last executing test programs: 8.405343655s ago: executing program 2 (id=68): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005900)={[{@noinline_xattr}, {@heap}, {@discard}, {@noextent_cache}, {@age_extent_cache}, {@user_xattr}, {@noinline_xattr}, {@fastboot}, {@block_mode}, {@errors_remount}]}, 0x21, 0x5541, &(0x7f00000059c0)="$eJzs3EtvG1UYBuDPSdPSCyVCLNh1UIWUSLVVpxfBrkArrq2qAgtW4Niu5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskECeM+kFqIQUJ67b55HG78zx8TfnjJJIZyZyAE+t5eyP3ypxOo5HxGJEnIoo9ivlVriS4sWIOBMRCw9slbL9XsPRiDgREacnxVPNSvnWV+fGZy/9+s7v3/947MjJr7/7aXazBmbt5Yjob6T97X7KvJPyTtneGHeL7F8cl5ne6N8tj/OU2+31osJ2Y69fo8gLndQ/39gaTvJ2r9GcZKd7u2jfGKQTDsedvTrFB+40NovjVnu9yO4wL7Kzm8a1s5v+tu0OR6lOq6z3aVE+RqO9TO3tnXaaz8bdIpuDUdme6uat9s4kx2WWp4tm3msV41jfz5V+rL30XnewtZON25vDbj7ILtXqr9Tql6v1zbzVHrUvVhv91uWL2UqnN+lWHbUb/SudPO/02rVm3l/NVjrNZrVez1autte7jUFWr9cu1M5XL62We+eyN298mPVa2cokX+8Otkbd3jC7nW9m6ROr2Vrtwqur2dl69v71m9nNW9euXb/5wcdXP7rx2vW33yg7/WtY2cra+bW1av18da2+ur8LMFfz/7wc9BTnD/tSmfUAAOaP9T8wCwe3/t+8FXHw6/+w/p+KuVr/Pt7r/8Wy5FzNH/bF+h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kn189I3bxU7y+n4ZNn+bNn0fHlciYiFiPjrPyzG0YdqLpZ1lh7Rf+kfY/ihEkWFyTmOlduJiLhSbn8+d9BXAQAAAJ5c33525su0Wk8vy7MeEIcp3bRZOPXJlOpVImJp+ZcpVVuYvLwwpWLFz/eR2JlSteIG1jNTKpZuuR2ZVrX/pfh1fzfFvZkUUUmxcL/v0Qf7AAAAc2zxoTjcVQgAAACH6YtHvnP3UMfBIavE3qPMvYd8xX/e33/Ydzwde/QHAAAA86sy6wEAAAAAB65Y//v+PwAAAHiype//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPibnXu5URuI4wD8t8GBvBQU5Z4ycs0Nysg9lxxzjCggTVACaSENUAO5pYQVrPB40bJiH+Ax1q6+T7LHtuyfZ3gcZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC69K9azv78+vy7bc5m206e1gAAAADHrKvlrD6YpPO3zfX3zaWPzXkREWVEHOu7D+LVQeagyanuub+6U4e/EXXC7h2jZnsTEV/Tto0PXX8KAAAA8CINd7vVfDFNvfW0m/RdK1o74TtMgzblu2+ZXl1ERDX5nymt3OV9yhRW/76H8TNTWj2ANc4UlobchrnSnqT+u+9H7ca3iiIV5cPPZ2s7AABwQYOD4rK9EAAAAC7pR98VoAuvH72jiJupzP1U4CgV44MIk30AAADwfBV9VwAAAADoXN3/P2X9v+hn/b+4sv4fAAAAnC2t/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX1tVytpovpmc+/v1Lc7DZtpOxSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXM/r3FUcQDA38zsbH9oMUbJISIKHvRi021t7U08KMGDf4IQ0m2N3fqjzcGWIuTiTXLuRfQoIijx1n/AU29CC73UWw97qODFy8qbndmdNgU3LZ3ZNp8PvHnf3bzM+75ZCPnOmwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqAzfn8ZZPCyM47R87+a9q+uxv/VAH13fvr0cW4yTJpN+Orxaf5EstZcIAAAA+0dW1fchhDv5zmrs04Wi/s+rMbHm/+HIOK7q+Qfr/qqvav/Yfv/t7suTiRbG88STnt0Y9I/tTqXz5FY531743xGd4soX916y4gNJP9p6aZgX1zP57saND7pFeKCJbAGAR3G06sug+n0o9r02EwNg3+jUCu+q/s8W2s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnDrfBcFSchhOXONI5u3bu6/rD++vbt5aqdunZtu37OeIo8hHB2Y9A/1uBa5t2ly1fOrw0G/YvNB6+FENqa/b1y+ec/mWFwCK1cnycV/Dsajfb0XQfbz/mxgrT8sGcY3J2XnNsPWvyhBADAMykvW6zr7+Q7q/G9ZDGE0Y+x/j8yGfdm2e+l/r/76amb9bnq9X+vqQU+BVY2L3y5cunylbc3Lqyd65/rf/7O8d67vROnT548vVLcK1lxxwQAAIDH0y1bvf5PF3fv/x+uxWHG+v+r73vfTGf6sziq/3ebbvq1nQkAAMD+9uLr//ydPOT9pNsNX69tbl7sjY+T18fHxxZS3bMDZavX/9li21kBAAAATRhuJfft/5+pxWHG/f/nf3rll/o5sxDCoXL//+j6F4MzzS1nrjXx58RtrxEAAIB2HSpbff8/L57/TyePPKQhhLfeGMflvwGcqf7PPvz25/pcWe35/xPNLXEupUvj61H0SyF0lu778h+tJQYAAMAz6WDZYrH/V76z+tmvhz/uev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BQAA///Wa0FV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write(r1, &(0x7f0000000100)='K', 0x1) fdatasync(r0) 7.040805772s ago: executing program 2 (id=73): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x12, r1, {0x7ff8}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002001}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002b000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.187185189s ago: executing program 2 (id=77): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000500)=ANY=[@ANYBLOB='undelete,undelete,undelete,longad,unhide,uid=forget,undelete,iocharset=utf8,uid=forget,iocharset=default,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c73657373696f6e3d30303030303030303030303000000080303030302c706172746974696f6e3d3007073fd3f130303030303030303030303030303030867300305d45ef585ea37c681e7b499b96dee238047c2e5138f553bcf7c7b3664e50d8a6acea95841efe040231d43812eac6a3a58f654cf6ac170d8f96892a1f153745"], 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r0, r0, 0x0, 0x800000009) 5.366100435s ago: executing program 3 (id=81): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000001340)) 5.050875201s ago: executing program 2 (id=83): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 5.018615582s ago: executing program 0 (id=84): syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x8000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401149"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.296833816s ago: executing program 2 (id=90): sched_setscheduler(0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x24, 0xfc, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "f1"}, @main=@item_4={0x3, 0x0, 0xb, "78ea0fb9"}]}}, 0x0}, 0x0) 3.042789471s ago: executing program 0 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x7931c76006612e80, &(0x7f0000000080)) 2.856674864s ago: executing program 0 (id=93): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.494984641s ago: executing program 0 (id=96): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x0, 0x3, &(0x7f0000000000)="7e9338", 0x81, 0xc, 0x0, 0x0, 0x2, 0x2, 0xbfffffff, 'syz0\x00'}) shutdown(r0, 0x1) 2.296984565s ago: executing program 0 (id=98): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 2.207535627s ago: executing program 1 (id=99): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.999503881s ago: executing program 0 (id=100): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.912102703s ago: executing program 3 (id=101): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.632733238s ago: executing program 3 (id=102): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 1.612237069s ago: executing program 1 (id=103): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x48, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.310188194s ago: executing program 1 (id=104): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 1.273724535s ago: executing program 2 (id=105): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 1.115166358s ago: executing program 1 (id=106): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x5ee7, &(0x7f0000006580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000021c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0xfffffffe}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x8c) 783.151275ms ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 510.29326ms ago: executing program 3 (id=108): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0x13, 0x0, 0x1}]}}, 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 508.16769ms ago: executing program 1 (id=109): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 95.36µs ago: executing program 1 (id=110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000001340)) 0s ago: executing program 3 (id=111): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 58.360108][ T5769] cgroup: Unknown subsys name 'net' [ 58.497641][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.870288][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.277772][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.287353][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.295473][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.303807][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.311909][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.318560][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.319562][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.333894][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.337327][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.348707][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.360220][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.368230][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.370352][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.384326][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.385509][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.392072][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.400491][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.406218][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.414473][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.427503][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.431864][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.435593][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.442397][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.456208][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.914311][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 61.966449][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 61.998586][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 62.107319][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 62.126872][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.134198][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.141663][ T5781] bridge_slave_0: entered allmulticast mode [ 62.148401][ T5781] bridge_slave_0: entered promiscuous mode [ 62.165658][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.172831][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.179995][ T5782] bridge_slave_0: entered allmulticast mode [ 62.187437][ T5782] bridge_slave_0: entered promiscuous mode [ 62.195095][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.202443][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.210031][ T5781] bridge_slave_1: entered allmulticast mode [ 62.216988][ T5781] bridge_slave_1: entered promiscuous mode [ 62.244396][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.251789][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.259024][ T5782] bridge_slave_1: entered allmulticast mode [ 62.265959][ T5782] bridge_slave_1: entered promiscuous mode [ 62.327470][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.341010][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.379401][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.397994][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.405534][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.413171][ T5783] bridge_slave_0: entered allmulticast mode [ 62.419790][ T5783] bridge_slave_0: entered promiscuous mode [ 62.441587][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.458841][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.466105][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.474025][ T5783] bridge_slave_1: entered allmulticast mode [ 62.480704][ T5783] bridge_slave_1: entered promiscuous mode [ 62.501214][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.508367][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.515642][ T5780] bridge_slave_0: entered allmulticast mode [ 62.523194][ T5780] bridge_slave_0: entered promiscuous mode [ 62.541951][ T5781] team0: Port device team_slave_0 added [ 62.558217][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.565652][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.572968][ T5780] bridge_slave_1: entered allmulticast mode [ 62.579657][ T5780] bridge_slave_1: entered promiscuous mode [ 62.599236][ T5781] team0: Port device team_slave_1 added [ 62.628341][ T5782] team0: Port device team_slave_0 added [ 62.648133][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.669379][ T5782] team0: Port device team_slave_1 added [ 62.689696][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.712718][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.726149][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.755788][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.763005][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.789493][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.803299][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.810369][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.836861][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.867479][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.874569][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.900775][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.924994][ T5783] team0: Port device team_slave_0 added [ 62.934197][ T5783] team0: Port device team_slave_1 added [ 62.948639][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.956078][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.982789][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.036967][ T5780] team0: Port device team_slave_0 added [ 63.049084][ T5780] team0: Port device team_slave_1 added [ 63.067292][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.074569][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.100814][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.149707][ T5781] hsr_slave_0: entered promiscuous mode [ 63.156386][ T5781] hsr_slave_1: entered promiscuous mode [ 63.166909][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.174161][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.200683][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.212476][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.219522][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.245721][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.272145][ T5782] hsr_slave_0: entered promiscuous mode [ 63.278478][ T5782] hsr_slave_1: entered promiscuous mode [ 63.284774][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.292789][ T5782] Cannot create hsr debugfs directory [ 63.325545][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.332758][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.359388][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.371609][ T5796] Bluetooth: hci1: command tx timeout [ 63.398408][ T5783] hsr_slave_0: entered promiscuous mode [ 63.405057][ T5783] hsr_slave_1: entered promiscuous mode [ 63.411647][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.419227][ T5783] Cannot create hsr debugfs directory [ 63.440998][ T5796] Bluetooth: hci2: command tx timeout [ 63.525568][ T5796] Bluetooth: hci3: command tx timeout [ 63.531215][ T5785] Bluetooth: hci0: command tx timeout [ 63.571978][ T5780] hsr_slave_0: entered promiscuous mode [ 63.578178][ T5780] hsr_slave_1: entered promiscuous mode [ 63.585637][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.593534][ T5780] Cannot create hsr debugfs directory [ 63.859491][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.876249][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.886578][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.900104][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.962884][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.977839][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.987986][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.006820][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.080309][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.095337][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.105441][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.120753][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.202537][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.214623][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.234916][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.244674][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.312852][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.362715][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.385688][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.409427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.416742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.435439][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.463088][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.470345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.479893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.487102][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.522649][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.529798][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.552474][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.612056][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.640713][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.663153][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.670299][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.680105][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.687264][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.714119][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.787740][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.869697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.876909][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.957302][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.964511][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.088917][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.228945][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.246498][ T5783] veth0_vlan: entered promiscuous mode [ 65.279133][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.290121][ T5783] veth1_vlan: entered promiscuous mode [ 65.399001][ T5783] veth0_macvtap: entered promiscuous mode [ 65.422101][ T5780] veth0_vlan: entered promiscuous mode [ 65.430191][ T5783] veth1_macvtap: entered promiscuous mode [ 65.441379][ T5796] Bluetooth: hci1: command tx timeout [ 65.457040][ T5781] veth0_vlan: entered promiscuous mode [ 65.485680][ T5780] veth1_vlan: entered promiscuous mode [ 65.498067][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.508921][ T5781] veth1_vlan: entered promiscuous mode [ 65.524535][ T5796] Bluetooth: hci2: command tx timeout [ 65.539868][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.563422][ T5781] veth0_macvtap: entered promiscuous mode [ 65.575401][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.589664][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.599131][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.601793][ T5796] Bluetooth: hci3: command tx timeout [ 65.609097][ T5785] Bluetooth: hci0: command tx timeout [ 65.619550][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.628527][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643078][ T5781] veth1_macvtap: entered promiscuous mode [ 65.686393][ T5780] veth0_macvtap: entered promiscuous mode [ 65.726046][ T5780] veth1_macvtap: entered promiscuous mode [ 65.744979][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.756515][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.767805][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.824983][ T5782] veth0_vlan: entered promiscuous mode [ 65.838498][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.849780][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.860045][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.870776][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.882324][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.898777][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.902797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.915512][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.917748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.939869][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.950714][ T5782] veth1_vlan: entered promiscuous mode [ 65.969317][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.978480][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.987874][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996980][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.025880][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.036517][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.047001][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.057846][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.069373][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.087493][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.097338][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.103791][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114836][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124750][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133671][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.167994][ T5782] veth0_macvtap: entered promiscuous mode [ 66.178211][ T5782] veth1_macvtap: entered promiscuous mode [ 66.268655][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.280207][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.292071][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.302907][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.312959][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.323603][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.335056][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.373179][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.384244][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.394830][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.406827][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.416948][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.427910][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.439468][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.453118][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.462245][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.489224][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.513445][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.539694][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549184][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613731][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.625713][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.649329][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.681806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.706841][ T5870] syz.2.5[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.741163][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.749019][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.780483][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.820575][ T5870] loop2: detected capacity change from 0 to 2048 [ 66.830276][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.918965][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.973331][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.021234][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.107239][ T5870] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.154098][ T5877] syzkaller1: entered promiscuous mode [ 67.168234][ T5870] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 220 with error 28 [ 67.179068][ T5877] syzkaller1: entered allmulticast mode [ 67.194864][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.214001][ T5870] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.214001][ T5870] [ 67.225977][ T5870] EXT4-fs (loop2): Total free blocks count 0 [ 67.284217][ T5870] EXT4-fs (loop2): Free/Dirty block details [ 67.291799][ T5870] EXT4-fs (loop2): free_blocks=2415919104 [ 67.297614][ T5870] EXT4-fs (loop2): dirty_blocks=224 [ 67.367981][ T5870] EXT4-fs (loop2): Block reservation details [ 67.413616][ T5870] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 67.521526][ T5785] Bluetooth: hci1: command tx timeout [ 67.558650][ T1089] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 212 with max blocks 8 with error 28 [ 67.601213][ T5785] Bluetooth: hci2: command tx timeout [ 67.651362][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.658482][ T5885] loop1: detected capacity change from 0 to 4096 [ 67.682708][ T5785] Bluetooth: hci3: command tx timeout [ 67.698600][ T5785] Bluetooth: hci0: command tx timeout [ 67.738945][ T5885] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 67.864690][ T5787] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.904207][ T5787] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 67.951815][ T5787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 67.972705][ T5787] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 67.996139][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.042847][ T5787] usb 4-1: config 0 descriptor?? [ 68.376457][ T5889] loop0: detected capacity change from 0 to 32768 [ 68.431513][ T5889] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (5889) [ 68.519992][ T5787] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 68.524764][ T5866] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 68.533486][ T5787] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 68.543900][ T5787] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 68.545503][ T5889] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 68.569494][ T5787] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 68.576750][ T5866] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 68.583296][ T5891] loop2: detected capacity change from 0 to 32768 [ 68.587542][ T5787] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 68.599236][ T5866] hid-generic 0000:0D17:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 68.609661][ T5889] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 68.628669][ T5787] wacom 0003:056A:0314.0001: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 68.634413][ T5891] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9 (5891) [ 68.661179][ T5889] BTRFS info (device loop0): using free space tree [ 68.702958][ T5787] wacom 0003:056A:0314.0001: hidraw0: USB HID v0.05 Device [HID 056a:0314] on usb-dummy_hcd.3-1/input0 [ 68.739621][ T5891] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 68.751769][ T5891] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 68.789289][ T5891] BTRFS info (device loop2): using free space tree [ 68.800202][ T5898] fido_id[5898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.815525][ T5787] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0314.0001/input/input5 [ 68.958701][ T5889] BTRFS info (device loop0): enabling ssd optimizations [ 68.972836][ T5889] BTRFS info (device loop0): auto enabling async discard [ 69.027386][ T5891] BTRFS info (device loop2): enabling ssd optimizations [ 69.048029][ T5787] usb 4-1: USB disconnect, device number 2 [ 69.079610][ T5891] BTRFS info (device loop2): auto enabling async discard [ 69.218634][ T28] audit: type=1800 audit(1758290727.083:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 69.589364][ T5781] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 69.611432][ T5785] Bluetooth: hci1: command tx timeout [ 69.625060][ T5783] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.681148][ T5785] Bluetooth: hci2: command tx timeout [ 69.761649][ T5785] Bluetooth: hci3: command tx timeout [ 69.767285][ T5785] Bluetooth: hci0: command tx timeout [ 70.091551][ T5946] input: syz0 as /devices/virtual/input/input8 [ 70.098466][ T5946] input: failed to attach handler leds to device input8, error: -6 [ 70.310924][ T5948] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 70.498330][ T5954] bridge_slave_0: left allmulticast mode [ 70.505683][ T5954] bridge_slave_0: left promiscuous mode [ 70.525151][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.562199][ T5954] bridge_slave_1: left allmulticast mode [ 70.580195][ T5954] bridge_slave_1: left promiscuous mode [ 70.590430][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.645202][ T5954] bond0: (slave bond_slave_0): Releasing backup interface [ 70.681111][ T5954] bond0: (slave bond_slave_1): Releasing backup interface [ 70.747111][ T5954] team0: Port device team_slave_0 removed [ 70.784533][ T5954] team0: Port device team_slave_1 removed [ 70.798339][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.821398][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.837469][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.848205][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.928329][ T5958] Zero length message leads to an empty skb [ 70.958891][ T5963] mmap: syz.1.25 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.195365][ T5970] loop0: detected capacity change from 0 to 2048 [ 71.272262][ T5970] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 71.327103][ T5974] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 71.347963][ T5970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.374783][ T5978] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.439320][ T28] audit: type=1800 audit(1758290729.313:3): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 71.690150][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.699400][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.261006][ T28] audit: type=1800 audit(1758290730.133:4): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 72.684698][ T5995] loop1: detected capacity change from 0 to 32768 [ 72.708433][ T5995] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.36 (5995) [ 72.772403][ T5995] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 72.791032][ T5995] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 72.831054][ T5995] BTRFS info (device loop1): using free space tree [ 72.989976][ T5995] BTRFS info (device loop1): enabling ssd optimizations [ 72.999975][ T5995] BTRFS info (device loop1): auto enabling async discard [ 73.367133][ T5780] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 73.569217][ T5903] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (5903) [ 73.673534][ T6004] loop0: detected capacity change from 0 to 40427 [ 73.735333][ T6004] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 73.810249][ T6004] F2FS-fs (loop0): invalid crc value [ 73.838793][ T6004] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.926975][ T6010] loop3: detected capacity change from 0 to 32768 [ 74.078358][ T6004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.109566][ T6010] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.381085][ T6010] XFS (loop3): Ending clean mount [ 74.395033][ T6004] syz.0.39: attempt to access beyond end of device [ 74.395033][ T6004] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 74.454399][ T6044] F2FS-fs (loop0): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 74.524049][ T6044] syz.0.39: attempt to access beyond end of device [ 74.524049][ T6044] loop0: rw=2049, sector=77824, nr_sectors = 120 limit=40427 [ 74.661999][ T5781] syz-executor: attempt to access beyond end of device [ 74.661999][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.705224][ T6049] loop1: detected capacity change from 0 to 1024 [ 74.709285][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.723794][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.790755][ T5782] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.792715][ T6038] loop2: detected capacity change from 0 to 32768 [ 74.836183][ T6049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.861968][ T6038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.43 (6038) [ 74.914163][ T6038] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.955402][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.967838][ T6038] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 74.976605][ T6038] BTRFS info (device loop2): using free space tree [ 75.227046][ T6038] BTRFS info (device loop2): enabling ssd optimizations [ 75.256156][ T6072] capability: warning: `syz.1.50' uses 32-bit capabilities (legacy support in use) [ 75.290971][ T6038] BTRFS info (device loop2): auto enabling async discard [ 75.312365][ T6072] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.598494][ T6077] netlink: 'syz.1.51': attribute type 39 has an invalid length. [ 75.774401][ T59] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 76.055261][ T6083] loop0: detected capacity change from 0 to 2048 [ 76.123761][ T5773] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.191682][ T5783] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.294766][ T6074] loop3: detected capacity change from 0 to 32768 [ 76.308312][ T6074] ======================================================= [ 76.308312][ T6074] WARNING: The mand mount option has been deprecated and [ 76.308312][ T6074] and is ignored by this kernel. Remove the mand [ 76.308312][ T6074] option from the mount to silence this warning. [ 76.308312][ T6074] ======================================================= [ 76.469200][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.592624][ T28] audit: type=1800 audit(1758290734.473:5): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 76.608883][ T6074] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 76.608883][ T6074] [ 76.629324][ T6074] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 76.629324][ T6074] [ 76.694936][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.709451][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.730594][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.742743][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.761174][ T23] usb 1-1: Product: syz [ 76.768441][ T23] usb 1-1: Manufacturer: syz [ 76.773603][ T23] usb 1-1: SerialNumber: syz [ 76.777090][ T6089] loop1: detected capacity change from 0 to 2048 [ 76.794792][ T6089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.821781][ T6091] loop2: detected capacity change from 0 to 1024 [ 76.874752][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.911200][ T6091] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.997565][ T23] usb 1-1: 0:2 : does not exist [ 77.015764][ T23] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 77.049689][ T6091] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 13) [ 77.088294][ T23] usb 1-1: USB disconnect, device number 2 [ 77.138728][ T6091] EXT4-fs (loop2): Remounting filesystem read-only [ 77.310827][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.057293][ T6101] loop1: detected capacity change from 0 to 32768 [ 78.147443][ T6101] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.160662][ T6099] loop2: detected capacity change from 0 to 40427 [ 78.172374][ T6099] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 78.191057][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.191772][ T6099] F2FS-fs (loop2): invalid crc value [ 78.241239][ T6099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.320493][ T6099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.378834][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.400483][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.414465][ T23] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 78.423935][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.443285][ T23] usb 1-1: config 0 descriptor?? [ 78.460778][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 78.477378][ T6109] f2fs_ckpt-7:2: attempt to access beyond end of device [ 78.477378][ T6109] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 78.531240][ T6109] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 78.562267][ T6109] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 78.908109][ T23] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 78.932035][ T23] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 79.031803][ T23] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 79.044235][ T23] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 79.068970][ T23] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 79.099761][ T23] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 79.323771][ T6113] loop3: detected capacity change from 0 to 32768 [ 79.434288][ T6113] JBD2: Ignoring recovery information on journal [ 79.544664][ T6113] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.805193][ T5782] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 79.831702][ T5782] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 79.842224][ T5782] OCFS2: File system is now read-only. [ 79.847902][ T5782] (syz-executor,5782,0):_ocfs2_free_suballoc_bits:2479 ERROR: status = -30 [ 79.857191][ T5782] (syz-executor,5782,0):ocfs2_remove_inode:699 ERROR: status = -30 [ 79.865889][ T5782] (syz-executor,5782,0):ocfs2_wipe_inode:821 ERROR: status = -30 [ 79.895046][ T5782] (syz-executor,5782,0):ocfs2_delete_inode:1082 ERROR: status = -30 [ 79.923421][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 80.257582][ T6125] loop2: detected capacity change from 0 to 40427 [ 80.282383][ T6125] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 80.294787][ T6125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.318094][ T6125] F2FS-fs (loop2): heap/no_heap options were deprecated [ 80.339641][ T6125] F2FS-fs (loop2): invalid crc value [ 80.362592][ T6125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.456736][ T6135] loop3: detected capacity change from 0 to 4096 [ 80.470994][ T6125] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.485537][ T6125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.605700][ T6125] syz.2.68: attempt to access beyond end of device [ 80.605700][ T6125] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.648559][ T6135] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 80.657206][ T6125] F2FS-fs (loop2): Remounting filesystem read-only [ 80.860041][ T59] ntfs3: loop3: ino=9, ntfs3_write_inode failed, -22. [ 80.877237][ T5787] usb 1-1: USB disconnect, device number 3 [ 80.888676][ T5782] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 80.892764][ T5787] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 81.515137][ T6151] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 81.539879][ T6151] netlink: 224 bytes leftover after parsing attributes in process `syz.2.73'. [ 81.565769][ T6151] netlink: 'syz.2.73': attribute type 2 has an invalid length. [ 81.637829][ T6148] loop3: detected capacity change from 0 to 32768 [ 81.647301][ T6148] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.76 (6148) [ 81.672417][ T6148] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.682770][ T6148] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 81.691586][ T6148] BTRFS info (device loop3): allowing degraded mounts [ 81.698397][ T6148] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.708075][ T6148] BTRFS info (device loop3): force lzo compression, level 0 [ 81.715546][ T6148] BTRFS info (device loop3): force zlib compression, level 3 [ 81.723711][ T6148] BTRFS info (device loop3): enabling ssd optimizations [ 81.730679][ T6148] BTRFS info (device loop3): force clearing of disk cache [ 81.738035][ T6148] BTRFS info (device loop3): turning off barriers [ 81.744711][ T6148] BTRFS info (device loop3): turning on sync discard [ 81.751631][ T6148] BTRFS info (device loop3): turning on flush-on-commit [ 81.758704][ T6148] BTRFS info (device loop3): using free space tree [ 81.815916][ T6148] BTRFS info (device loop3): rebuilding free space tree [ 81.818189][ T6154] loop2: detected capacity change from 0 to 2048 [ 81.874306][ T6154] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 81.909580][ T6154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.938474][ T27] cfg80211: failed to load regulatory.db [ 82.251708][ T28] audit: type=1800 audit(1758290740.093:6): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 82.294368][ T6148] BTRFS info (device loop3: state M): turning on barriers [ 82.301712][ T6148] BTRFS info (device loop3: state M): enabling auto defrag [ 82.308947][ T6148] BTRFS info (device loop3: state M): doing ref verification [ 82.316603][ T6148] BTRFS info (device loop3: state M): use no compression [ 82.324140][ T6148] BTRFS info (device loop3: state M): force clearing of disk cache [ 82.332523][ T6148] BTRFS info (device loop3: state M): max_inline at 4096 [ 82.340178][ T6148] BTRFS info (device loop3: state M): disabling free space tree [ 82.348345][ T6148] BTRFS warning (device loop3: state M): remount supports changing free space tree only from ro to rw [ 82.471547][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.513618][ T5782] BTRFS error (device loop3): trying to do action 2 to bytenr 5345280 num_bytes 4096 but there is no existing entry! [ 82.526459][ T5782] BTRFS error (device loop3): Ref action 2, root 1, ref_root 1, parent 0, owner 0, offset 0, num_refs 18446744073709551615 [ 82.540110][ T5782] btrfs_force_cow_block+0xcde/0x1b80 [ 82.545946][ T5782] btrfs_cow_block+0x3cb/0x7e0 [ 82.551026][ T5782] commit_cowonly_roots+0x162/0x890 [ 82.556433][ T5782] btrfs_commit_transaction+0x101a/0x3760 [ 82.564572][ T5782] close_ctree+0x4bb/0xca0 [ 82.569219][ T5782] generic_shutdown_super+0x134/0x2b0 [ 82.575230][ T5782] kill_anon_super+0x3b/0x70 [ 82.580030][ T5782] btrfs_kill_super+0x41/0x50 [ 82.585169][ T5782] deactivate_locked_super+0x97/0x100 [ 82.590952][ T5782] cleanup_mnt+0x429/0x4c0 [ 82.595708][ T5782] task_work_run+0x1ce/0x250 [ 82.600514][ T5782] exit_to_user_mode_loop+0xe6/0x110 [ 82.606167][ T5782] exit_to_user_mode_prepare+0xf6/0x180 [ 82.611955][ T5782] syscall_exit_to_user_mode+0x1a/0x50 [ 82.617632][ T5782] do_syscall_64+0x61/0xb0 [ 82.622309][ T5782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.671950][ T28] audit: type=1800 audit(1758290740.553:7): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.77" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 82.691927][ T6154] syz.2.77 (6154) used greatest stack depth: 20016 bytes left [ 82.958283][ T5903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5903) [ 83.072256][ T28] audit: type=1326 audit(1758290740.943:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 83.131378][ T28] audit: type=1326 audit(1758290740.943:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 83.160969][ T5787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.249450][ T28] audit: type=1326 audit(1758290740.973:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 83.277220][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.304832][ T28] audit: type=1326 audit(1758290740.973:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 83.340970][ T28] audit: type=1326 audit(1758290740.973:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 83.393802][ T5787] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.403388][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.423480][ T5787] usb 1-1: config 0 descriptor?? [ 83.443078][ T5787] cp210x 1-1:0.0: cp210x converter detected [ 83.500483][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.531027][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.550933][ T27] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 83.581160][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.609779][ T27] usb 4-1: config 0 descriptor?? [ 83.851155][ T5787] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 83.870277][ T5787] usb 1-1: cp210x converter now attached to ttyUSB0 [ 83.952754][ T6195] loop1: detected capacity change from 0 to 32768 [ 83.978712][ T6195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (6195) [ 84.012197][ T6195] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.032678][ T6195] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 84.051118][ T6195] BTRFS info (device loop1): using free space tree [ 84.079571][ T27] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 84.101812][ T27] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 84.112484][ T5787] usb 1-1: USB disconnect, device number 4 [ 84.143365][ T5787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.160218][ T5787] cp210x 1-1:0.0: device disconnected [ 84.191034][ T27] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 84.194008][ T6195] BTRFS info (device loop1): enabling ssd optimizations [ 84.207437][ T6195] BTRFS info (device loop1): auto enabling async discard [ 84.217699][ T27] hid-steam 0003:28DE:1142.0005: No HID_FEATURE_REPORT submitted - nothing to read [ 84.234009][ T27] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 84.261581][ T27] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 84.535366][ T5780] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.702887][ T5903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5903) [ 84.911055][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.092912][ T6227] pim6reg: entered allmulticast mode [ 85.116780][ T6227] pim6reg: left allmulticast mode [ 85.133929][ T787] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 85.165338][ T787] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.179935][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.190087][ T787] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 85.201570][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.218157][ T787] usb 3-1: config 0 descriptor?? [ 85.380952][ T5772] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 85.460152][ T5787] hid-generic 0005:0000:0000.0007: hidraw1: BLUETOOTH HID v0.02 Device [syz0] on aa:aa:aa:aa:aa:aa [ 85.597853][ T6239] loop0: detected capacity change from 0 to 16 [ 85.626891][ T6236] fido_id[6236]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 85.644326][ T6239] erofs: (device loop0): mounted with root inode @ nid 36. [ 85.678072][ T787] waltop 0003:172F:0501.0008: collection stack underflow [ 85.710585][ T6239] syz.0.98: attempt to access beyond end of device [ 85.710585][ T6239] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 85.728518][ T787] waltop 0003:172F:0501.0008: item 0 1 0 12 parsing failed [ 85.741886][ T787] waltop: probe of 0003:172F:0501.0008 failed with error -22 [ 85.758864][ T6239] syz.0.98: attempt to access beyond end of device [ 85.758864][ T6239] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 85.943124][ T787] usb 3-1: USB disconnect, device number 2 [ 86.046720][ T28] audit: type=1326 audit(1758290743.923:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 86.079836][ T28] audit: type=1326 audit(1758290743.943:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15ddb2ae09 code=0x7ffc0000 [ 86.102941][ T28] audit: type=1326 audit(1758290743.943:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddb8ec29 code=0x7ffc0000 [ 86.212332][ T27] usb 4-1: USB disconnect, device number 3 [ 86.253060][ T27] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 86.324217][ T6251] loop1: detected capacity change from 0 to 2048 [ 86.370105][ T6251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.860948][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.077031][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.091183][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.117775][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.138677][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.193394][ T6258] loop1: detected capacity change from 0 to 32768 [ 87.245167][ T6258] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 87.380965][ T9] usb 3-1: usb_control_msg returned -32 [ 87.386630][ T9] usbtmc 3-1:16.0: can't read capabilities [ 87.412263][ T6264] netlink: 'syz.3.108': attribute type 13 has an invalid length. [ 87.421959][ T6264] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.108'. [ 87.710263][ T6266] loop1: detected capacity change from 0 to 16 [ 87.720305][ T6266] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.748903][ T6266] syz.1.109: attempt to access beyond end of device [ 87.748903][ T6266] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 87.765327][ T6266] syz.1.109: attempt to access beyond end of device [ 87.765327][ T6266] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 87.784769][ T6266] syz.1.109: attempt to access beyond end of device [ 87.784769][ T6266] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 87.906635][ T6270] BUG: Bad rss-counter state mm:ffff88807c7a1c80 type:MM_ANONPAGES val:6 [ 87.909022][ T6269] ================================================================== [ 87.923453][ T6269] BUG: KASAN: use-after-free in free_pgd_range+0x36d/0xb10 [ 87.930735][ T6269] Read of size 8 at addr ffff88802d80e000 by task syz.3.111/6269 [ 87.938480][ T6269] [ 87.940800][ T6269] CPU: 1 PID: 6269 Comm: syz.3.111 Not tainted syzkaller #0 [ 87.948067][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.958120][ T6269] Call Trace: [ 87.961412][ T6269] [ 87.964347][ T6269] dump_stack_lvl+0x16c/0x230 [ 87.969110][ T6269] ? __lock_acquire+0x7c80/0x7c80 [ 87.974124][ T6269] ? show_regs_print_info+0x20/0x20 [ 87.979313][ T6269] ? load_image+0x3b0/0x3b0 [ 87.983805][ T6269] ? __virt_addr_valid+0x469/0x540 [ 87.989077][ T6269] print_report+0xac/0x220 [ 87.993499][ T6269] ? free_pgd_range+0x36d/0xb10 [ 87.998342][ T6269] kasan_report+0x117/0x150 [ 88.002867][ T6269] ? free_pgd_range+0x36d/0xb10 [ 88.007718][ T6269] free_pgd_range+0x36d/0xb10 [ 88.012387][ T6269] ? down_write+0x162/0x1f0 [ 88.016882][ T6269] ? up_write+0x1c3/0x410 [ 88.021198][ T6269] free_pgtables+0x697/0x770 [ 88.025781][ T6269] exit_mmap+0x3e8/0xb50 [ 88.030011][ T6269] ? exit_mm_release+0x1a/0x30 [ 88.034759][ T6269] ? vm_brk+0x30/0x30 [ 88.038727][ T6269] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 88.044380][ T6269] ? uprobe_clear_state+0x278/0x290 [ 88.049566][ T6269] ? mm_update_next_owner+0x562/0x6c0 [ 88.054948][ T6269] __mmput+0x118/0x3c0 [ 88.059103][ T6269] exit_mm+0x1da/0x2c0 [ 88.063170][ T6269] ? do_exit+0x23c0/0x23c0 [ 88.067588][ T6269] ? taskstats_exit+0x35e/0x9e0 [ 88.072440][ T6269] do_exit+0x88e/0x23c0 [ 88.076590][ T6269] ? put_task_struct+0xc0/0xc0 [ 88.081349][ T6269] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 88.087316][ T6269] ? get_signal+0x1068/0x1400 [ 88.091993][ T6269] ? lock_chain_count+0x20/0x20 [ 88.096830][ T6269] ? _raw_spin_lock_irq+0xaf/0xe0 [ 88.101842][ T6269] do_group_exit+0x21b/0x2d0 [ 88.106536][ T6269] ? lockdep_hardirqs_on+0x98/0x150 [ 88.111726][ T6269] get_signal+0x12fc/0x1400 [ 88.116231][ T6269] arch_do_signal_or_restart+0x96/0x780 [ 88.121764][ T6269] ? vm_mmap_pgoff+0x2e7/0x400 [ 88.126514][ T6269] ? get_sigframe_size+0x20/0x20 [ 88.131451][ T6269] ? exit_to_user_mode_loop+0x3b/0x110 [ 88.136900][ T6269] exit_to_user_mode_loop+0x70/0x110 [ 88.142172][ T6269] exit_to_user_mode_prepare+0xf6/0x180 [ 88.147703][ T6269] syscall_exit_to_user_mode+0x1a/0x50 [ 88.153148][ T6269] do_syscall_64+0x61/0xb0 [ 88.157687][ T6269] ? clear_bhb_loop+0x40/0x90 [ 88.162357][ T6269] ? clear_bhb_loop+0x40/0x90 [ 88.167022][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.172906][ T6269] RIP: 0033:0x7f303ff8ec29 [ 88.177308][ T6269] Code: Unable to access opcode bytes at 0x7f303ff8ebff. [ 88.184410][ T6269] RSP: 002b:00007f3040e2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.192896][ T6269] RAX: 0000000000000001 RBX: 00007f30401d5fa8 RCX: 00007f303ff8ec29 [ 88.200867][ T6269] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30401d5fac [ 88.208828][ T6269] RBP: 00007f30401d5fa0 R08: 0000000000745ac3 R09: 0000000000000000 [ 88.216785][ T6269] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 88.224831][ T6269] R13: 00007f30401d6038 R14: 00007ffefe3053a0 R15: 00007ffefe305488 [ 88.232880][ T6269] [ 88.235881][ T6269] [ 88.238196][ T6269] The buggy address belongs to the physical page: [ 88.244767][ T6269] page:ffffea0000b60380 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d80e [ 88.255057][ T6269] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.262243][ T6269] page_type: 0xffffffff() [ 88.266564][ T6269] raw: 00fff00000000000 ffffea000063d688 ffffea0001eea2c8 0000000000000000 [ 88.275133][ T6269] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.283698][ T6269] page dumped because: kasan: bad access detected [ 88.290198][ T6269] page_owner tracks the page as freed [ 88.295548][ T6269] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x540dc0(GFP_USER|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 6268, tgid 6268 (syz.3.111), ts 87857052491, free_ts 87905510718 [ 88.314497][ T6269] post_alloc_hook+0x1cd/0x210 [ 88.319251][ T6269] get_page_from_freelist+0x195c/0x19f0 [ 88.324794][ T6269] __alloc_pages+0x1e3/0x460 [ 88.329381][ T6269] __pud_alloc+0x3a/0x1f0 [ 88.333711][ T6269] handle_mm_fault+0x339a/0x4920 [ 88.338722][ T6269] do_user_addr_fault+0x738/0x12e0 [ 88.343816][ T6269] exc_page_fault+0x67/0x110 [ 88.348394][ T6269] asm_exc_page_fault+0x26/0x30 [ 88.353318][ T6269] page last free stack trace: [ 88.357975][ T6269] free_unref_page_prepare+0x7ce/0x8e0 [ 88.363509][ T6269] free_unref_page_list+0xbe/0x860 [ 88.368605][ T6269] release_pages+0x1fa0/0x2220 [ 88.373350][ T6269] tlb_flush_mmu+0x368/0x4f0 [ 88.377936][ T6269] tlb_finish_mmu+0xc3/0x1d0 [ 88.382519][ T6269] exit_mmap+0x3f0/0xb50 [ 88.386751][ T6269] __mmput+0x118/0x3c0 [ 88.390800][ T6269] exit_mm+0x1da/0x2c0 [ 88.394855][ T6269] do_exit+0x88e/0x23c0 [ 88.399014][ T6269] do_group_exit+0x21b/0x2d0 [ 88.403606][ T6269] __x64_sys_exit_group+0x3f/0x40 [ 88.408629][ T6269] do_syscall_64+0x55/0xb0 [ 88.413036][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.418928][ T6269] [ 88.421241][ T6269] Memory state around the buggy address: [ 88.426853][ T6269] ffff88802d80df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.434899][ T6269] ffff88802d80df80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 88.442961][ T6269] >ffff88802d80e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.451056][ T6269] ^ [ 88.455114][ T6269] ffff88802d80e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.463169][ T6269] ffff88802d80e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.471241][ T6269] ================================================================== [ 88.479960][ T6270] BUG: non-zero pgtables_bytes on freeing mm: 12288 [ 88.487919][ T6269] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.495147][ T6269] CPU: 0 PID: 6269 Comm: syz.3.111 Not tainted syzkaller #0 [ 88.502441][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.512609][ T6269] Call Trace: [ 88.515887][ T6269] [ 88.518812][ T6269] dump_stack_lvl+0x16c/0x230 [ 88.523489][ T6269] ? show_regs_print_info+0x20/0x20 [ 88.528674][ T6269] ? load_image+0x3b0/0x3b0 [ 88.533166][ T6269] panic+0x2c0/0x710 [ 88.537055][ T6269] ? bpf_jit_dump+0xd0/0xd0 [ 88.541551][ T6269] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 88.547434][ T6269] ? _raw_spin_unlock+0x40/0x40 [ 88.552268][ T6269] ? print_memory_metadata+0x314/0x400 [ 88.557721][ T6269] ? free_pgd_range+0x36d/0xb10 [ 88.562562][ T6269] check_panic_on_warn+0x84/0xa0 [ 88.567489][ T6269] ? free_pgd_range+0x36d/0xb10 [ 88.572491][ T6269] end_report+0x6f/0x140 [ 88.576720][ T6269] kasan_report+0x128/0x150 [ 88.581239][ T6269] ? free_pgd_range+0x36d/0xb10 [ 88.586090][ T6269] free_pgd_range+0x36d/0xb10 [ 88.590758][ T6269] ? down_write+0x162/0x1f0 [ 88.595345][ T6269] ? up_write+0x1c3/0x410 [ 88.599661][ T6269] free_pgtables+0x697/0x770 [ 88.604243][ T6269] exit_mmap+0x3e8/0xb50 [ 88.608473][ T6269] ? exit_mm_release+0x1a/0x30 [ 88.613244][ T6269] ? vm_brk+0x30/0x30 [ 88.617216][ T6269] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 88.623105][ T6269] ? uprobe_clear_state+0x278/0x290 [ 88.628296][ T6269] ? mm_update_next_owner+0x562/0x6c0 [ 88.633660][ T6269] __mmput+0x118/0x3c0 [ 88.637722][ T6269] exit_mm+0x1da/0x2c0 [ 88.641782][ T6269] ? do_exit+0x23c0/0x23c0 [ 88.646188][ T6269] ? taskstats_exit+0x35e/0x9e0 [ 88.651044][ T6269] do_exit+0x88e/0x23c0 [ 88.655191][ T6269] ? put_task_struct+0xc0/0xc0 [ 88.660097][ T6269] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 88.666062][ T6269] ? get_signal+0x1068/0x1400 [ 88.670730][ T6269] ? lock_chain_count+0x20/0x20 [ 88.675564][ T6269] ? _raw_spin_lock_irq+0xaf/0xe0 [ 88.680571][ T6269] do_group_exit+0x21b/0x2d0 [ 88.685157][ T6269] ? lockdep_hardirqs_on+0x98/0x150 [ 88.690446][ T6269] get_signal+0x12fc/0x1400 [ 88.694954][ T6269] arch_do_signal_or_restart+0x96/0x780 [ 88.700603][ T6269] ? vm_mmap_pgoff+0x2e7/0x400 [ 88.705366][ T6269] ? get_sigframe_size+0x20/0x20 [ 88.710294][ T6269] ? exit_to_user_mode_loop+0x3b/0x110 [ 88.715746][ T6269] exit_to_user_mode_loop+0x70/0x110 [ 88.721027][ T6269] exit_to_user_mode_prepare+0xf6/0x180 [ 88.726562][ T6269] syscall_exit_to_user_mode+0x1a/0x50 [ 88.732008][ T6269] do_syscall_64+0x61/0xb0 [ 88.736437][ T6269] ? clear_bhb_loop+0x40/0x90 [ 88.741097][ T6269] ? clear_bhb_loop+0x40/0x90 [ 88.745768][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.751652][ T6269] RIP: 0033:0x7f303ff8ec29 [ 88.756063][ T6269] Code: Unable to access opcode bytes at 0x7f303ff8ebff. [ 88.763060][ T6269] RSP: 002b:00007f3040e2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.771462][ T6269] RAX: 0000000000000001 RBX: 00007f30401d5fa8 RCX: 00007f303ff8ec29 [ 88.779592][ T6269] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30401d5fac [ 88.787562][ T6269] RBP: 00007f30401d5fa0 R08: 0000000000745ac3 R09: 0000000000000000 [ 88.795617][ T6269] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 88.803576][ T6269] R13: 00007f30401d6038 R14: 00007ffefe3053a0 R15: 00007ffefe305488 [ 88.811543][ T6269] [ 88.814831][ T6269] Kernel Offset: disabled [ 88.819145][ T6269] Rebooting in 86400 seconds..