] ? print_trace_line+0x393/0x6b0 [ 475.453811][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 475.458785][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 475.464278][T19826] vfs_read+0x286/0x930 [ 475.468467][T19826] ? __cfi_vfs_read+0x10/0x10 [ 475.473172][T19826] ? __kasan_check_write+0x14/0x20 [ 475.478307][T19826] ? mutex_lock+0x93/0x1b0 [ 475.482759][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 475.487644][T19826] ? __fdget_pos+0x2cd/0x380 [ 475.492263][T19826] ? ksys_read+0x70/0x260 [ 475.496620][T19826] ksys_read+0x14a/0x260 [ 475.500891][T19826] ? __cfi_ksys_read+0x10/0x10 [ 475.505692][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 475.511359][T19826] __x64_sys_read+0x7b/0x90 [ 475.515891][T19826] x64_sys_call+0x2f/0x9a0 [ 475.520339][T19826] do_syscall_64+0x4c/0xa0 [ 475.524843][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.529560][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.534279][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.540208][T19826] RIP: 0033:0x7fb5dfb9e199 [ 475.544659][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.564315][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.572767][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 475.580776][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 475.588777][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 475.596777][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.604821][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 475.612913][T19826] [ 475.615958][T19826] ---[ end trace 0000000000000000 ]--- [ 475.621514][T19826] ------------[ cut here ]------------ [ 475.626988][T19826] WARNING: CPU: 0 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 475.637356][T19826] Modules linked in: [ 475.641276][T19826] CPU: 0 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 475.650242][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 475.660327][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 475.666177][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 475.685819][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 475.691924][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 475.699921][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 475.707922][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 475.715950][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 475.723950][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 475.731952][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 475.740918][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.747530][T19826] CR2: 0000558f7c019300 CR3: 0000000159019000 CR4: 00000000003526b0 [ 475.755539][T19826] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 475.763538][T19826] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.771544][T19826] Call Trace: [ 475.774841][T19826] [ 475.777801][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 475.783519][T19826] rb_advance_reader+0x2b/0x770 [ 475.788420][T19826] ring_buffer_consume+0x1e7/0x370 [ 475.793569][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 475.799235][T19826] ? print_trace_line+0x393/0x6b0 [ 475.804297][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 475.809303][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 475.814798][T19826] vfs_read+0x286/0x930 [ 475.818998][T19826] ? __cfi_vfs_read+0x10/0x10 [ 475.823712][T19826] ? __kasan_check_write+0x14/0x20 [ 475.828864][T19826] ? mutex_lock+0x93/0x1b0 [ 475.833317][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 475.838200][T19826] ? __fdget_pos+0x2cd/0x380 [ 475.842826][T19826] ? ksys_read+0x70/0x260 [ 475.847196][T19826] ksys_read+0x14a/0x260 [ 475.851468][T19826] ? __cfi_ksys_read+0x10/0x10 [ 475.856275][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 475.861950][T19826] __x64_sys_read+0x7b/0x90 [ 475.866490][T19826] x64_sys_call+0x2f/0x9a0 [ 475.870952][T19826] do_syscall_64+0x4c/0xa0 [ 475.875408][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.880123][T19826] ? clear_bhb_loop+0x30/0x80 [ 475.884840][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.890768][T19826] RIP: 0033:0x7fb5dfb9e199 [ 475.895218][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.915039][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.923492][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 475.931502][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 475.939509][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 475.947510][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.955508][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 475.963518][T19826] [ 475.966574][T19826] ---[ end trace 0000000000000000 ]--- [ 475.979574][T19826] ------------[ cut here ]------------ [ 475.985073][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 475.995453][T19826] Modules linked in: [ 475.999379][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 476.008427][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 476.018517][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 476.024372][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 476.044047][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 476.050155][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 476.058204][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 476.066206][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 476.074217][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 476.082310][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 476.090328][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 476.099298][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.105920][T19826] CR2: 00007f72bc2f3a90 CR3: 0000000159019000 CR4: 00000000003526a0 [ 476.113933][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.121942][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.129946][T19826] Call Trace: [ 476.133274][T19826] [ 476.136238][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 476.141875][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 476.147560][T19826] ? __schedule+0xcbb/0x1700 [ 476.152206][T19826] ? __kasan_check_write+0x14/0x20 [ 476.157352][T19826] ? _raw_spin_lock+0x94/0xf0 [ 476.162090][T19826] rb_buffer_peek+0x5f/0x930 [ 476.166755][T19826] ring_buffer_peek+0x184/0x3b0 [ 476.171647][T19826] ? __kasan_check_read+0x11/0x20 [ 476.176753][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 476.182171][T19826] ? _find_next_bit+0x8a/0x130 [ 476.187007][T19826] __find_next_entry+0x33c/0x6c0 [ 476.191994][T19826] ? trace_find_next_entry+0x380/0x380 [ 476.197501][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 476.203179][T19826] ? print_trace_line+0x393/0x6b0 [ 476.208239][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 476.213220][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 476.218718][T19826] vfs_read+0x286/0x930 [ 476.222917][T19826] ? __cfi_vfs_read+0x10/0x10 [ 476.227637][T19826] ? __kasan_check_write+0x14/0x20 [ 476.232835][T19826] ? mutex_lock+0x93/0x1b0 [ 476.237340][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 476.242235][T19826] ? __fdget_pos+0x2cd/0x380 [ 476.246873][T19826] ? ksys_read+0x70/0x260 [ 476.251241][T19826] ksys_read+0x14a/0x260 [ 476.255517][T19826] ? __cfi_ksys_read+0x10/0x10 [ 476.260319][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 476.265999][T19826] __x64_sys_read+0x7b/0x90 [ 476.270545][T19826] x64_sys_call+0x2f/0x9a0 [ 476.275010][T19826] do_syscall_64+0x4c/0xa0 [ 476.279474][T19826] ? clear_bhb_loop+0x30/0x80 [ 476.284197][T19826] ? clear_bhb_loop+0x30/0x80 [ 476.288909][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.294844][T19826] RIP: 0033:0x7fb5dfb9e199 [ 476.299293][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.318944][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.327395][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 476.335412][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 476.343413][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 476.351419][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.359423][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 476.367434][T19826] [ 476.370482][T19826] ---[ end trace 0000000000000000 ]--- [ 476.380518][T19826] ------------[ cut here ]------------ [ 476.386065][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 476.396436][T19826] Modules linked in: [ 476.400358][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 476.409326][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 476.419406][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 476.425249][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 476.444886][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010012 [ 476.451015][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 476.459044][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 476.467042][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 476.475038][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 476.483027][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 476.491019][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 476.499964][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.506560][T19826] CR2: 00007f72bc2f3a90 CR3: 0000000159019000 CR4: 00000000003526a0 [ 476.514549][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.522541][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.530529][T19826] Call Trace: [ 476.533824][T19826] [ 476.536778][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 476.542437][T19826] ? __kasan_check_write+0x14/0x20 [ 476.547691][T19826] ? _raw_spin_lock+0x94/0xf0 [ 476.552405][T19826] rb_buffer_peek+0x5f/0x930 [ 476.557020][T19826] ring_buffer_consume+0x1aa/0x370 [ 476.562154][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 476.567812][T19826] ? print_trace_line+0x393/0x6b0 [ 476.572903][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 476.577875][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 476.583355][T19826] vfs_read+0x286/0x930 [ 476.587531][T19826] ? __cfi_vfs_read+0x10/0x10 [ 476.592308][T19826] ? __kasan_check_write+0x14/0x20 [ 476.597441][T19826] ? mutex_lock+0x93/0x1b0 [ 476.601875][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 476.606740][T19826] ? __fdget_pos+0x2cd/0x380 [ 476.611359][T19826] ? ksys_read+0x70/0x260 [ 476.615722][T19826] ksys_read+0x14a/0x260 [ 476.620013][T19826] ? __cfi_ksys_read+0x10/0x10 [ 476.624792][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 476.630446][T19826] __x64_sys_read+0x7b/0x90 [ 476.634969][T19826] x64_sys_call+0x2f/0x9a0 [ 476.639406][T19826] do_syscall_64+0x4c/0xa0 [ 476.643859][T19826] ? clear_bhb_loop+0x30/0x80 [ 476.648572][T19826] ? clear_bhb_loop+0x30/0x80 [ 476.653266][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.659175][T19826] RIP: 0033:0x7fb5dfb9e199 [ 476.663607][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.683247][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.691679][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 476.699677][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 476.707783][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 476.715773][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.723770][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 476.731770][T19826] [ 476.734807][T19826] ---[ end trace 0000000000000000 ]--- [ 476.740324][T19826] ------------[ cut here ]------------ [ 476.745789][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 476.756141][T19826] Modules linked in: [ 476.760056][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 476.769032][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 476.779100][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 476.784924][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 476.804543][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 476.810627][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 476.818617][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 476.826608][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 476.834592][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 476.842578][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 476.850568][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 476.859514][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.866117][T19826] CR2: 00007f72bc2f3a90 CR3: 0000000159019000 CR4: 00000000003526a0 [ 476.874110][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.882098][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.890117][T19826] Call Trace: [ 476.893411][T19826] [ 476.896367][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 476.902023][T19826] rb_advance_reader+0x2b/0x770 [ 476.906895][T19826] ring_buffer_consume+0x1e7/0x370 [ 476.912023][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 476.917673][T19826] ? print_trace_line+0x393/0x6b0 [ 476.922718][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 476.927681][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 476.933161][T19826] vfs_read+0x286/0x930 [ 476.937339][T19826] ? __cfi_vfs_read+0x10/0x10 [ 476.942045][T19826] ? __kasan_check_write+0x14/0x20 [ 476.947181][T19826] ? mutex_lock+0x93/0x1b0 [ 476.951631][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 476.956506][T19826] ? __fdget_pos+0x2cd/0x380 [ 476.961117][T19826] ? ksys_read+0x70/0x260 [ 476.965463][T19826] ksys_read+0x14a/0x260 [ 476.969724][T19826] ? __cfi_ksys_read+0x10/0x10 [ 476.974509][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 476.980160][T19826] __x64_sys_read+0x7b/0x90 [ 476.984685][T19826] x64_sys_call+0x2f/0x9a0 [ 476.989125][T19826] do_syscall_64+0x4c/0xa0 [ 476.993570][T19826] ? clear_bhb_loop+0x30/0x80 [ 476.998269][T19826] ? clear_bhb_loop+0x30/0x80 [ 477.002969][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.008883][T19826] RIP: 0033:0x7fb5dfb9e199 [ 477.013319][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.032938][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.041370][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 477.049360][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 477.057351][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 477.065381][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.073371][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 477.081370][T19826] [ 477.084404][T19826] ---[ end trace 0000000000000000 ]--- [ 477.112637][T19826] ------------[ cut here ]------------ [ 477.118154][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 477.128524][T19826] Modules linked in: [ 477.132446][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 477.141412][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.151510][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 477.157362][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 477.177006][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010006 [ 477.183118][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 477.191128][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 477.199152][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 477.207161][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 477.215169][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 477.223180][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 477.232154][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.238779][T19826] CR2: 000056009cefe300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 477.246786][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.254788][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.262788][T19826] Call Trace: [ 477.266091][T19826] [ 477.269046][T19826] ? __this_cpu_preempt_check+0x13/0x20 [ 477.274646][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 477.280333][T19826] ? __schedule+0xcbb/0x1700 [ 477.285031][T19826] ? __kasan_check_write+0x14/0x20 [ 477.290192][T19826] ? _raw_spin_lock+0x94/0xf0 [ 477.294919][T19826] rb_buffer_peek+0x5f/0x930 [ 477.299549][T19826] ring_buffer_peek+0x184/0x3b0 [ 477.304434][T19826] ? __kasan_check_read+0x11/0x20 [ 477.309498][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 477.314901][T19826] ? _find_next_bit+0x8a/0x130 [ 477.319709][T19826] __find_next_entry+0x33c/0x6c0 [ 477.324703][T19826] ? trace_find_next_entry+0x380/0x380 [ 477.330215][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 477.335891][T19826] ? print_trace_line+0x393/0x6b0 [ 477.340954][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 477.345983][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 477.351498][T19826] vfs_read+0x286/0x930 [ 477.355707][T19826] ? __cfi_vfs_read+0x10/0x10 [ 477.360417][T19826] ? __kasan_check_write+0x14/0x20 [ 477.365565][T19826] ? mutex_lock+0x93/0x1b0 [ 477.370018][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 477.374927][T19826] ? __fdget_pos+0x2cd/0x380 [ 477.379545][T19826] ? ksys_read+0x70/0x260 [ 477.383906][T19826] ksys_read+0x14a/0x260 [ 477.388186][T19826] ? __cfi_ksys_read+0x10/0x10 [ 477.392991][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 477.398672][T19826] __x64_sys_read+0x7b/0x90 [ 477.403220][T19826] x64_sys_call+0x2f/0x9a0 [ 477.407673][T19826] do_syscall_64+0x4c/0xa0 [ 477.412131][T19826] ? clear_bhb_loop+0x30/0x80 [ 477.416852][T19826] ? clear_bhb_loop+0x30/0x80 [ 477.421579][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.427597][T19826] RIP: 0033:0x7fb5dfb9e199 [ 477.432047][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.451706][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.460162][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 477.468173][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 477.476176][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 477.484177][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.492176][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 477.500199][T19826] [ 477.503249][T19826] ---[ end trace 0000000000000000 ]--- [ 477.532226][T19826] ------------[ cut here ]------------ [ 477.537737][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 477.548317][T19826] Modules linked in: [ 477.552242][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 477.561203][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.571320][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 477.577168][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 477.596983][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010002 [ 477.603094][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 477.611104][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 477.619111][T19826] RBP: ffffc90000a67ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 477.627123][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 477.635204][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 477.643232][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 477.652207][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.658834][T19826] CR2: 000056009cefe300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 477.666860][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.674865][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.682941][T19826] Call Trace: [ 477.686260][T19826] [ 477.689231][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 477.694911][T19826] ? __kasan_check_write+0x14/0x20 [ 477.700072][T19826] ? _raw_spin_lock+0x94/0xf0 [ 477.704801][T19826] rb_buffer_peek+0x5f/0x930 [ 477.709435][T19826] ring_buffer_consume+0x1aa/0x370 [ 477.714590][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 477.720272][T19826] ? print_trace_line+0x393/0x6b0 [ 477.725340][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 477.730332][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 477.735840][T19826] vfs_read+0x286/0x930 [ 477.740045][T19826] ? __cfi_vfs_read+0x10/0x10 [ 477.744772][T19826] ? __kasan_check_write+0x14/0x20 [ 477.749932][T19826] ? mutex_lock+0x93/0x1b0 [ 477.754394][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 477.759292][T19826] ? __fdget_pos+0x2cd/0x380 [ 477.763930][T19826] ? ksys_read+0x70/0x260 [ 477.768302][T19826] ksys_read+0x14a/0x260 [ 477.772594][T19826] ? __cfi_ksys_read+0x10/0x10 [ 477.777399][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 477.783094][T19826] __x64_sys_read+0x7b/0x90 [ 477.787651][T19826] x64_sys_call+0x2f/0x9a0 [ 477.792113][T19826] do_syscall_64+0x4c/0xa0 [ 477.796589][T19826] ? clear_bhb_loop+0x30/0x80 [ 477.801311][T19826] ? clear_bhb_loop+0x30/0x80 [ 477.806031][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.811994][T19826] RIP: 0033:0x7fb5dfb9e199 [ 477.816455][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.836127][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.844589][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 477.852611][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 477.860628][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 477.868670][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.876676][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 477.884696][T19826] [ 477.887752][T19826] ---[ end trace 0000000000000000 ]--- [ 477.893331][T19826] ------------[ cut here ]------------ [ 477.898815][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 477.909198][T19826] Modules linked in: [ 477.913129][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 477.922195][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.932390][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 477.938249][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 477.957899][T19826] RSP: 0018:ffffc90000a67940 EFLAGS: 00010006 [ 477.964015][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 477.972092][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 477.980107][T19826] RBP: ffffc90000a67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 477.988127][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 477.996143][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 478.004154][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 478.013137][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.019770][T19826] CR2: 000056009cefe300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 478.027801][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.035812][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.043809][T19826] Call Trace: [ 478.047114][T19826] [ 478.050077][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 478.055747][T19826] rb_advance_reader+0x2b/0x770 [ 478.060643][T19826] ring_buffer_consume+0x1e7/0x370 [ 478.065787][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 478.071457][T19826] ? print_trace_line+0x393/0x6b0 [ 478.076516][T19826] tracing_read_pipe+0x5b3/0xaf0 [ 478.081509][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 478.087092][T19826] vfs_read+0x286/0x930 [ 478.091283][T19826] ? __cfi_vfs_read+0x10/0x10 [ 478.096006][T19826] ? __kasan_check_write+0x14/0x20 [ 478.101432][T19826] ? mutex_lock+0x93/0x1b0 [ 478.105919][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 478.110801][T19826] ? __fdget_pos+0x2cd/0x380 [ 478.115421][T19826] ? ksys_read+0x70/0x260 [ 478.119781][T19826] ksys_read+0x14a/0x260 [ 478.124051][T19826] ? __cfi_ksys_read+0x10/0x10 [ 478.128844][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 478.134511][T19826] __x64_sys_read+0x7b/0x90 [ 478.139045][T19826] x64_sys_call+0x2f/0x9a0 [ 478.143494][T19826] do_syscall_64+0x4c/0xa0 [ 478.147958][T19826] ? clear_bhb_loop+0x30/0x80 [ 478.152683][T19826] ? clear_bhb_loop+0x30/0x80 [ 478.157399][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.163335][T19826] RIP: 0033:0x7fb5dfb9e199 [ 478.167789][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.187446][T19826] RSP: 002b:00007fb5e0a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.195895][T19826] RAX: ffffffffffffffda RBX: 00007fb5dfe25fa0 RCX: 00007fb5dfb9e199 [ 478.203904][T19826] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000008 [ 478.211920][T19826] RBP: 00007fb5dfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 478.219987][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.227999][T19826] R13: 00007fb5dfe26038 R14: 00007fb5dfe25fa0 R15: 00007ffdd2ddb4b8 [ 478.236035][T19826] [ 478.239086][T19826] ---[ end trace 0000000000000000 ]--- [ 478.271259][T19826] ------------[ cut here ]------------ [ 478.276801][T19826] WARNING: CPU: 1 PID: 19826 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 478.287186][T19826] Modules linked in: [ 478.291112][T19826] CPU: 1 PID: 19826 Comm: syz.9.1864 Tainted: G B W syzkaller #0 [ 478.300080][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.310173][T19826] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 478.316027][T19826] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 2f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 ba 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 478.335665][T19826] RSP: 0018:ffffc90000a67820 EFLAGS: 00010002 [ 478.341765][T19826] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 478.349773][T19826] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 478.357761][T19826] RBP: ffffc90000a67990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 478.365748][T19826] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 478.373744][T19826] R13: 1ffff11020073f66 R14: 1ffff11020073f63 R15: 0000000000000ff0 [ 478.381739][T19826] FS: 00007fb5e0a936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 478.390698][T19826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.397332][T19826] CR2: 000056009cefe300 CR3: 0000000159019000 CR4: 00000000003526a0 [ 478.405333][T19826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.413327][T19826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.421324][T19826] Call Trace: [ 478.424651][T19826] [ 478.427605][T19826] ? ring_buffer_read_page+0x1260/0x1260 [ 478.433266][T19826] ? __schedule+0xcbb/0x1700 [ 478.437882][T19826] ? __kasan_check_write+0x14/0x20 [ 478.443008][T19826] ? _raw_spin_lock+0x94/0xf0 [ 478.447728][T19826] rb_buffer_peek+0x5f/0x930 [ 478.452439][T19826] ring_buffer_peek+0x184/0x3b0 [ 478.457337][T19826] ? __kasan_check_read+0x11/0x20 [ 478.462398][T19826] ? __cfi_ring_buffer_peek+0x10/0x10 [ 478.467799][T19826] ? _find_next_bit+0x8a/0x130 [ 478.472585][T19826] __find_next_entry+0x33c/0x6c0 [ 478.477565][T19826] ? trace_find_next_entry+0x380/0x380 [ 478.483050][T19826] ? __cfi_ring_buffer_consume+0x10/0x10 [ 478.488701][T19826] ? print_trace_line+0x393/0x6b0 [ 478.493738][T19826] tracing_read_pipe+0x3d2/0xaf0 [ 478.498709][T19826] ? __cfi_tracing_read_pipe+0x10/0x10 [ 478.504277][T19826] vfs_read+0x286/0x930 [ 478.508451][T19826] ? __cfi_vfs_read+0x10/0x10 [ 478.513144][T19826] ? __kasan_check_write+0x14/0x20 [ 478.518272][T19826] ? mutex_lock+0x93/0x1b0 [ 478.522703][T19826] ? __cfi_mutex_lock+0x10/0x10 [ 478.527571][T19826] ? __fdget_pos+0x2cd/0x380 [ 478.532206][T19826] ? ksys_read+0x70/0x260 [ 478.536562][T19826] ksys_read+0x14a/0x260 [ 478.540850][T19826] ? __cfi_ksys_read+0x10/0x10 [ 478.545631][T19826] ? fpregs_restore_userregs+0x128/0x260 [ 478.551292][T19826] __x64_sys_read+0x7b/0x90 [ 478.555815][T19826] x64_sys_call+0x2f/0x9a0 [ 478.560260][T19826] do_syscall_64+0x4c/0xa0 [ 478.564707][T19826] ? clear_bhb_loop+0x30/0x80 [ 478.569408][T19826] ? clear_bhb_loop+0x30/0x80 [ 478.574112][T19826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.580026][T19826] RIP: 0033:0x7fb5dfb9e199