last executing test programs: 1m27.680344473s ago: executing program 3 (id=434): bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x6, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7fe0000ffffffffb70500000000000085000000550000001500020000000000bf0100000000000085000000c400000095"], &(0x7f0000001ac0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.714376436s ago: executing program 3 (id=435): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000100)="10") r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000001c0)={0x18, r2, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r4, &(0x7f0000000500)="c0234d631001d8fa", 0x8, 0x0, &(0x7f0000000540)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000700)) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000640)='3', 0x1}], 0x1, 0x800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x6}) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m26.275636522s ago: executing program 3 (id=438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c02000019000100fdffffffffdbdf25ff010000000000000000000000000001ac1414bb0000000000003200000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000ffffffffffffffff001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000003c0000000000000000000000000000000000000000000000023500000002000000000000d00b0000000000eafe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000000000000fdffffff0100000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001000400080000000000000000000000e00000020000000000000000000000000001000033"], 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 1m25.9479488s ago: executing program 3 (id=440): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)=0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r2, &(0x7f0000000480), 0x6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 1m24.500475588s ago: executing program 3 (id=442): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b1efb203921b53fd7ea815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000000740)='GPL\x00', 0x9, 0x54e, &(0x7f0000000780)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x8, 0x10, &(0x7f0000000880)={0x90ffffff, 0x0, 0x0, 0x2}, 0x10}, 0x36) 1m20.115192178s ago: executing program 3 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x67) listen(r0, 0x8) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0xef, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3fa}, [], {0x14, 0x3f3}}, 0x28}}, 0xc144) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x67) (async) listen(r0, 0x8) (async) socket(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0xef, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3fa}, [], {0x14, 0x3f3}}, 0x28}}, 0xc144) (async) 1m19.271224198s ago: executing program 32 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x67) listen(r0, 0x8) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0xef, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3fa}, [], {0x14, 0x3f3}}, 0x28}}, 0xc144) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x67) (async) listen(r0, 0x8) (async) socket(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0xef, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3fa}, [], {0x14, 0x3f3}}, 0x28}}, 0xc144) (async) 15.609997743s ago: executing program 4 (id=670): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019500), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019540)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fc00000000", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) sendmsg$nl_generic(r4, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={0x34, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000193c0)={'dummy0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000019400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000faffffff2f0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040) clock_gettime(0x0, &(0x7f0000019280)) 14.36041095s ago: executing program 4 (id=672): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 13.164091967s ago: executing program 1 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x2, 0x0, 0x7ffffffffffffffb, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000000000fbfffdff00000000000000000063e3f1b9721674f5cf690c0bec1017322c9f98a5197dba9c82e1", @ANYRES8=r2, @ANYBLOB="110001", @ANYRES64=r3, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002580), 0x5, 0x4000014) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="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", 0x1aa}], 0x1) 12.214243319s ago: executing program 1 (id=677): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r4, &(0x7f000001ac40)={0x0, 0x0, &(0x7f000001ac80)={&(0x7f000001acc0)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa00000000ac6a1d3a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000050000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000040000000000300"], 0xcc}}, 0x0) 10.944008811s ago: executing program 1 (id=678): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, '\x00'/13}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="7d50681f32e6ce64b33d53a8d29d167ea10d4959a5b513d3795adb6139edfd0dd7e932904d20ab78f1a122ed82d635d7a55f19c9baaf5cbc4c353ac65115b495ab74a619fc83daeaf175c1e19b9beda4cd7cb096a9501c46fcefbe03a5ad1fbd1263a800ee9f55076b6fd9bb7eaf825ab5dcafb3d133f8fafda7aa3beb", 0x7d}, {&(0x7f0000000780)="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", 0xf89}, {&(0x7f0000001740)}, {&(0x7f0000001780)="b1da17dc7032c7889eb946aa1eb978e4eb317f085987adf63e45b61abc43bf502ca1c9a90daa2d1d5aa574287224e6b259202abcd25ab723b6fd156ebcd61158bca9b6c1cd3e34eb5394147474ba80491b7f8d2866974c4c1148ad381111cda25a2cda725506a94365d625ea65e5fb5b2de3c03d99e1396582fd665bdd53cb78ff853480bccb8ca45b3aa2c928105cde8b5ba971626c5dfb30fcd095933bc7cf5a6a3e580cfd649bb05d8e54211032a975e1a4920ccc11123bcf1d7ee4722a892cb1dd1df52744ab499718f23eade0", 0xcf}, {&(0x7f0000001880)="1329fffd416853225a7252c5003d05bf2c61e93ade805ec647ba", 0x1a}], 0x5, &(0x7f00000018c0)}}], 0x1, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x4e25, 0x400000}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000001740)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20048040, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 10.21192285s ago: executing program 5 (id=682): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019500), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019540)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fc00000000", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) sendmsg$nl_generic(r4, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={0x34, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000193c0)={'dummy0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000019400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000faffffff2f0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040) clock_gettime(0x0, &(0x7f0000019280)) 9.946921956s ago: executing program 4 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000b0000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000640)=""/152, 0x41000, 0xa}, 0x23) 8.684191294s ago: executing program 5 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000feffffff180000fd", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 8.556248831s ago: executing program 4 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getrlimit(0xe, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0063edcea4", @ANYBLOB="b6a7a29782938426a4c1e016eedf515af3fd5b546aaacf8d3135c386daf856ecccd471f18f3b0c0d8118f2458d7a7797a3a26a1c7303dce38f54e82d58e84a2d90cbc9d4045b09322e0d4829f9a1ed35be0efa8653195ff1650e3c448d671c5d240daa776e54b6c4374d5a1217b928f24a7dcc1d83727e1e2496be90000d0ba16bf0266e2861636b9b86443ca18e70a2c05ef9389ecbff171bb734f3e0855948dfbbc23445ca276bba463e8f60607626b18799cc5aad8e5463878d9aca519ecfdaf99a675112f906be5e7abce02645ef430ef929cc1a2e435fa67b84f2462752b3693914f369a767e1", @ANYRES32=0x0], 0x1, 0x105c7, &(0x7f0000020c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) 7.800421646s ago: executing program 4 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6.95215468s ago: executing program 1 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40106e80, &(0x7f0000000640)={0x1, 0x8000000000000001, 0x9, 0x3, 0x4000040b, 0x5b, 0x2401}) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x150) write(r0, &(0x7f0000000180)='0N', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r2 = getpgrp(0x0) syz_open_dev$sndmidi(0x0, 0xc7, 0x2000) sched_setaffinity(r2, 0x8, &(0x7f0000000b40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000b80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) read$msr(r5, &(0x7f0000000c00)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019c40)={0x2, 0x4, &(0x7f0000019d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f0000019d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r7, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x80440, 0x44) openat2(r8, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f00000003c0)={0x200001, 0x1, 0x2a}, 0x18) fstatfs(r8, &(0x7f0000000680)=""/169) 5.336001505s ago: executing program 1 (id=693): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x40010e00) (async) unshare(0x4000000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x2, 0xfffffe0000000001, 0xfa11}, 0x0) (async) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x635c, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, 0x0, r0, r3, 0x0, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0xd) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r5, 0x2007ffb) r6 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x41, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000c00000100000001"], 0x128}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x128}, 0x8984) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.47823871s ago: executing program 2 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000200000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000800)='GPL\x00', 0x2, 0xde, &(0x7f0000000880)=""/222}, 0x94) 3.224755858s ago: executing program 5 (id=697): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="bf1600000000000085000000bc000000180200000a0000010000000000001000180200000a0000020000000040000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000cd000000850000004500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.094301014s ago: executing program 0 (id=698): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x80240) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"00000016", 0x0, 0x6, 0x4, 0x7, 0x0, "f759ca34000400", '\x00', "03000500", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00\x00\x00\x00\x00 \x00', "00080001000000000100"]}) 2.860673338s ago: executing program 5 (id=699): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000cc0)={0x0, 0x2ca6, 0x3000, 0x1, 0x40055}, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000e00)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x2000000, 0xfffffffd, 0x4b, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x7000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 2.795798379s ago: executing program 4 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x0, 0x10, &(0x7f0000001080), 0xfffffffffffffffe}, 0x48) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2703) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000300)={0x0, 0x1, 0x5, &(0x7f0000000340)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r2, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000001140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ptrace(0x10, r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) 2.696086231s ago: executing program 0 (id=701): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000f00)=""/217, 0xd9}, {&(0x7f0000001000)=""/105, 0x69}, {&(0x7f0000003580)=""/4099, 0xa66}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/296, 0x128}, {&(0x7f0000004800)=""/70, 0x46}, {&(0x7f0000004880)=""/231, 0xe7}, {&(0x7f0000004980)=""/173, 0xad}], 0x8}, 0x100}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x18410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000004a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0x0, 0x0) mknodat$null(r2, &(0x7f0000004f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000005040)='./file0\x00', 0x200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd53}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd53}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000001500)=@vmx={0x104, 0x0, 0x2080, {0x54000, 0xdddd1000, {0x1}, 0x1, 0x1}, {"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", "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"}}) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000008c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRESHEX=r1, @ANYRES64=r5], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRESHEX=r1, @ANYRES64=r5], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) 2.603284493s ago: executing program 5 (id=702): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000006600)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000006640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000006680)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5, 0x2}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010004, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c6e6f696e746567726974792c696f636861727365743d69736f383835392d31342c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696e746567726974792c6572726f72733d636f6e74696e75652c67727071756f74612c00cef10ddd2aadfb7750b4c40e11a3323235d4e234e9fb972e6ddad1"], 0x1, 0x62c2, &(0x7f0000000140)="$eJzs3cuOHFcZB/Cvr3Mxsa0somAhNEnMJYT4GowhQJIFLNiwQN4iW5NJZOEAsg1yIgtPNBsWPAQIiSVCLFnxAFmwZccDYGmMBMoCpVBNnzOuKXdPz9ierm7X7yeNq746XdOn/O+avlRVnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4oc/+PH5TkRc/VVacDLic9GL6EaslPVaRKysnayu82LsNMcLETFYiijX3/nnRMQbEfHJ8YjtB3fXy8UXDtiP7//5H3/4ybEf/f1Pg7P//cvt3puTbnfnzm//89d7j7+9AAAA0EZFURSd9Db/VET003t7AODZl5//iyQvV89dvTln/VGr1Wr1AtZVxXj3qkVEbFbXKV8zOBwPAAtmMz5tugs0SP6t1o+IY013AphrnaY7wJHYfnB3vZPy7VSfD9ZG7flckD35b3Z2r++YNJ2mfo7JrB5fW9GL5yf0Z2VGfZgnOf9uPf+ro/Zhut1R5z8rk/Ifji59ap2cf6+ef82zk393bP5tlfPvHyr/nvwBAAAAAGCO5c//TzZ8/HfpyTflQPY7/rs2oz4AAAAAAAAAwNN22PH/+rXx/3YZ/w8AAADmVvlevfS74w+XTfoutnL5lU7Ec7XbAy2TLpZZbbofAAAAAAAAAAAAANAm/dE5vFc6EYOIeG51tSiK8qeqXh/Wk66/6Nq+/dBmTf+RBwCAkU+O167l70QsR8SV9F1/g9XV1aJYXlktVouVpfx6dri0XKxU3tfmablsaXiAF8T9YVH+suXKelXT3i9Pa6//vvK+hkXvAB2bjQYDB4CIGD0bbU96Rvqf56vFVBQnouEXOSyIffZ/FpT9n4No+nEKAAAAHL2iKIpO+jrvU+mYf7fpTgEAM5Gf/+vHBdRqtVqtVj97dVUx3r1qERGb1XXK1wyG4weABbMZnzbdBRok/1brR8SLTXcCmGudpjvAkdh+cHe9k/LtVJ8P0vju+VyQPflvdnbWy+uPm+5r5dFzTGb1+NqKXjw/ZnnZnxdm1Id5kvPv1vO/Omofpts9ef7Fno8JmzrHaFL+5XaebKA/Tcv59+r51zzV/b/R/Ltj82+rnH//UPn35A8AAAAAAHMsf/5/cpbHf8d8/r/3+O/wcTdnqv2O/66NXePo+gIAAAAAAAAAT8v2g7vr+brXfPz/C2Nu5/rPZ1POvyP/Vsr5d2v5f7V2u15l/v47D/P/94O763+8/a/P5+lB81/KM530yOqkR0Qn3VOnn6ZPsnWP2hr0huU9Dcr7Wx6d81MM3ovrcSM24tye23bT/8fD9vOP/L7BTnvRG7Vf2NPW323P6198ZN1h2b6S28/Eevw8bsS7O+1l29KU7V+e0l5Mac/59+z/rbSdpv2HPyfKejUt79Smpfsfdx/Z76vTcffz9vUv/ubckW7JwWxFb3fbqsrte7mB/uz8nxwbxi9vbdw8c+fa7ds3z0ea7Fl6IdLkKcv7/yD97P79f2XUnv/uV/fX+x8PD53/vNiK/sT8X6nMl9v76oz71oSc/zD95PzfTe3j9/9Fzn/y/v9aA/0BAAAAAAAAAAAAAACA/RRFsXOJ6NsRcSld/9PUtZkAwGzl5/8iyctnVfdmfH9q9YLXnTnrz0zrz4r56o9avYh1VTHeW9UiIv5WXad8zfDrcb8MAJhnn0XEP5vuBI2Rf4vl7/srp6eb7gwwU7c+/Oin127c2Lh5q+meAAAAAAAAAACPK4//uVYZ//l0URT3arfbM/7rO7H2pON/9vPM7gCjEwaq7h1+m/az1R32upXhxl+KSeN/D3bnJo3/3atuxwSDKe3DKe1LU9qXp7SPvdCjIuf/UmW889MRcao2/Hobxn+tj3nfBjn/lyuP5zL/r9RuV82/+P0i59/dk//Z2x/84uytDz96/foH197feH/jZxfPnz938dKly5cvn33v+o2Nc6N/G+zx0cr557GvnQfaLjn/nLn82yXn/6VUy79dcv5fTrX82yXnn1/vyb9dcv75vY/82yXn/2qq5d8uOf+vpVr+7ZLzfy3V0/Of9okmiyTn//VU2//bJef/eqrl3y45/zOpln+75PzPpvqA+a8cdb+YjZx/PsJl/2+XnH8+s0H+7ZLzv5Bq+bdLzv9iquXfLjn/N1It/3bJ+X8j1fJvl5z/pVTLv11y/t9MtfzbJed/OdXyb5ec/7dSLf92yfl/O9Xyb5ec/5upln+75Py/k2r5t0vO/7upln+75Py/l2r5t0vO/61Uy79dHn7/vxkzZszkmab/MgEAAAAAAAAAAAAAdbM4nbjpbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch1lncAP7veLzskMRBSJzWwcUwIySa7thN/0KaY8NnwVQKh0A9s17s2C45tvHYJNJJNAyUSRkUVbcNFW0CozU1FLrigFaBcoFZIraC9oL1AIFQuoiqggFSJVsBWc877vjszOzuz6x3vnjnn95PsxzNzZs47Z95zZp5d/+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS75TVznxjKsqzxJ/9re5Y9r/HvrZPb8+teudkjBAAAANbrF/nfz12frji8ijs1LfPPL/nWlxcXFxezd2/589HPLC6mGyazbHQ8y/Lboqd+8J6h5mWCx7KJoeGmy8M9Vr+lx+0jPW4f7XH7WI/bx3vcPtHj9mUbYJmtxc9j8gfbnf9ze7FJsxuy0fy23R3u9djQ+PBw/FlObii/z+LoiWw+O5XNZTMtyxfLDuXLf/WWxrremMV1DTeta2djhvzk0eNxDENhG+9uWdfSY0Y/enU2+dOfPHr8b88/e1On2nMztDxeMc7bdzXG+bFwTTHWoWw8bZM4zuGmce7s8JpsaRnnUH6/xr/bx/ncKse5ZWmYG6r9NZ/IhvN/fzvfTiPNP9ZL22lnuO5nt2ZZdmlp2O3LLFtXNpxta7lmeOn1mShmZOMxGlPpBdnImubpLauYp406u7t1nrbvE/H1vyXcb2SFMTS/TD/66FjT6/7zxSuZp1HjWa+0r7TPwX7vK2WZg3FefDt/0o93nIO7w/N/9LaV52DHudNhDqbn3TQHd/Wag8NjW/IxpxdhKL/P0hzc07L8lnxNQ3l95rbuc3D6/MNnpxc+/JG75h8+dnLu5NzpfXv2zOzbv//gwYPTJ+ZPzc0Uf1/h1i6/bdlw2gd2hW0X94GXty3bPFUXPz+27Ph7pfvhRJf9cHvbsv3eD0fan9zQxuyQy+d0sW+8s7HRJy4PZyvsY/nrc8f698P0vJv2w5Gm/bDje0qH/XBkFfthY5mzd6zuM8tI059OY1j5vWB9c3B70xxs/zzSPgf7/XmkLHNwIsyL796x8nvBzjDex6fW+nlky7I5mJ5uOPY0rkmf9ycO5qXTvLy5ccM1Y9mFhblzdz9y7Pz5c3uyUDbEC5vmSvt83db0nLJl83V4zfP18PxLHr+5w/Xbw7aauKvx18SKr1VjmXvu7v5a5e9unbdny7V7s1D6bKO3Z6d388b2HMuyz37jow9+7dHPvmbF7dnoNz82vf7P4qkvbTr+jq5w/I19/y+L9aWHemzL6Eix/25JW2e05Xjc+lKN5MeuoXzdz02v7ng8Gv5s9PH4hi7H4x1ty/b7eDza/uTi8Xio10871qf99ZwI8+TUTPfjcWOZHXvXOidHuh6Pbw11KGz/V4ROIfVFTXNnpXmb1jUyMhqe10hcQ+s83dey/GjozRrrenJv+FCYRrm6eXr7rcXyW5ruF23UPJ1sW7bf8zT97GuleTrU66dvV6b99ZwI8+KGfd3naWOZp+9Z/7Fza/xn07FzrNccHN0y1hjzaJqE+fE+W9wa5+Dd2fHsTHYqm81vHcvn01C+rql7V3esHAt/NvpYuaPLHLy9bdl+z8H0PrbS3BsaWf7k+6D99ZwI8+KJe7vPwcYyrz3Q38+ut4dr0jJNn13bf7620s+8bm7bTFdrroyEcX7jQPefzTaWOXVwrX1m9+10Z7jmmg7bqX3/XWmfms02ZjvtCON89uDK26kxnsYynzm0yvl0OMuyix+8P/95b/j9ysUL3/lyy+9dOv1O5+IH7//xtSf+aS3jB2Dw/bIo24r3uqbfTK3m9/8AAADAQIh9/3Coif4fAAAAKiP2/fF/hSf6fwAAAKiM2PePhJpUof//496L7Hjts/O/vJilZP5iEG9Pm+GBYrmYcZ0JlycXlzSuv/+Lc//zjxdXN7zhLMt+/sAfdVx+xwNxXIXJMM6nXtd6/TJfvmtV6z760MW03ub8+ufC48fns9pp0CmCO5Nl2Vev/1S+nsn3XM7r0w8czeuDlx5/rLHMc4eKy/H+z7ywWP6vQvj38IljLfd/JmyHH4Y686bO2yPe70uXX7HzwLuW1hfvN7TruvxpP/He4nHj9+R8+rFi+bidVxr/1z755Jcayz/yss7jvzjcefxPhsf9Yqj/++Ji+ebXoHE53u/jYfxxffF+d3/h6x3H/9QniuXPvr5Y7miocf23h8u7X//sfPP2emToWMvzyt5QLBfXP/OdP81vj48XH799/BNHLrdsj/b58fS/F48z3bZ8vD6uJ/qHtvU3Hqd5fsb1P/knR1u2c6/1P/XgMy9uPG77+u9sW+7sB+/I17/0eK3f2PTXH/9Ux/XF8Rz++7Mtz+fw28N+HNb/xHvDfAy3/99TxeO1f7vC0be3Hn/i8p/bfrHl+URv/Gmx/qdedTKv4xNbt13zvGuvu/TSxrbLsm+PF4/Xa/0n/+ZMy/g/f2OxPeLtMaPfvv6VxPWf+9DU6TMLF+Zn01Z99Pr8u3PeXIwnjvf6cGxtv3zkzPn3zZ2bnJmcybLJ6n6F3hX7Qqg/Lsql7ksvLjuC3vFQeD1v/suvbrvt3z4Zr/+PdxbXX35T8b718rDcp8P128Prt7b1L/fELTfm+/fQ02GEi8u/L3g9du7+74O9vt83F55/++eCON/Pvuh9+XZo3Ja/b8T9ep3j/95s8ThfCdt1MXwz864bl9bXvHz8boTL7yj293Vvv3CYi6/r34XX+y0/LB4/jis+3++FzzFf39F6vIvz4ysXh9sfP/8Wj0vheJJdKm6PS8Xtffm5GzsOL34PSXbppvzyn6XHuWlNT3MlCx9emD41f/rCI9Pn5xbOTy98+CNHHj5z4fT5I/l3eR55f6/7Lx2ftuXHp9m5/fdk+dHqTFGuss0e/9mHjs8emLltdu7EsQsnzj90du7cyeMLC8fnZhduO3bixNyHet1/fva+PXsP7Tuwd+rk/Ox9Bw8d2ndoav70mcYwikH1sH/mA1Onzx3J77Jw3z2H9tx77z0zUw+fmZ2778DMzNSFXvfP35umGvf+w6lzc6eOnZ9/eG5qYf4jc/ftObR//96e3wb48NkTC5PT5y6cnr6wMHduunguk+fzqxvvfb3uTzUtfL/4PNtuqPgivuxtd+5P38/a8MWPrvhQxSJtXyD6bPgumm8+/+zB1VyOff9oqEkV+n8AAAAgF/v+sVAT/T8AAABURuz7x0NN9P8AAABQGbHvnwg1/ZeAmvT/lcv/77i4qvXL/8v/N28v+f+a5f/fUbb8f3G8kP/vj/Xm7+uQ/1/VgvL/8v/y//L/8v/0Qdny/7Hv35plfv8PAAAAFRX7/m2hJvp/AAAAqIzY918TaqL/BwAAgMqIff/zQk1q0v/L/8v/y//L/8v/d16//P9gkv/vrmT5/4n2K+T/Nz//n9Ur/3+pn+PfhPz/1uYL8v+UUdny/7HvvzbUpCb9PwAAANRB7PuvCzXR/wMAAEBlxL7/+lAT/T8AAABURuz7t4ea1KT/l/9fV/4/Za4GN/9frFn+X/5f/l/+vyrk/7srWf5/Gfn/zc//O///QOX/W6wy/z++0v3l/7kaypb/j33/80NNatL/AwAAQB3Evv8FoSb6fwAAACifkSu7W+z7Xxhqsqz/v8IVAAAAAJsu9v03ZG1B8Jr8/l/+3/n/S3v+/1H5f/n/Qvnz/1sy+f/ykP/vTv6/h37k/y/J/8v/lzr/vyL5f66GsuX/874/m8heFGpSk/4fAAAA6iD2/TeGmuj/AQAAoDJi3/8roSb6fwAAAKiM2PfvCDWpSf8v/1+Z/P/Pml+6SuT/nf9f/j8of/7f+f/LRP6/O/n/Hpz/X/5f/l/+n75a6NgpbV7+P/b9N4Wa1KT/BwAAgDqIff/NoSb6fwAAAKiM2Pf/aqiJ/h8AAAAqI/b9O0NNatL/y/+XPP8fk6N1PP+//L/8f1Dm/P+E/H/pyP93J//fg/y//L/8v/w/fbXw/eLzbLvNyv/Hvv/FoSY16f8BAACgDmLf/5JQE/0/AAAAVEbs+18aaqL/BwAAgMqIff9kqElN+v+15P+HLsn/r+Qqn/9/bBXn/28h/78p+f8R+f9CnfL/mfx/6cj/dyf/34P8v/y//L/8P31Vtvx/7PtvCTWpSf8PAAAAdRD7/l2hJvp/AAAAqIzY998aaqL/BwAAgMqIff/uUJOa9P/O/z8Q+f9M/n8g8v/O/x/I/3cm/78x5P+7k//vQf5f/l/+X/6fvipb/j/2/S8LNalJ/w8AAAB1EPv+20JN9P8AAABQGbHvf3moif4fAAAAKiP2/beHmtSk/5f/l/+X/5f/l//vvP4Nz/9fkv/vB/n/7uT/e5D/l/+X/5f/p6/Klv+Pff8rQk1q0v8DAABAHcS+/45QE/0/AAAADLqx+I/Y998ZaqL/BwAAgMqIff9UqElN+n/5f/n/aub//1P+v8v65f9Lmv93/v++kP/vTv6/B/l/+f9+5P9HwxXy//L/bHr+P35ei5dj339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f+rmf93/v9u619X/v+lS48r/1+Q/y8X+f/u5P976Gf+f1z+v7b5/3Wd/39U/p9K2ez8f/vl2PfvCTWpSf8PAAAAdRD7/r2hJvp/AAAAqIzY9+8LNdH/AwAAQGXEvv+eUJOa9P/y//L/8v/y/87/33n98v+DSf6/u/7n/+NTlP93/n/5//7k/53/n2opW/4/9v33hprUpP8HAACAOoh9//5QE/0/AAAAVEbs+w+Emuj/AQAAoDJi338w1KQm/b/8v/y//L/8v/x/5/XL/w8m+f/unP+/B/l/+f8Bzv835pb8P2VTtvx/7PsPhZrUpP8HAACAOoh9/ytDTfT/AAAAUBmx7/+1UBP9PwAAAFRG7Pt/PdSkJv2//L/8v/y//P8m5/9He+X/x+T/5f/XQP6/O/n/HuT/5f8HOP+/wvn/rw03y/+zKcqW/499/32hJjXp/wEAAKAOYt//G6Em+n8AAACojNj3vyrURP8PAAAAlRH7/sOhJjXp/+X/Nyj/H6+U/5f/l/93/n/5/6tK/r87+f8e5P/l/6uX/+/3+f/b36YT+X86KVv+P/b9rw41qUn/DwAAAHUQ+/77Q030/wAAAFAZse9/TaiJ/h8AAAAqI/b9rw01qUn/L//v/P+bn/8fbRm7/P/S/eT/C/L/8v9rIf/fnfx/D/L/8v/y/87/T1+VLf8f+/7XhZrUpP8HAACAOoh9/+tDTfT/AAAAUBmx739DqIn+HwAAACoj9v1vDDWpSf8v/y//v/n5f+f/l/8vyP/L//eD/H938v89yP/L/8v/y//TV2XL/8e+/zdDTWrS/wMAAEAdxL7/gVAT/T8AAABURuz73xRqov8HAACAyoh9/5tDTWrS/8v/y//L/8v/y/93Xr/8/2CS/+9uwPL/v7guXC//X5D/L/f415r/H2m7fFXy/z9YKf+/ON5+f/l/roay5f9j3/+WUJOa9P8AAABQB7Hvf2uoif4fAAAAKiP2/W8LNdH/AwAAQGXEvv+3Qk1q0v/L/zfGsZRelv+X/8+vkP+X/5f/H1jy/90NWP7f+f/byP+Xe/zO/y//z3Jly//Hvv/toSY16f8BAACgDmLf/2Coif4fAAAAKiP2/e8INdH/AwAAQGXEvv+doSY16f/l/53/X/5f/l/+v/P65f8Hk/x/d/L/Pcj/y/+XLf//X/L/DLay5f9j3/9QqElN+n8AAACog9j3vyvURP8PAAAAlRH7/t8ONdH/AwAAQGXEvv/doSY16f/l/wcl/z8p/7/G/P9YuE7+X/5f/r9e5P+7k//vQf5f/r9s+X/n/2fAlS3/H/v+94SarL7/n1j1kgAAAMDV1P7rpCT2/b8TalKT3/8DAABAHcS+/3dDTfT/AAAAUBmx7/+9UJOa9P/y/4OS/3f+/8z5/+X/256P/L/8fycbl/+PR5415f/He61f/l/+X/5/cMcv/y//z3Jly//Hvv/3Q01q0v8DAABAHcS+/72hJvp/AAAAGAid/k92u9j3Hwk10f8DAABAZcS+/2ioSU36f/l/+X/5/5Lm//9i179891tvPbpH/l/+X/5/TTb0/P+Nnd/5/+X/5f8T+X/5f/l/2pUt/x/7/mOhJkuN35ud4B8AAAAGW+z7/yDUpCa//wcAAIA6iH3/8VAT/T8AAABURuz7Z0NNatL/y/9fYf5/pPXiFeX/G48h/y//X8Hz/8ftMUj5/6nxAcr/x4Ou/H9HG5r/f9dSTlz+f635/7GO17bn/4fk/1vI/695/N/MsmzDxn/xX+X/5f9pV7b8f+z750JNatL/AwAAQB2Evn/4RFGXbtD/AwAAQGXEvv9kqIn+HwAAACoj9v3vCzWpSf8v/+/8//L/8v/O/995/aXN/zv/f1fy/92VJ//fmfP/y/8P8vid/1/+n+XKlv+Pff98qElN+n8AAACog9j3vz/URP8PAAAAlRH7/g+Emuj/AeD/2buTJ0vLKo/jNyGJqgqiI3rXi15073vVaxbNqhfdf0Av2LBowyEUVJwnCucR53lAQ0UccABFnHCewAlFHFFxFnHCCVEpg8pzTuXw5nszq27mfe/zfD4Lj6SUNzUQ+FF+eQAAmpG7/8FxSyf7X/+v/2+y/z+i/x/7fP2//r9l+v9x+v859P/6f/2//p+Fmlr/n7v/IXFLJ/sfAAAAepC7/6K4xf4HAACAZuTuvzhusf8BAACgGbn7Hxq3dLL/9f/6/yb7//++84H3/pf+f7fP1//r/1um/x+n/59D/6//1//r/1moqfX/ufsfFrd0sv8BAACgB7n7Hx632P8AAADQjNz9l8Qt9j8AAAA0I3f/I+KWTvb/tv5/bdZn/58Zr/6/pf7f+/+7fr7+X//fssPt/y+77/d8+n/9v/4/6P/1//p/tpta/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/vf+v/f/9f/6f/3/8Ofr/1eT9//H9dT/X3LLuRfddd2/Xr+fz9f/6//1//p/Fmtq/X/u/sfGLZ3sfwAAAOhB7v7HxS32PwAAADQjd//j4xb7HwAAAFbQscGv5u5/QtzSyf7X/+v/9f/R/x/V/+v/9f8t0P+P66n/P53P1//r//X/+n8Wa2r9f+7+J8Ytnex/AAAA6EHu/ifFLfY/AAAATNfQ/xF7RO7+S+MW+x8AAACakbv/eNzSyf7X/x98//93/f9q9P/e/9f/6/+boP8fp/+fQ/+v/9f/6/9ZqKn1/7n7L4tbOtn/AAAA0IPc/U+OW+x/AAAAaEbu/qfELfY/AAAANCN3/1Pjlk72v/7f+//6f/3/4ff/G7+z1f+f+m9V/784+v9x+v859P9n2s+fo//X/+v/2Wyf/f89I7/bXkj/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r//X/+v/T7v93/qZ3kvf/h+n/D4f+f9xk+v+19cEv6/9Xvv/3/r/+X//PFlN7/z93/7Pilk72PwAAAPQgd/+z45aR/b/vv5gPAAAALFXu/ufELX7+HwAAAFZeVme5+58bt3Sy//X/+n/9v/7/8N//X/3+//pN35/+f1r0/+Mm0//vQv+v/1/l71//r/9np6n1/7n7nxe3dLL/AQAAoAe5+y+PW+x/AAAAaEbu/ufHLfY/AAAANCN3/wvilk72/3D/f+pfn3T/vz0Snun/k/6/7f4//x31/6P9//ne/++T/n+c/n8O/b/+X/+/W/9/bN6P1/8zZGr9f+7+F8Ytnex/AAAA6EHu/hfFLfY/AAAANCN3/4vjFvsfAAAAmpG7/yVxSyf73/v/h9j/Zyys/9f/b/v1vf+/YZXe/58dev+/rv/fo+X2/2v35h9B9f+n9/3r//X/q/z9N9n/nzPb+v7/yN8FQP/PkKn1/7n7Xxq3dLL/AQAAoAe5+18Wt9j/AAAAsBo2/38Hht6Km81q9788brH/AQAAoBm5+18Rt7Sz/0ff6tT/e/9f/6//1/8Pf/79r1ifTaf/9/7/Xnn/f5z+fw79/0H08+uN9f9X7Pbjp9D/X3pw7///57wfr/9nyJb+/4ZTX19W/5+7/5VxSzv7HwAAALqXu/9VcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/j/w/n/k7z6g/9f/6//1/9Pu/6f0/r/+f6/0/+P0/3Po/73/7/1//T9nbtOfMm7p/zdZVv+fu/+1cUsn+x8AAAB6kLv/dXGL/Q8AAADNyN1/Rdxi/wMAAEAzcve/Pm7pZP97/1//r//X/+v/hz9f/7+azqi/P0v/X/T/+n/9v/5f/88CTK3/37r7d+7/tdP4YzcAAAAwLW84+Y9H46/X9/fz/wAAANCD3P1vjFvsfwAAAGhG7v43xS2d7H/9/8H2//l1/b/+f6b/X9X+v36XqP9fDd2+/7829EeinXbp/296wPH/3foV/b/+X/+v/9f/s0f/PPKvTaL/P3Hqzy5z9785bulk/wMAAEAPcvdfGbfY/wAAANCM3P1viVvsfwAAAGhG7v6r4pZ97v+x5mHK9P/e/9f/6//1/8Of7/3/1dRt/79H3v+fQ/+v/9f/6/9ZqEn0/5t+OXf/W+MWP/8PAAAAzcjd/7a4xf4HAACAZuTuf3vcYv8DAABAM3L3vyNu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyr1/1edQf+/PvzlZffzZ2rZ37/+X//PTlPr/3P3Xx23dLL/AQAAoAe5+98Zt9j/AAAA0Izc/e+KW+x/AAAAaEbu/nfHLZ3sf/2//l//r//X/w9/vv5/Nen/x+n/Z7PZNSPfwFD/f+LINPt/7/9P7vvX/+v/2Wlq/X/u/vfELZ3sfwAAAOhB7v5r4hb7HwAAAJqRu//auMX+BwAAgGbk7n9v3NLJ/tf/6//1//p//f/w5+v/V5P+f5z+f45Vev9f/z+571//r/9np6n1/7n73xe3dLL/AQAAoAe5+6+LW+x/AAAAaEbu/vfHLfY/AAAANCN3//VxSyf7X/+v/9f/6/8H+v+T/1PX/+v/V9HB9f8z/b/+X/8/h/5f/6//Z7up9f+5+z8Qt3Sy/wEAAKAHufs/GLfY/wAAANCM3P0filvsfwAAAGhG7v4Pxy2d7H/9v/5f/6//9/7/8Ofr/1eT9//H6f/n0P/r//X/+n8Warj/v3Rp/X/u/o/ELZ3sfwAAAOhB7v4b4hb7HwAAAJqRu/+jcYv9DwAAAM3I3f+xuKWT/a//X1b/v/Gx0+v/ZzP9v/5f/79hoP+/9e4r/6l+eQH9/9GZ/n/h9P/j9P9z6P/b7P/PmjXU/x/b9cfr/5miqb3/n7v/43FLJ/sfAAAAepC7/xNxi/0PAAAAzcjd/8m4xf4HAACAZuTu/1Tc0sn+1/97/3/B7//fceHA96H/36D/X/n+3/v/K0D/P07/P4f+v83+3/v/+n+WZmr9f+7+T8ctnex/AAAA6EHu/s/ELfY/AAAANCN3/2fjFvsfAAAAmpG7/3NxSyf7X/+v/19w/+/9f/2//n8X+v/Dof8fp/+fQ//fXP+ff3av/9f/sxxT6/9z938+bulk/wMAAEAPcvffGLfY/wAAANCM3P03xS32PwAAADQjd/8X4pZO9r/+X/+v/1/N/v/olv7/7Jn+/9Svr//v21T6//PO+5+b9f/6f/3/8vt/7//r/1muqfX/ufu/GLd0sv8BAACgB7n7vxS32P8AAADQjNz9X45b7H8AAABoRu7+r8Qtnez/nf3/ObONQnXDUP8fjZr+fxP9/9bvX/8//NuH9//1//r/gzeV/t/7/6f3/ev/9f+r/P3vq///950/Xv9Pi6bW/+fuvzlu6WT/AwAAQA9y9381brH/AQAAoBm5+78Wt9j/AAAA0Izc/bfELZ3sf+//6//1//p//f/w5+v/V5P+f5z+fw79v/7f+/8X///Z+n8WZ2r9f+7+r8ctnex/AAAA6EHu/lvjFvsfAAAAmpG7/xtxi/0PAAAAzcjd/824pZP9r//X/+v/9f/6/+HP1/+vJv3/OP1/2f4fbUM//f/RoS8uu58/U8v+/pvp/73/zwJNrf/P3f+tuKWT/Q8AAAA9yN3/7bjF/gcAAIBm5O7/Ttxi/wMAAEAzcvd/N27pZP/r//X/7ff/F+r/t32+/l//3zL9f/4RfZj+f45++v9By+7nV/371//r/9lpav1/7v7b4pZO9j8AAAD0IHf/9+IW+x8AAACakbv/+3GL/Q8AAADNyN3/g7ilk/2v/++r/1+b9dj/e/9f/6//74n+f5z+fw79v/5f/6//Z6Gm1v/n7r99bb3L/Q8AAACr6v/+40G37fXXvf3kPx6d/TBuOX92Yo8/jQ0AAABM3H27f219NvvRyV/y8/8AAADQotz9P45bOtn/+v+++v8+3//X/+v/9f890f+P0//Pof/X/+v/9f8s1NT6/9z9P4lbNg2/9X3/pwQAAACmJHf/T+OWTn7+HwAAAHqQu/9nccuO/e9vBwgAAACrKnf/z+OWTn7+X/8/8f5/dkD9f/x6+v8N+n/9/9Dn6/9Xk/5/3Bn2/yfW9P/6/xH6f/2//p/tptb/5+7/RdzSyf4HAACARm35Kwq5+++IW+x/AAAAaEbu/l/GLfY/AAAANCN3/51xSyf7X/9/6P1/puoH+P7/sfpn3v/vvP+//Ojg5+v/9f8t0/+P8/7/HPr/Vvr/I/p//T/TMLX+P3f/r+KWTvY/AAAA9CB3/6/jFvsfAAAAmpG7/zdxi/0PAAAAzcjd/9u4pZP9r/+f+Pv/p9X/7+H9f/1/H/3/Lp/fTv//L+cev/GC+117tf6fUw6z/8/fFg65/z+y33/PzfT/c+j/W+n/vf+v/2ciFt//r2/54n77/9z9v4tbOtn/AAAA0IPc/XfFLfY/AAAANCN3/+/jFvsfAAAAmpG7/w9xSyf7X/+v/59K/5//XS+h/z9+2v3/sdlstpT+P5vi3vt/7//r/3fy/v84/f8c+n/9v/5f/89CLb7/3/rF/fb/ufv/GLd0sv8BAACgB7n7/xS35P5f2/dfugcAAAAmJnf/n+MWP/8PAAAAzcjdf3fc0sn+1//r/6fS/yfv/5/6cW29/39Bxal99v//Vv9M/3+w9P/j9P9z6P/1//p//T8LNbX+P3f/X+KWTvY/AAAA9CB3/z1xi/0PAAAAzcjd/9e4xf4HAACAZuTu/1vc0sn+1/+32v9nEa//1/9Ppf/3/r/3/w+H/n+c/n8O/b/+X/+v/2ehptb/5+7/RwAAAP//chpdQA==") rename(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)='./bus\x00') syz_mount_image$exfat(0x0, &(0x7f00000064c0)='./bus\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000006500)) (async) mkdir(&(0x7f0000006500)='proc_dir\x00', 0x1ff) (async) mount(0x0, &(0x7f0000006540)='proc_dir\x00', &(0x7f0000006580)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000065c0)='proc_dir/scsi/scsi\x00', 0x42, 0x183) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.427130813s ago: executing program 0 (id=703): openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x109040, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x1, 0x1, 0x2}) ioctl(r0, 0xc058560f, &(0x7f00000001c0)="00000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000002") 2.344362901s ago: executing program 0 (id=704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000f3000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000640)=""/152, 0x41000, 0xa}, 0x23) 2.256098171s ago: executing program 0 (id=705): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019500), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019540)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fc00000000", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) sendmsg$nl_generic(r4, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={0x34, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000193c0)={'dummy0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000faffffff2f0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000019240)={r9, &(0x7f0000019140)='/dev/cpu/#/msr\x00', 0x101000, &(0x7f0000019180)={@align=0x2, {0x8, 0x1, 0xaead, 0x7}}, 0x2, &(0x7f00000191c0), &(0x7f0000019200)=0x6}) clock_gettime(0x0, &(0x7f0000019280)) 2.255868417s ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 764.516001ms ago: executing program 0 (id=707): syz_mount_image$udf(&(0x7f0000002080), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x43, 0x495, &(0x7f0000000540)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x20, 0x3, 0x360, 0x98, 0xa, 0x148, 0x98, 0x10, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0xfffffffffffffffe, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x23f}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x7, 0x9, 0x1, '\x00', 'syz0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000380)=""/245) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300"], &(0x7f0000000480)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000e00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0xffffffff}, 0x48) 622.144182ms ago: executing program 2 (id=708): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 380.517817ms ago: executing program 2 (id=709): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, r0}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x1, 0x25, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 379.596577ms ago: executing program 1 (id=710): r0 = gettid() syz_emit_ethernet(0x32, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="9c07cb69f5ccc087fb23f0c5208a2fc34071012dc45961df18e58cf0a5029cff9fea8853f504f5ab3737e9b8", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) socket$inet(0x2b, 0x801, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000280)="08000100010001", 0x7) 296.085148ms ago: executing program 5 (id=711): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xa006}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) pread64(r0, &(0x7f00000003c0)=""/195, 0xc3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000004c0)={0x8, 0x1ff, 0xffffffff, 0x1, 0x8, "e32cfce4ff4d681013b88afe12cb730993be94", 0x8, 0xa}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f00000001c0)=0x6, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r6, &(0x7f0000000180)}, 0x20) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, r7, 0x782, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0xf5, @any, 0x2, 0x1}, 0xe) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) 210.916309ms ago: executing program 2 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 2 (id=713): openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x20008090) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x9) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000340)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000600)=0x3, 0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) kernel console output (not intermixed with test programs): 1): mount failed [ 91.407994][ T5824] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.798469][ T5824] usb 1-1: device descriptor read/8, error -71 [ 91.908000][ T5824] usb usb1-port1: unable to enumerate USB device [ 94.119466][ T5964] loop3: detected capacity change from 0 to 2048 [ 94.129474][ T5964] nilfs2: Unknown parameter 'CNV(\ QՂeB՚WT(1jGU (@GvuY\4ŞV?sKs&1ŖAA׼̩ *' [ 94.249469][ T5974] netlink: 'syz.1.55': attribute type 21 has an invalid length. [ 94.249600][ T5974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'. [ 94.551289][ T5969] Bluetooth: MGMT ver 1.23 [ 94.928228][ T5986] loop3: detected capacity change from 0 to 2048 [ 94.976232][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.006518][ T5986] EXT4-fs error (device loop3): ext4_find_extent:904: inode #2: comm syz.3.58: inode has invalid extent depth: 8 [ 95.021305][ T5986] EXT4-fs (loop3): Remounting filesystem read-only [ 96.528722][ T6007] loop2: detected capacity change from 0 to 4096 [ 96.533015][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.654044][ T6007] loop2: detected capacity change from 0 to 128 [ 97.159348][ T6016] loop1: detected capacity change from 0 to 256 [ 97.717229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.097016][ T5721] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 98.277755][ T5721] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.279824][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.279845][ T5721] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.282118][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.282140][ T5721] usb 3-1: Product: syz [ 98.282153][ T5721] usb 3-1: Manufacturer: syz [ 98.282166][ T5721] usb 3-1: SerialNumber: syz [ 98.328547][ T6033] capability: warning: `syz.0.74' uses 32-bit capabilities (legacy support in use) [ 98.334255][ T6033] Zero length message leads to an empty skb [ 98.359791][ T5721] usb 3-1: config 0 descriptor?? [ 98.484635][ T6035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.67'. [ 98.694343][ T6039] xt_hashlimit: size too large, truncated to 1048576 [ 102.979609][ T6058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.246878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.229215][ T5824] usb 3-1: USB disconnect, device number 2 [ 105.012215][ T6069] loop1: detected capacity change from 0 to 256 [ 105.977426][ T6075] loop3: detected capacity change from 0 to 512 [ 105.978280][ T6075] ======================================================= [ 105.978280][ T6075] WARNING: The mand mount option has been deprecated and [ 105.978280][ T6075] and is ignored by this kernel. Remove the mand [ 105.978280][ T6075] option from the mount to silence this warning. [ 105.978280][ T6075] ======================================================= [ 106.033242][ T6075] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.040546][ T6075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0002] [ 106.047308][ T6075] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.047326][ T6075] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.84: bad orphan inode 267 [ 106.047487][ T6075] loop3: lost filesystem error report for type 5 error -117 [ 106.057749][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 106.462655][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 108.565664][ T6106] loop4: detected capacity change from 0 to 256 [ 109.608936][ T6118] loop3: detected capacity change from 0 to 128 [ 109.630168][ T6118] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 109.654789][ T6118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.336973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.726715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.767635][ T6136] loop1: detected capacity change from 0 to 128 [ 111.827609][ T6136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.835143][ T6136] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.580942][ T6150] FAULT_INJECTION: forcing a failure. [ 112.580942][ T6150] name failslab, interval 1, probability 0, space 0, times 1 [ 112.580979][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 112.580999][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.581017][ T6150] Call Trace: [ 112.581023][ T6150] [ 112.581035][ T6150] dump_stack_lvl+0xe8/0x150 [ 112.581068][ T6150] should_fail_ex+0x3eb/0x540 [ 112.581094][ T6150] should_failslab+0xa8/0x100 [ 112.581118][ T6150] __kvmalloc_node_noprof+0x171/0x820 [ 112.581140][ T6150] ? bpf_compute_scc+0xc73/0xd70 [ 112.581159][ T6150] ? bpf_compute_scc+0xc73/0xd70 [ 112.581185][ T6150] bpf_compute_scc+0xc73/0xd70 [ 112.581228][ T6150] bpf_check+0x2cbf/0x3560 [ 112.581265][ T6150] ? ktime_get_with_offset+0x93/0x2d0 [ 112.581287][ T6150] ? ktime_get_with_offset+0x93/0x2d0 [ 112.581309][ T6150] ? __pfx_bpf_check+0x10/0x10 [ 112.581338][ T6150] ? bpf_obj_name_cpy+0x194/0x1e0 [ 112.581361][ T6150] bpf_prog_load+0x158f/0x1d60 [ 112.581398][ T6150] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.581440][ T6150] ? __might_fault+0xaf/0x130 [ 112.581472][ T6150] __sys_bpf+0xd86/0xe00 [ 112.581505][ T6150] ? __pfx___sys_bpf+0x10/0x10 [ 112.581542][ T6150] ? __fget_files+0x2a/0x420 [ 112.581577][ T6150] ? ksys_write+0x242/0x270 [ 112.581600][ T6150] ? __pfx_ksys_write+0x10/0x10 [ 112.581625][ T6150] __x64_sys_bpf+0xba/0xd0 [ 112.581649][ T6150] do_syscall_64+0x166/0x520 [ 112.581672][ T6150] ? trace_irq_disable+0x3b/0x140 [ 112.581694][ T6150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.581712][ T6150] ? clear_bhb_loop+0x70/0xc0 [ 112.581735][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.581753][ T6150] RIP: 0033:0x7ff58e99e559 [ 112.581780][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.581795][ T6150] RSP: 002b:00007ff58f895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.581825][ T6150] RAX: ffffffffffffffda RBX: 00007ff58ec25fa0 RCX: 00007ff58e99e559 [ 112.581838][ T6150] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 112.581849][ T6150] RBP: 00007ff58f895090 R08: 0000000000000000 R09: 0000000000000000 [ 112.581860][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.581871][ T6150] R13: 00007ff58ec26038 R14: 00007ff58ec25fa0 R15: 00007ffe7af0fcf8 [ 112.581901][ T6150] [ 112.910419][ T5603] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.897060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.257518][ T6152] loop2: detected capacity change from 0 to 1024 [ 115.276981][ T6152] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 116.165161][ T6178] loop0: detected capacity change from 0 to 256 [ 116.456942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.847092][ T6189] loop1: detected capacity change from 0 to 64 [ 117.885354][ T6186] loop3: detected capacity change from 0 to 512 [ 117.912758][ T6189] hfs: request for non-existent node 524288 in B*Tree [ 117.912774][ T6189] hfs: request for non-existent node 524288 in B*Tree [ 117.912810][ T6189] hfs: get root inode failed [ 118.416763][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 119.110404][ T6186] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.175434][ T6192] loop2: detected capacity change from 0 to 512 [ 119.200760][ T6192] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.200779][ T6192] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 119.200788][ T6192] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.200799][ T6192] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.255130][ T6186] EXT4-fs error (device loop3): ext4_quota_enable:7307: comm syz.3.118: Bad quota inum: 2, type: 1 [ 119.255287][ T6192] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.120: bad orphan inode 131083 [ 119.255309][ T6192] loop2: lost filesystem error report for type 5 error -117 [ 119.266492][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 119.266512][ C1] EXT4-fs (loop2): initial error at time 1792366201: ext4_orphan_get:1430 [ 119.266542][ C1] EXT4-fs (loop2): last error at time 1792366201: ext4_orphan_get:1430 [ 119.278716][ T6186] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 119.302620][ T6192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.521764][ T6192] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 120.168232][ T5620] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 120.366893][ T6196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.166807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 122.047484][ T6221] loop0: detected capacity change from 0 to 256 [ 122.766740][ T50] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 122.917774][ T50] usb 2-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 122.924167][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.924189][ T50] usb 2-1: Product: syz [ 122.924202][ T50] usb 2-1: Manufacturer: syz [ 122.924214][ T50] usb 2-1: SerialNumber: syz [ 122.932831][ T50] usb 2-1: config 0 descriptor?? [ 123.164586][ T50] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 124.298750][ T6226] loop1: detected capacity change from 0 to 512 [ 124.307352][ T6226] EXT4-fs: Ignoring removed nobh option [ 124.557416][ T6226] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.558656][ T6226] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.128: EA inode 11 has unexpected i_nlink=2 ref_count=18446744069414584320 [ 124.558677][ T6226] loop1: lost filesystem error report for type 5 error -117 [ 124.565581][ T6226] EXT4-fs (loop1): Remounting filesystem read-only [ 124.565855][ T6226] EXT4-fs (loop1): 1 orphan inode deleted [ 124.567709][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 125.124001][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.424608][ T6238] loop0: detected capacity change from 0 to 2048 [ 125.522422][ T6241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.818212][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818266][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.495868][ T6249] loop8: detected capacity change from 0 to 7 [ 187.507463][ T6249] Dev loop8: unable to read RDB block 7 [ 187.507503][ T6249] loop8: unable to read partition table [ 187.507732][ T6249] loop8: partition table beyond EOD, truncated [ 187.507749][ T6249] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 187.668343][ T6256] loop2: detected capacity change from 0 to 2048 [ 187.702485][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.817367][ T32] audit: type=1326 audit(1792366270.000:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f927959e559 code=0x0 [ 187.920699][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 188.003741][ T6256] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 188.011732][ T6255] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 189.663719][ T6286] loop3: detected capacity change from 0 to 256 [ 191.991471][ T6294] kernel profiling enabled (shift: 23) [ 192.049661][ T6294] loop1: detected capacity change from 0 to 128 [ 192.128637][ T6294] omfs: sysblock size (-58445445) is out of range [ 192.420089][ T6294] loop1: detected capacity change from 0 to 4096 [ 192.426376][ T6294] EXT4-fs: Ignoring removed bh option [ 192.455869][ T6294] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.616517][ T6294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.760331][ T6294] warning: `syz.1.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.626032][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.263157][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263259][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.088370][ T6334] loop4: detected capacity change from 0 to 256 [ 196.514360][ T6310] Bluetooth: hci3: command 0x0406 tx timeout [ 196.514389][ T6310] Bluetooth: hci2: command 0x0406 tx timeout [ 196.514406][ T6310] Bluetooth: hci1: command 0x0406 tx timeout [ 196.514420][ T6310] Bluetooth: hci4: command 0x0406 tx timeout [ 196.514433][ T6310] Bluetooth: hci0: command 0x0406 tx timeout [ 197.233070][ T6350] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 201.722718][ T6376] loop3: detected capacity change from 0 to 1756 [ 201.810254][ T6376] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 201.810273][ T6376] UDF-fs: Scanning with blocksize 512 failed [ 201.907960][ T6376] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 201.907980][ T6376] UDF-fs: Scanning with blocksize 1024 failed [ 201.975619][ T6376] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 201.992909][ T6376] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 202.129096][ T6381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.164'. [ 202.828675][ T6387] loop2: detected capacity change from 0 to 256 [ 205.582383][ T6399] loop0: detected capacity change from 0 to 131072 [ 205.610536][ T6399] F2FS-fs (loop0): invalid crc value [ 205.680393][ T6399] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.691816][ T6399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 208.273387][ T6415] loop4: detected capacity change from 0 to 32768 [ 208.314770][ T6415] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.186 (6415) [ 208.372736][ T6415] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 208.372777][ T6415] BTRFS info (device loop4 state S): using blake2b checksum algorithm [ 208.461971][ T44] BTRFS warning (device loop4 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xb353a08db1be80d389f100a27df3921b46d9fb12a0b3dbd8e1965f3be527cedb level 0, ignored [ 208.469537][ T6415] BTRFS warning (device loop4 state ES): devid 0 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 208.469649][ T6415] BTRFS warning (device loop4 state ES): loaded backup roots at slot 1 [ 208.522648][ T5954] BTRFS warning (device loop4 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored [ 208.522712][ T5954] BTRFS error (device loop4 state ECS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1 [ 208.526797][ T5954] BTRFS warning (device loop4 state ECS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x03f37032b0b529a92cc2d9b40919dda221d62f8bc175d07bdd8abd18d59851fb level 0, ignored [ 208.644589][ T6415] BTRFS error (device loop4 state ECS): chunk start=0 len=4194304 doesn't have corresponding block group [ 208.669122][ T58] BTRFS warning (device loop4 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xc8acb2220dd26cbeaf7e61def41ecb1d135feabf0cb66d6d38ec8a1356a8465c level 0, ignored [ 208.683070][ T6415] BTRFS info (device loop4 state ECS): allowing degraded mounts [ 208.683091][ T6415] BTRFS info (device loop4 state ECS): enabling ssd optimizations [ 208.683107][ T6415] BTRFS info (device loop4 state ECS): using spread ssd allocation scheme [ 208.683122][ T6415] BTRFS info (device loop4 state ECS): turning off barriers [ 208.683140][ T6415] BTRFS info (device loop4 state ECS): disabling log replay at mount time [ 208.683155][ T6415] BTRFS info (device loop4 state ECS): enabling free space tree [ 208.683173][ T6415] BTRFS info (device loop4 state ECS): trying to use backup root at mount time [ 208.683189][ T6415] BTRFS info (device loop4 state ECS): ignoring bad roots [ 208.683203][ T6415] BTRFS info (device loop4 state ECS): ignoring data csums [ 208.683218][ T6415] BTRFS info (device loop4 state ECS): ignoring meta csums [ 208.683236][ T6415] BTRFS info (device loop4 state ECS): ignoring unknown super block flags [ 208.683255][ T6415] BTRFS info (device loop4 state ECS): force zlib compression, level 3 [ 208.683273][ T6415] BTRFS info (device loop4 state ECS): max_inline set to 0 [ 209.118212][ T5602] BTRFS info (device loop4 state ECS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 209.784330][ T6423] loop2: detected capacity change from 0 to 32768 [ 209.820505][ T6423] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.181 (6423) [ 209.907602][ T6423] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 209.907622][ T6423] BTRFS info (device loop2): using blake2b checksum algorithm [ 210.356786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 210.766756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.032060][ T6423] BTRFS info (device loop2): enabling ssd optimizations [ 211.032084][ T6423] BTRFS info (device loop2): turning on async discard [ 211.032098][ T6423] BTRFS info (device loop2): enabling free space tree [ 211.032114][ T6423] BTRFS info (device loop2): use zstd compression, level 3 [ 211.197562][ T6423] syz.2.181 uses obsolete (PF_INET,SOCK_PACKET) [ 211.263362][ T6461] netlink: 4520 bytes leftover after parsing attributes in process `syz.0.184'. [ 211.820202][ T6467] loop1: detected capacity change from 0 to 256 [ 213.154837][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 213.850738][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 214.164329][ T5613] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.404909][ T6479] nvme nvme0: rdma connection establishment failed (-512) [ 215.973158][ T6489] loop2: detected capacity change from 0 to 256 [ 215.987057][ T6489] exfat: Deprecated parameter 'utf8' [ 217.062383][ T6489] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 217.444682][ T6501] loop8: detected capacity change from 0 to 7 [ 217.454065][ T6501] loop8: [POWERTEC] [ 217.974823][ T6508] loop2: detected capacity change from 0 to 256 [ 218.822700][ T6511] capability: warning: `syz.1.206' uses deprecated v2 capabilities in a way that may be insecure [ 218.978692][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.979006][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.048223][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.048655][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.109821][ T6518] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 220.440572][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 220.578006][ T5735] usb 5-1: device descriptor read/64, error -71 [ 220.682389][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.859064][ T5735] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.009767][ T5735] usb 5-1: device descriptor read/64, error -71 [ 221.117220][ T5735] usb usb5-port1: attempt power cycle [ 221.806725][ T5735] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 221.827556][ T5735] usb 5-1: device descriptor read/8, error -71 [ 222.973027][ T5735] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 223.099956][ T5735] usb 5-1: device descriptor read/8, error -71 [ 223.664696][ T6549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.248116][ T5735] usb usb5-port1: unable to enumerate USB device [ 224.729427][ T6553] loop4: detected capacity change from 0 to 256 [ 225.809158][ T6557] loop1: detected capacity change from 0 to 2048 [ 225.887584][ T6561] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.035281][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'. [ 228.110223][ T6567] loop1: detected capacity change from 0 to 32768 [ 228.223998][ T6567] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 228.445817][ T6567] XFS (loop1): Ending clean mount [ 229.106864][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.679786][ T6596] loop4: detected capacity change from 0 to 256 [ 230.291716][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 230.293929][ T50] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 230.314412][ T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.314434][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.346115][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.346137][ T50] usb 1-1: Product: syz [ 230.346151][ T50] usb 1-1: Manufacturer: syz [ 230.346164][ T50] usb 1-1: SerialNumber: syz [ 230.437859][ T50] usb 1-1: 0:2 : does not exist [ 230.944545][ T6605] loop3: detected capacity change from 0 to 1756 [ 230.966216][ T6605] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 230.966235][ T6605] UDF-fs: Scanning with blocksize 512 failed [ 231.001628][ T5603] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 231.021200][ T6605] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 231.021217][ T6605] UDF-fs: Scanning with blocksize 1024 failed [ 231.039231][ T6605] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 231.040940][ T6605] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 231.674633][ T6614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.723958][ T50] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 233.062132][ T6619] loop0: detected capacity change from 0 to 256 [ 233.799614][ T50] usb 1-1: USB disconnect, device number 6 [ 234.075199][ T6426] udevd[6426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.676180][ T6640] ip_tables: iptables: counters copy to user failed while replacing table [ 235.519288][ T992] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 235.670286][ T992] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.671280][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.671299][ T992] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.673479][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.673492][ T992] usb 5-1: Product: syz [ 235.673499][ T992] usb 5-1: Manufacturer: syz [ 235.673506][ T992] usb 5-1: SerialNumber: syz [ 235.776391][ T992] usb 5-1: config 0 descriptor?? [ 235.899727][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 236.591616][ T6660] loop0: detected capacity change from 0 to 128 [ 236.598758][ T6660] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 236.604664][ T6660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.263928][ T6678] loop3: detected capacity change from 0 to 128 [ 239.315147][ T6678] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.325918][ T6678] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.390242][ T6684] loop0: detected capacity change from 0 to 164 [ 239.418023][ T6678] syz.3.252 (pid 6678) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 239.746318][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 239.746344][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 239.746351][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 239.746398][ T4974] loop6: [ 239.823708][ T6678] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 240.106816][ T992] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 240.260644][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 240.268748][ T992] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2db4, bcdDevice=0.00 [ 240.271547][ T992] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.271573][ T992] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.271593][ T992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.271622][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.280709][ T992] usb 4-1: config 0 descriptor?? [ 240.309992][ T992] usbhid 4-1:0.0: can't add hid device: -22 [ 240.310050][ T992] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 240.838345][ T1240] usb 5-1: USB disconnect, device number 6 [ 240.925432][ T2261] usb 4-1: USB disconnect, device number 2 [ 241.052695][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.053789][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.089336][ T6708] fuse: Bad value for 'group_id' [ 241.089346][ T6708] fuse: Bad value for 'group_id' [ 247.042280][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.219552][ T6744] loop3: detected capacity change from 0 to 256 [ 247.489618][ T6750] loop4: detected capacity change from 0 to 32768 [ 247.548261][ T32] audit: type=1326 audit(1792366329.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.548392][ T32] audit: type=1326 audit(1792366329.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.552756][ T6750] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 247.574760][ T6740] 9p: Could not find request transport: dd [ 247.588103][ T32] audit: type=1326 audit(1792366329.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588146][ T32] audit: type=1326 audit(1792366329.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588183][ T32] audit: type=1326 audit(1792366329.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588218][ T32] audit: type=1326 audit(1792366329.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588260][ T32] audit: type=1326 audit(1792366329.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588297][ T32] audit: type=1326 audit(1792366329.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588332][ T32] audit: type=1326 audit(1792366329.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 247.588367][ T32] audit: type=1326 audit(1792366329.770:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 249.159811][ T5602] ocfs2: Unmounting device (7,4) on (node local) [ 253.532056][ T6807] FAULT_INJECTION: forcing a failure. [ 253.532056][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 253.532096][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT(full) [ 253.532117][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.532127][ T6807] Call Trace: [ 253.532135][ T6807] [ 253.532144][ T6807] dump_stack_lvl+0xe8/0x150 [ 253.532186][ T6807] should_fail_ex+0x3eb/0x540 [ 253.532213][ T6807] should_failslab+0xa8/0x100 [ 253.532237][ T6807] __kmalloc_cache_node_noprof+0xa5/0x620 [ 253.532258][ T6807] ? __get_vm_area_node+0x155/0x2f0 [ 253.532281][ T6807] ? __get_vm_area_node+0x155/0x2f0 [ 253.532317][ T6807] __get_vm_area_node+0x155/0x2f0 [ 253.532346][ T6807] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 253.532372][ T6807] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 253.532398][ T6807] ? lock_acquire+0x115/0x350 [ 253.532420][ T6807] ? __lock_acquire+0x747/0x2de0 [ 253.532453][ T6807] ? hook_capable+0x1c3/0x5e0 [ 253.532481][ T6807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.532516][ T6807] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 253.532538][ T6807] __vmalloc_noprof+0xd2/0x120 [ 253.532563][ T6807] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 253.532591][ T6807] bpf_prog_alloc_no_stats+0x47/0x550 [ 253.532617][ T6807] ? bpf_prog_alloc+0x2a/0x1a0 [ 253.532643][ T6807] bpf_prog_alloc+0x3c/0x1a0 [ 253.532670][ T6807] bpf_prog_load+0x887/0x1d60 [ 253.532708][ T6807] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.532749][ T6807] ? __might_fault+0xaf/0x130 [ 253.532781][ T6807] __sys_bpf+0xd86/0xe00 [ 253.532814][ T6807] ? __pfx___sys_bpf+0x10/0x10 [ 253.532850][ T6807] ? __fget_files+0x2a/0x420 [ 253.532883][ T6807] ? ksys_write+0x242/0x270 [ 253.532906][ T6807] ? __pfx_ksys_write+0x10/0x10 [ 253.532930][ T6807] __x64_sys_bpf+0xba/0xd0 [ 253.532956][ T6807] do_syscall_64+0x166/0x520 [ 253.532979][ T6807] ? trace_irq_disable+0x3b/0x140 [ 253.533001][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.533019][ T6807] ? clear_bhb_loop+0x70/0xc0 [ 253.533042][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.533059][ T6807] RIP: 0033:0x7f5cb399e559 [ 253.533081][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.533096][ T6807] RSP: 002b:00007f5cb48e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.533116][ T6807] RAX: ffffffffffffffda RBX: 00007f5cb3c25fa0 RCX: 00007f5cb399e559 [ 253.533130][ T6807] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 253.533141][ T6807] RBP: 00007f5cb48e9090 R08: 0000000000000000 R09: 0000000000000000 [ 253.533152][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.533163][ T6807] R13: 00007f5cb3c26038 R14: 00007f5cb3c25fa0 R15: 00007fff5ae8a878 [ 253.533193][ T6807] [ 253.547106][ T6807] syz.1.287: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 253.547270][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT(full) [ 253.547290][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.547308][ T6807] Call Trace: [ 253.547315][ T6807] [ 253.547322][ T6807] dump_stack_lvl+0xe8/0x150 [ 253.547352][ T6807] warn_alloc+0x24d/0x270 [ 253.547379][ T6807] ? __kasan_kmalloc+0x22/0xb0 [ 253.547404][ T6807] ? __pfx_warn_alloc+0x10/0x10 [ 253.547429][ T6807] ? __get_vm_area_node+0x155/0x2f0 [ 253.547459][ T6807] ? __get_vm_area_node+0x2a9/0x2f0 [ 253.547491][ T6807] __vmalloc_node_range_noprof+0x396/0x16f0 [ 253.547517][ T6807] ? lock_acquire+0x115/0x350 [ 253.547541][ T6807] ? __lock_acquire+0x747/0x2de0 [ 253.547575][ T6807] ? hook_capable+0x1c3/0x5e0 [ 253.547603][ T6807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.547638][ T6807] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 253.547662][ T6807] __vmalloc_noprof+0xd2/0x120 [ 253.547687][ T6807] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 253.547715][ T6807] bpf_prog_alloc_no_stats+0x47/0x550 [ 253.547737][ T6807] ? bpf_prog_alloc+0x2a/0x1a0 [ 253.547763][ T6807] bpf_prog_alloc+0x3c/0x1a0 [ 253.547790][ T6807] bpf_prog_load+0x887/0x1d60 [ 253.547826][ T6807] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.547866][ T6807] ? __might_fault+0xaf/0x130 [ 253.547894][ T6807] __sys_bpf+0xd86/0xe00 [ 253.547926][ T6807] ? __pfx___sys_bpf+0x10/0x10 [ 253.547958][ T6807] ? __fget_files+0x2a/0x420 [ 253.547992][ T6807] ? ksys_write+0x242/0x270 [ 253.548014][ T6807] ? __pfx_ksys_write+0x10/0x10 [ 253.548037][ T6807] __x64_sys_bpf+0xba/0xd0 [ 253.548061][ T6807] do_syscall_64+0x166/0x520 [ 253.548083][ T6807] ? trace_irq_disable+0x3b/0x140 [ 253.548104][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.548121][ T6807] ? clear_bhb_loop+0x70/0xc0 [ 253.548143][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.548159][ T6807] RIP: 0033:0x7f5cb399e559 [ 253.548175][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.548189][ T6807] RSP: 002b:00007f5cb48e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.548206][ T6807] RAX: ffffffffffffffda RBX: 00007f5cb3c25fa0 RCX: 00007f5cb399e559 [ 253.548219][ T6807] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 253.548230][ T6807] RBP: 00007f5cb48e9090 R08: 0000000000000000 R09: 0000000000000000 [ 253.548241][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.548251][ T6807] R13: 00007f5cb3c26038 R14: 00007f5cb3c25fa0 R15: 00007fff5ae8a878 [ 253.548281][ T6807] [ 253.548308][ T6807] Mem-Info: [ 253.548320][ T6807] active_anon:30508 inactive_anon:0 isolated_anon:0 [ 253.548320][ T6807] active_file:0 inactive_file:63201 isolated_file:0 [ 253.548320][ T6807] unevictable:2032 dirty:78 writeback:0 [ 253.548320][ T6807] slab_reclaimable:11699 slab_unreclaimable:97226 [ 253.548320][ T6807] mapped:29948 shmem:25665 pagetables:1109 [ 253.548320][ T6807] sec_pagetables:0 bounce:0 [ 253.548320][ T6807] kernel_misc_reclaimable:0 [ 253.548320][ T6807] free:1255520 free_pcp:34717 free_cma:0 [ 253.548365][ T6807] Node 0 active_anon:122032kB inactive_anon:0kB active_file:0kB inactive_file:252604kB unevictable:8128kB isolated(anon):0kB isolated(file):0kB mapped:119792kB dirty:312kB writeback:0kB shmem:102660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12104kB pagetables:4308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 253.553485][ T6807] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 253.553533][ T6807] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.553592][ T6807] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 253.553623][ T6807] Node 0 DMA32 free:1073544kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:121332kB inactive_anon:0kB active_file:0kB inactive_file:252604kB unevictable:8128kB writepending:312kB zspages:0kB present:3129332kB managed:2526600kB mlocked:8140kB bounce:0kB free_pcp:139488kB local_pcp:78896kB free_cma:0kB [ 253.553680][ T6807] lowmem_reserve[]: 0 0 0 0 0 [ 253.553709][ T6807] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.553757][ T6807] lowmem_reserve[]: 0 0 0 0 0 [ 253.553785][ T6807] Node 1 Normal free:3933176kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.553835][ T6807] lowmem_reserve[]: 0 0 0 0 0 [ 253.553864][ T6807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.553964][ T6807] Node 0 DMA32: 340*4kB (UM) 287*8kB (UM) 32*16kB (ME) 418*32kB (UME) 1258*64kB (UM) 799*128kB (UME) 273*256kB (UM) 95*512kB (UME) 27*1024kB (UM) 5*2048kB (ME) 175*4096kB (UM) = 1073544kB [ 253.554102][ T6807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.554188][ T6807] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3933176kB [ 253.554337][ T6807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.554352][ T6807] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.554365][ T6807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.554379][ T6807] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.554392][ T6807] 88706 total pagecache pages [ 253.554402][ T6807] 0 pages in swap cache [ 253.554409][ T6807] Free swap = 124996kB [ 253.554415][ T6807] Total swap = 124996kB [ 253.554422][ T6807] 2097051 pages RAM [ 253.554428][ T6807] 0 pages HighMem/MovableOnly [ 253.554434][ T6807] 433785 pages reserved [ 253.554439][ T6807] 0 pages cma reserved [ 254.121680][ T58] IPVS: starting estimator thread 0... [ 254.138088][ T6812] Bluetooth: MGMT ver 1.23 [ 254.138124][ T6812] Bluetooth: hci0: unsupported parameter 5135 [ 254.138137][ T6812] Bluetooth: hci0: unsupported parameter 8192 [ 254.138151][ T6812] Bluetooth: hci0: unsupported parameter 5135 [ 254.138162][ T6812] Bluetooth: hci0: unsupported parameter 8192 [ 254.194232][ T6812] 9p: Bad value for 'rfdno' [ 254.236933][ T6814] IPVS: using max 31 ests per chain, 74400 per kthread [ 254.997810][ T6821] FAULT_INJECTION: forcing a failure. [ 254.997810][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.997857][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(full) [ 254.997878][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.997888][ T6821] Call Trace: [ 254.997896][ T6821] [ 254.997904][ T6821] dump_stack_lvl+0xe8/0x150 [ 254.997935][ T6821] should_fail_ex+0x3eb/0x540 [ 254.997951][ T6821] _copy_to_user+0x31/0xb0 [ 254.997966][ T6821] simple_read_from_buffer+0xe1/0x170 [ 254.997986][ T6821] proc_fail_nth_read+0x1bb/0x230 [ 254.998002][ T6821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.998016][ T6821] ? rw_verify_area+0x24a/0x4c0 [ 254.998028][ T6821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.998040][ T6821] vfs_read+0x213/0xa80 [ 254.998054][ T6821] ? __pfx___mutex_lock+0x10/0x10 [ 254.998069][ T6821] ? __pfx_vfs_read+0x10/0x10 [ 254.998080][ T6821] ? __fget_files+0x2a/0x420 [ 254.998090][ T6821] ? __fget_files+0x3a2/0x420 [ 254.998098][ T6821] ? __fget_files+0x2a/0x420 [ 254.998110][ T6821] ? fdget+0x1ac/0x250 [ 254.998123][ T6821] ksys_read+0x150/0x270 [ 254.998136][ T6821] ? __pfx_ksys_read+0x10/0x10 [ 254.998152][ T6821] do_syscall_64+0x166/0x520 [ 254.998166][ T6821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.998176][ T6821] ? clear_bhb_loop+0x70/0xc0 [ 254.998189][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.998202][ T6821] RIP: 0033:0x7f0514b5ed8e [ 254.998212][ T6821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.998221][ T6821] RSP: 002b:00007f0515af2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.998232][ T6821] RAX: ffffffffffffffda RBX: 00007f0515af36c0 RCX: 00007f0514b5ed8e [ 254.998240][ T6821] RDX: 000000000000000f RSI: 00007f0515af30a0 RDI: 0000000000000006 [ 254.998246][ T6821] RBP: 00007f0515af3090 R08: 0000000000000000 R09: 0000000000000000 [ 254.998252][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.998258][ T6821] R13: 00007f0514e26128 R14: 00007f0514e26090 R15: 00007ffce9da1148 [ 254.998274][ T6821] [ 255.817027][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817081][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.104125][ T6825] No source specified [ 256.357097][ T2261] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 256.630991][ T6837] loop4: detected capacity change from 0 to 256 [ 257.206680][ T2261] usb 3-1: device descriptor read/64, error -71 [ 257.457267][ T2261] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.598664][ T2261] usb 3-1: device descriptor read/64, error -71 [ 257.650633][ T32] kauditd_printk_skb: 33 callbacks suppressed [ 257.650647][ T32] audit: type=1326 audit(1792366339.840:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.650688][ T32] audit: type=1326 audit(1792366339.840:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.652355][ T32] audit: type=1326 audit(1792366339.840:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.652397][ T32] audit: type=1326 audit(1792366339.840:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.652432][ T32] audit: type=1326 audit(1792366339.840:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.652689][ T32] audit: type=1326 audit(1792366339.840:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb395ed8e code=0x7ffc0000 [ 257.655235][ T32] audit: type=1326 audit(1792366339.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.655275][ T32] audit: type=1326 audit(1792366339.840:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.655309][ T32] audit: type=1326 audit(1792366339.840:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.655343][ T32] audit: type=1326 audit(1792366339.840:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.299" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb399e559 code=0x7ffc0000 [ 257.712921][ T2261] usb usb3-port1: attempt power cycle [ 258.795651][ T6857] ipt_REJECT: TCP_RESET invalid for non-tcp [ 258.812025][ T2261] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.929192][ T2261] usb 3-1: device descriptor read/8, error -71 [ 259.339528][ T2261] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.370576][ T2261] usb 3-1: device descriptor read/8, error -71 [ 260.590520][ T2261] usb usb3-port1: unable to enumerate USB device [ 260.702851][ T6876] loop4: detected capacity change from 0 to 64 [ 260.737702][ T6876] hfs: request for non-existent node 524288 in B*Tree [ 260.737717][ T6876] hfs: request for non-existent node 524288 in B*Tree [ 260.737739][ T6876] hfs: get root inode failed [ 260.768978][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 260.768998][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 260.769010][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 260.769065][ T4974] loop6: [ 261.096866][ T992] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 261.177061][ T50] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 261.257726][ T992] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.258847][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.258867][ T992] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.291061][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.291082][ T992] usb 3-1: Product: syz [ 261.291095][ T992] usb 3-1: Manufacturer: syz [ 261.291108][ T992] usb 3-1: SerialNumber: syz [ 261.319178][ T992] usb 3-1: config 0 descriptor?? [ 261.337309][ T50] usb 1-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 261.341039][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.341059][ T50] usb 1-1: Product: syz [ 261.341073][ T50] usb 1-1: Manufacturer: syz [ 261.341085][ T50] usb 1-1: SerialNumber: syz [ 261.379348][ T50] usb 1-1: config 0 descriptor?? [ 261.388744][ T2261] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 261.656833][ T2261] usb 5-1: Using ep0 maxpacket: 8 [ 261.657543][ T2261] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.658503][ T2261] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 261.658546][ T2261] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.658565][ T2261] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.659619][ T2261] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.659642][ T2261] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.659678][ T2261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.832370][ T50] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 007 [ 261.998031][ T6895] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 262.062277][ T6895] netlink: 64 bytes leftover after parsing attributes in process `syz.3.301'. [ 262.062336][ T6895] netlink: 64 bytes leftover after parsing attributes in process `syz.3.301'. [ 262.062365][ T6895] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 262.752481][ T2261] usb 5-1: GET_CAPABILITIES returned 0 [ 262.752528][ T2261] usbtmc 5-1:16.0: can't read capabilities [ 263.008807][ T6888] loop1: detected capacity change from 0 to 256 [ 263.170030][ T5735] usb 5-1: USB disconnect, device number 7 [ 263.859476][ T6880] i2c i2c-1: failure writing data [ 264.082272][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.082697][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.217133][ T992] usb 3-1: USB disconnect, device number 7 [ 264.739179][ T6935] loop2: detected capacity change from 0 to 256 [ 264.749689][ T6935] exfat: Unknown parameter '00000000000000000000000' [ 264.869519][ T32] kauditd_printk_skb: 13 callbacks suppressed [ 264.869536][ T32] audit: type=1326 audit(1792366347.050:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869574][ T32] audit: type=1326 audit(1792366347.050:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869612][ T32] audit: type=1326 audit(1792366347.050:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869649][ T32] audit: type=1326 audit(1792366347.050:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869684][ T32] audit: type=1326 audit(1792366347.050:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869718][ T32] audit: type=1326 audit(1792366347.050:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 264.869753][ T32] audit: type=1326 audit(1792366347.050:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 265.026214][ T992] usb 1-1: USB disconnect, device number 7 [ 265.059336][ T32] audit: type=1326 audit(1792366347.250:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 265.059379][ T32] audit: type=1326 audit(1792366347.250:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 265.059414][ T32] audit: type=1326 audit(1792366347.250:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e99e559 code=0x7fc00000 [ 265.269004][ T6937] loop3: detected capacity change from 0 to 512 [ 265.317773][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.317867][ T6937] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.524576][ T6940] loop1: detected capacity change from 0 to 256 [ 265.901793][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.033130][ T6978] xt_hashlimit: size too large, truncated to 1048576 [ 267.799368][ T992] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.056702][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 268.059687][ T6968] ip_tables: iptables: counters copy to user failed while replacing table [ 268.078233][ T6984] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 268.106299][ T6968] ip6gretap0: entered promiscuous mode [ 268.134861][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.134906][ T992] usb 5-1: New USB device found: idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 268.165930][ T992] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 268.165953][ T992] usb 5-1: config 3 has no interface number 0 [ 268.165992][ T992] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 268.166016][ T992] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 268.166038][ T992] usb 5-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 268.166058][ T992] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 268.166106][ T992] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 268.166126][ T992] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 268.166148][ T992] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 268.166170][ T992] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 268.166192][ T992] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 268.166213][ T992] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024 [ 268.166233][ T992] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 268.166252][ T992] usb 5-1: config 3 interface 74 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 268.166274][ T992] usb 5-1: config 3 interface 74 has no altsetting 0 [ 268.382467][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.382483][ T992] usb 5-1: Product: syz [ 268.382490][ T992] usb 5-1: Manufacturer: syz [ 268.382497][ T992] usb 5-1: SerialNumber: syz [ 268.398422][ T6970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.398645][ T6970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.398866][ T6970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.667788][ T6976] loop0: detected capacity change from 0 to 256 [ 268.797550][ T6970] loop4: detected capacity change from 0 to 1024 [ 269.141514][ T6970] fuse: Bad value for 'fd' [ 269.169194][ T992] ipaq 5-1:3.74: PocketPC PDA converter detected [ 269.169489][ T992] usb 5-1: active config #3 != 1 ?? [ 269.275945][ T992] usb 5-1: USB disconnect, device number 8 [ 269.697374][ T1240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 269.848332][ T1240] usb 4-1: Using ep0 maxpacket: 16 [ 269.850366][ T1240] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 269.856096][ T1240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.856109][ T1240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.900182][ T1240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.900205][ T1240] usb 4-1: Product: syz [ 269.900219][ T1240] usb 4-1: Manufacturer: syz [ 269.900232][ T1240] usb 4-1: SerialNumber: syz [ 269.959764][ T1240] usb 4-1: 0:2 : does not exist [ 270.176948][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.177248][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.177485][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.177721][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.177955][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.218708][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.218958][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.219181][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.219404][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.219632][ T6996] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 270.556891][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.344'. [ 270.567084][ T7008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.342'. [ 270.732294][ T7003] loop3: detected capacity change from 0 to 1024 [ 270.776581][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 270.818074][ T7003] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 271.042862][ T992] usb 4-1: USB disconnect, device number 3 [ 272.392270][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 272.431683][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 272.431705][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 272.431716][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 272.431773][ T4974] loop6: [ 273.188960][ T7028] loop3: detected capacity change from 0 to 256 [ 274.526985][ T5745] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 274.687199][ T5745] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 274.704564][ T5745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.704612][ T5745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 274.704637][ T5745] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 274.704674][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.837162][ T7039] overlay: Unknown parameter 'fsuuid' [ 274.891174][ T7039] loop1: detected capacity change from 0 to 256 [ 274.909669][ T7039] vfat: Unknown parameter 'u' [ 274.939472][ T7039] comedi comedi4: bad chanlist[0]=0x00080000 chan=0 range length=2 [ 276.817600][ T5745] cxacru_cm: 834 callbacks suppressed [ 276.817617][ T5745] cxacru 5-1:1.0: send of cm 0x90 failed (-104) [ 276.843031][ T7051] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 277.475876][ T7061] loop2: detected capacity change from 0 to 256 [ 278.085919][ T7057] loop1: detected capacity change from 0 to 2048 [ 278.135164][ T7057] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 278.201758][ T7057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.383195][ T5824] usb 5-1: USB disconnect, device number 9 [ 279.033995][ T7076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.337053][ T7080] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 279.337073][ T7080] device-mapper: raid: Choosing default region size of 4MiB [ 279.633151][ T7063] loop0: detected capacity change from 0 to 32768 [ 280.230047][ T7063] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.328221][ T7063] XFS (loop0): Ending clean mount [ 280.476002][ T5611] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.533426][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 280.550885][ T7080] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT) [ 280.550911][ T7080] device-mapper: ioctl: error adding target to table [ 280.767336][ T27] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 280.770711][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.770724][ T27] usb 4-1: Product: syz [ 280.770731][ T27] usb 4-1: Manufacturer: syz [ 280.770739][ T27] usb 4-1: SerialNumber: syz [ 280.776076][ T27] usb 4-1: config 0 descriptor?? [ 281.133861][ T7104] loop4: detected capacity change from 0 to 256 [ 281.737334][ T27] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 004 [ 281.959950][ T7095] i2c i2c-1: failure writing data [ 282.104737][ T7108] validate_nla: 55 callbacks suppressed [ 282.104755][ T7108] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 282.104769][ T7108] nbd: illegal input index 1056964904 [ 282.514814][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.528530][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.992715][ T992] usb 4-1: USB disconnect, device number 4 [ 283.377972][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 283.616724][ T27] usb 3-1: device descriptor read/64, error -71 [ 284.166756][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 284.379029][ T27] usb 3-1: device descriptor read/64, error -71 [ 284.615906][ T7138] loop3: detected capacity change from 0 to 256 [ 285.142463][ T27] usb usb3-port1: attempt power cycle [ 286.720811][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.250903][ T27] usb 3-1: device not accepting address 10, error -71 [ 287.911874][ T7155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.375'. [ 288.105305][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.105571][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.129570][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.130001][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.232352][ T7158] loop1: detected capacity change from 0 to 512 [ 288.254054][ T7160] loop8: detected capacity change from 0 to 7 [ 288.256229][ T7160] Dev loop8: unable to read RDB block 7 [ 288.256267][ T7160] loop8: unable to read partition table [ 288.256445][ T7160] loop8: partition table beyond EOD, truncated [ 288.256461][ T7160] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 288.290064][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.290686][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.040825][ T7169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.370986][ T7177] loop1: detected capacity change from 0 to 256 [ 291.735188][ T7188] loop4: detected capacity change from 0 to 1756 [ 291.805666][ T7188] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 291.805686][ T7188] UDF-fs: Scanning with blocksize 512 failed [ 291.854924][ T7188] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 291.854941][ T7188] UDF-fs: Scanning with blocksize 1024 failed [ 291.890613][ T7188] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 291.898552][ T7188] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 293.127414][ T7203] loop0: detected capacity change from 0 to 32768 [ 293.150528][ T7203] (syz.0.393,7203,0):ocfs2_check_dir_entry:357 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=56, inode=1407374883553348, rec_len=0, name_len=18 [ 293.150749][ T7203] (syz.0.393,7203,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 293.150770][ T7203] (syz.0.393,7203,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 293.150789][ T7203] (syz.0.393,7203,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 293.150809][ T7203] (syz.0.393,7203,0):ocfs2_initialize_super:2216 ERROR: status = -22 [ 293.150921][ T7203] (syz.0.393,7203,0):ocfs2_fill_super:1185 ERROR: status = -22 [ 293.513851][ T7206] loop2: detected capacity change from 0 to 256 [ 294.150492][ T7204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 296.667526][ T7226] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 296.942242][ T7231] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 296.951330][ T7231] netlink: 64 bytes leftover after parsing attributes in process `syz.0.415'. [ 296.951392][ T7231] netlink: 64 bytes leftover after parsing attributes in process `syz.0.415'. [ 296.951421][ T7231] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 299.730180][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.730666][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.339767][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.375637][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.602084][ T7255] loop4: detected capacity change from 0 to 64 [ 300.670490][ T7255] hfs: request for non-existent node 524288 in B*Tree [ 300.670501][ T7255] hfs: request for non-existent node 524288 in B*Tree [ 300.670514][ T7255] hfs: get root inode failed [ 302.105345][ T7241] loop0: detected capacity change from 0 to 32768 [ 302.146348][ T7241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.418 (7241) [ 302.186830][ T7241] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.186857][ T7241] BTRFS info (device loop0): using sha256 checksum algorithm [ 302.232644][ T7241] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 302.233298][ T7241] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 302.256508][ T7241] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 302.268460][ T7241] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 302.494046][ T7241] BTRFS error (device loop0): open_ctree failed: -ENOMEM [ 303.448757][ T7293] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 303.457667][ T7293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.427'. [ 303.457702][ T7293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.427'. [ 303.457730][ T7293] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 303.947844][ T7285] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.419673][ T7315] ip_tables: iptables: counters copy to user failed while replacing table [ 307.639156][ T7318] loop4: detected capacity change from 0 to 512 [ 307.730970][ T7318] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 308.123726][ T7324] loop4: detected capacity change from 0 to 32768 [ 308.124303][ T7324] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 308.132364][ T7324] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.439 (7324) [ 308.162941][ T7324] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 308.162966][ T7324] BTRFS info (device loop4): using crc32c checksum algorithm [ 308.274780][ T7324] BTRFS info (device loop4): rebuilding free space tree [ 308.309293][ T7324] BTRFS info (device loop4): disabling free space tree [ 308.309366][ T7324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.309386][ T7324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.344543][ T7324] BTRFS info (device loop4): enabling ssd optimizations [ 308.344565][ T7324] BTRFS info (device loop4): turning on async discard [ 308.344580][ T7324] BTRFS info (device loop4): force clearing of disk cache [ 308.344596][ T7324] BTRFS info (device loop4): use zstd compression, level 3 [ 308.383006][ T7336] loop3: detected capacity change from 0 to 512 [ 308.383960][ T7336] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.401620][ T7336] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.401643][ T7336] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 308.421726][ T7336] EXT4-fs error (device loop3): ext4_clear_blocks:893: inode #13: comm syz.3.440: attempt to clear invalid blocks 2 len 1 [ 308.421754][ T7336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 308.446617][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 308.446635][ C0] EXT4-fs (loop3): initial error at time 1792366390: ext4_clear_blocks:893: inode 13 [ 308.446663][ C0] EXT4-fs (loop3): last error at time 1792366390: ext4_clear_blocks:893: inode 13 [ 308.573243][ T7336] EXT4-fs (loop3): Remounting filesystem read-only [ 308.574148][ T7336] EXT4-fs (loop3): 1 truncate cleaned up [ 309.038182][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.366211][ T5602] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 310.043727][ T6722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.762879][ T7362] FAULT_INJECTION: forcing a failure. [ 310.762879][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 310.763525][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(full) [ 310.763548][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.763564][ T7362] Call Trace: [ 310.763571][ T7362] [ 310.763586][ T7362] dump_stack_lvl+0xe8/0x150 [ 310.763620][ T7362] should_fail_ex+0x3eb/0x540 [ 310.763647][ T7362] should_failslab+0xa8/0x100 [ 310.763673][ T7362] __kmalloc_cache_noprof+0x9e/0x600 [ 310.763691][ T7362] ? __kmalloc_cache_noprof+0x148/0x600 [ 310.763708][ T7362] ? snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 310.763730][ T7362] ? snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 310.763767][ T7362] snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 310.763791][ T7362] ? preempt_schedule_thunk+0x16/0x40 [ 310.763815][ T7362] ? preempt_schedule_common+0x7f/0xd0 [ 310.763838][ T7362] ? preempt_schedule_thunk+0x16/0x40 [ 310.763865][ T7362] ? __mutex_lock+0x31b/0x15a0 [ 310.763898][ T7362] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 310.763920][ T7362] ? irqentry_exit+0x2a0/0x9b0 [ 310.763941][ T7362] ? snd_pcm_oss_write+0x201/0xba0 [ 310.763964][ T7362] ? __pfx___mutex_lock+0x10/0x10 [ 310.763998][ T7362] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 310.764028][ T7362] snd_pcm_oss_write+0x26e/0xba0 [ 310.764066][ T7362] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 310.764086][ T7362] vfs_write+0x296/0xba0 [ 310.764109][ T7362] ? __fget_files+0x2a/0x420 [ 310.764129][ T7362] ? __pfx_vfs_write+0x10/0x10 [ 310.764152][ T7362] ? __fget_files+0x3a9/0x420 [ 310.764176][ T7362] ? fdget+0x1ac/0x250 [ 310.764201][ T7362] ksys_write+0x150/0x270 [ 310.764223][ T7362] ? __pfx_ksys_write+0x10/0x10 [ 310.764254][ T7362] do_syscall_64+0x166/0x520 [ 310.764277][ T7362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.764296][ T7362] ? clear_bhb_loop+0x70/0xc0 [ 310.764319][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.764337][ T7362] RIP: 0033:0x7f5cb399e559 [ 310.764355][ T7362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.764369][ T7362] RSP: 002b:00007f5cb48c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.764389][ T7362] RAX: ffffffffffffffda RBX: 00007f5cb3c26090 RCX: 00007f5cb399e559 [ 310.764403][ T7362] RDX: 000000000000ffaa RSI: 0000200000019400 RDI: 0000000000000004 [ 310.764414][ T7362] RBP: 00007f5cb48c8090 R08: 0000000000000000 R09: 0000000000000000 [ 310.764425][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.764436][ T7362] R13: 00007f5cb3c26128 R14: 00007f5cb3c26090 R15: 00007fff5ae8a878 [ 310.764467][ T7362] [ 311.773307][ T6722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.920165][ T6722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.945132][ T7365] loop2: detected capacity change from 0 to 512 [ 312.795091][ T7365] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 312.817787][ T7365] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 312.817810][ T7365] loop2: lost filesystem error report for type 5 error -12 [ 312.828462][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 312.828482][ C1] EXT4-fs (loop2): initial error at time 1792366395: ext4_process_orphan:346 [ 312.828504][ C1] EXT4-fs (loop2): last error at time 1792366395: ext4_process_orphan:346 [ 312.838997][ T7365] EXT4-fs (loop2): 1 truncate cleaned up [ 312.853248][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.982610][ T6722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.687802][ T7344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.702559][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.019658][ T7378] FAULT_INJECTION: forcing a failure. [ 314.019658][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.019705][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.2.448 Not tainted syzkaller #0 PREEMPT(full) [ 314.019726][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.019737][ T7378] Call Trace: [ 314.019744][ T7378] [ 314.019752][ T7378] dump_stack_lvl+0xe8/0x150 [ 314.019785][ T7378] should_fail_ex+0x3eb/0x540 [ 314.019812][ T7378] copy_fpstate_to_sigframe+0xa83/0xd20 [ 314.019844][ T7378] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 314.019875][ T7378] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 314.019907][ T7378] ? ktime_get+0x45/0x220 [ 314.019930][ T7378] ? ktime_get+0x45/0x220 [ 314.019950][ T7378] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 314.019971][ T7378] ? ktime_get+0x1f5/0x220 [ 314.019992][ T7378] ? fpu__alloc_mathframe+0xac/0x130 [ 314.020023][ T7378] get_sigframe+0x603/0x830 [ 314.020053][ T7378] ? __pfx_get_sigframe+0x10/0x10 [ 314.020084][ T7378] x64_setup_rt_frame+0x163/0xc50 [ 314.020113][ T7378] ? _raw_spin_unlock_irq+0x2e/0x50 [ 314.020129][ T7378] ? get_signal+0x10d8/0x12c0 [ 314.020152][ T7378] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 314.020181][ T7378] arch_do_signal_or_restart+0x456/0x860 [ 314.020205][ T7378] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 314.020228][ T7378] ? do_sys_openat2+0x18d/0x200 [ 314.020262][ T7378] exit_to_user_mode_loop+0x10e/0x770 [ 314.020279][ T7378] ? rcu_is_watching+0x16/0xb0 [ 314.020302][ T7378] do_syscall_64+0x328/0x520 [ 314.020321][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.020336][ T7378] ? clear_bhb_loop+0x70/0xc0 [ 314.020354][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.020368][ T7378] RIP: 0033:0x7ff58e99e559 [ 314.020382][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.020395][ T7378] RSP: 002b:00007ff58f895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.020411][ T7378] RAX: 0000000000000005 RBX: 00007ff58ec25fa0 RCX: 00007ff58e99e559 [ 314.020421][ T7378] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 314.020430][ T7378] RBP: 00007ff58ea35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 314.020439][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.020448][ T7378] R13: 00007ff58ec26038 R14: 00007ff58ec25fa0 R15: 00007ffe7af0fcf8 [ 314.020471][ T7378] [ 314.213632][ T6722] bridge_slave_1: left allmulticast mode [ 314.213667][ T6722] bridge_slave_1: left promiscuous mode [ 314.216144][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.298830][ T6722] bridge_slave_0: left allmulticast mode [ 314.298851][ T6722] bridge_slave_0: left promiscuous mode [ 314.299042][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.671855][ T7386] loop1: detected capacity change from 0 to 8192 [ 314.811845][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.814902][ T7393] loop0: detected capacity change from 0 to 256 [ 314.850304][ T7393] exFAT-fs (loop0): error, The cluster chain has a loop [ 314.850320][ T7393] exFAT-fs (loop0): Filesystem has been set read-only [ 314.850330][ T7393] exFAT-fs (loop0): failed to count the number of clusters in root [ 314.850338][ T7393] exFAT-fs (loop0): failed to recognize exfat type [ 314.892076][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.923634][ T6722] bond0 (unregistering): Released all slaves [ 315.045995][ T7398] loop0: detected capacity change from 0 to 128 [ 315.262302][ T7398] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.267302][ T7398] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.411596][ T7393] EXT4-fs (loop0): shut down requested (2) [ 315.987355][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.007281][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.009022][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.013220][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.032920][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.104023][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.338280][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.338337][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.446508][ T7426] netlink: 220 bytes leftover after parsing attributes in process `syz.0.458'. [ 317.446535][ T7426] tc_dump_action: action bad kind [ 317.781558][ T7435] loop2: detected capacity change from 0 to 8 [ 318.098239][ T5609] Bluetooth: hci4: command tx timeout [ 318.196227][ T7435] unable to read inode lookup table [ 318.452393][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.927149][ T7446] loop2: detected capacity change from 0 to 256 [ 319.945878][ T7446] vfat: Unknown parameter '' [ 320.102097][ T7454] 9p: Bad value for 'rfdno' [ 320.177198][ T5609] Bluetooth: hci4: command tx timeout [ 320.188466][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 320.188485][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 320.188495][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 320.188551][ T4974] loop6: [ 320.445541][ T6722] hsr_slave_0: left promiscuous mode [ 320.462342][ T6722] hsr_slave_1: left promiscuous mode [ 320.997823][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.997869][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.048562][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.048582][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.184321][ T6722] veth1_macvtap: left promiscuous mode [ 321.184373][ T6722] veth0_macvtap: left promiscuous mode [ 321.184473][ T6722] veth1_vlan: left promiscuous mode [ 321.184553][ T6722] veth0_vlan: left promiscuous mode [ 321.711123][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.724218][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.726543][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.748649][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.980506][ T6722] team0 (unregistering): Port device team_slave_1 removed [ 321.986357][ T7481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.005611][ T6722] team0 (unregistering): Port device team_slave_0 removed [ 322.125247][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 322.150370][ T7409] rxe_eth0 speed is unknown, defaulting to 1000 [ 322.152319][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 322.167491][ T5735] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 322.259199][ T5609] Bluetooth: hci4: command tx timeout [ 322.311047][ T5735] usb 1-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 322.311916][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 322.311933][ T5735] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 322.311945][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 322.311955][ T5735] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 322.318395][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.318415][ T5735] usb 1-1: Product: syz [ 322.318434][ T5735] usb 1-1: Manufacturer: syz [ 322.318447][ T5735] usb 1-1: SerialNumber: syz [ 322.347227][ T5735] usb 1-1: config 0 descriptor?? [ 322.379699][ T5735] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 323.639132][ T5735] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 323.840883][ T5735] usb 1-1: USB disconnect, device number 8 [ 324.096069][ T6722] IPVS: stop unused estimator thread 0... [ 324.245656][ T7501] loop2: detected capacity change from 0 to 512 [ 324.296275][ T7501] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 324.296292][ T7501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.296307][ T7501] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 324.336942][ T5609] Bluetooth: hci4: command tx timeout [ 324.379535][ T7501] loop2: detected capacity change from 0 to 512 [ 324.400166][ T7501] EXT4-fs (loop2): DAX unsupported by block device. [ 325.186577][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.186765][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.186881][ T7409] bridge_slave_0: entered allmulticast mode [ 325.190412][ T7409] bridge_slave_0: entered promiscuous mode [ 325.222387][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.222488][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.222601][ T7409] bridge_slave_1: entered allmulticast mode [ 325.224959][ T7409] bridge_slave_1: entered promiscuous mode [ 325.290324][ T7409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.293333][ T7409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.001769][ T7530] loop0: detected capacity change from 0 to 512 [ 326.002758][ T7530] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.039866][ T7530] EXT4-fs (loop0): orphan cleanup on readonly fs [ 326.039888][ T7530] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 326.078915][ T7530] EXT4-fs error (device loop0): ext4_clear_blocks:893: inode #13: comm syz.0.479: attempt to clear invalid blocks 2 len 1 [ 326.078950][ T7530] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 326.085344][ T7409] team0: Port device team_slave_0 added [ 326.085616][ T7530] EXT4-fs (loop0): Remounting filesystem read-only [ 326.085782][ T7532] loop2: detected capacity change from 0 to 128 [ 326.086102][ T7530] EXT4-fs (loop0): 1 truncate cleaned up [ 326.089703][ T7532] ext4: Unknown parameter 'obj_type' [ 326.121534][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.158226][ T6723] IPVS: starting estimator thread 0... [ 326.180600][ T7409] team0: Port device team_slave_1 added [ 326.250251][ T7535] IPVS: using max 28 ests per chain, 67200 per kthread [ 326.338954][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.368569][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 326.399220][ T7409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.399233][ T7409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.399255][ T7409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.402590][ T7409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.402602][ T7409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.402621][ T7409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.969995][ T7546] process 'syz.0.481' launched '/dev/fd/6' with NULL argv: empty string added [ 327.988374][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 328.030968][ T7409] hsr_slave_0: entered promiscuous mode [ 328.040295][ T7409] hsr_slave_1: entered promiscuous mode [ 328.040917][ T7409] debugfs: 'hsr0' already exists in 'hsr' [ 328.040934][ T7409] Cannot create hsr debugfs directory [ 328.421696][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.422931][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.482073][ T7557] i2c i2c-1: adapter quirk: no zero length (addr 0x0050, size 0, read) [ 328.798915][ T7546] nvme nvme0: failed to connect socket: -111 [ 329.061985][ T7409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.078739][ T7409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.079480][ T7409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.117932][ T7409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.123952][ T7409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.146883][ T7409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.147672][ T7409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.171095][ T7409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.441631][ T7579] loop2: detected capacity change from 0 to 512 [ 329.462659][ T7579] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 329.462675][ T7579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 329.462690][ T7579] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 329.625909][ T7409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.740567][ T7409] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.758821][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.758921][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.937351][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.937468][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.400216][ T7557] loop1: detected capacity change from 0 to 32768 [ 330.440781][ T7557] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 330.494268][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 330.508375][ T7598] fuse: Unknown parameter 'fdֳ̡ohj ɁUp}KX4E8AJ{9mxOދ:gMjW+Lb K)7|LygWf1U1^)IKK ' [ 330.535722][ T7598] netlink: 'syz.2.490': attribute type 12 has an invalid length. [ 330.535740][ T7598] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 330.535752][ T7598] netlink: 148 bytes leftover after parsing attributes in process `syz.2.490'. [ 330.641731][ T7557] XFS (loop1): Ending clean mount [ 332.468036][ T5603] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 332.709676][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 332.709698][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 332.746973][ T6725] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.757074][ T6725] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.757113][ T6725] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.757143][ T6725] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.997889][ T7409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.246371][ T7649] overlayfs: upper fs does not support file handles, falling back to index=off. [ 333.586701][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 333.747642][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 333.749608][ T27] usb 1-1: New USB device found: idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 333.755396][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.755419][ T27] usb 1-1: Product: syz [ 333.755432][ T27] usb 1-1: Manufacturer: syz [ 333.755445][ T27] usb 1-1: SerialNumber: syz [ 333.772147][ T27] usb 1-1: config 0 descriptor?? [ 333.810255][ T27] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 333.844629][ T7657] loop1: detected capacity change from 0 to 512 [ 333.845635][ T7657] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.874404][ T7657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 333.874423][ T7657] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 333.876800][ T5745] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 333.909827][ T7657] EXT4-fs error (device loop1): ext4_clear_blocks:893: inode #13: comm syz.1.505: attempt to clear invalid blocks 2 len 1 [ 333.909856][ T7657] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 333.910313][ T7657] EXT4-fs (loop1): Remounting filesystem read-only [ 333.910743][ T7657] EXT4-fs (loop1): 1 truncate cleaned up [ 333.963490][ T7657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.026763][ T7657] bridge0: port 3(syz_tun) entered blocking state [ 334.026896][ T7657] bridge0: port 3(syz_tun) entered disabled state [ 334.027043][ T7657] syz_tun: entered allmulticast mode [ 334.029378][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 334.029910][ T5745] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 334.030354][ T7657] syz_tun: entered promiscuous mode [ 334.033464][ T7657] bridge0: port 3(syz_tun) entered blocking state [ 334.033599][ T7657] bridge0: port 3(syz_tun) entered forwarding state [ 334.033995][ T5745] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 334.034035][ T5745] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 334.034058][ T5745] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.034091][ T5745] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 334.043283][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.043304][ T5745] usb 3-1: Product: syz [ 334.043318][ T5745] usb 3-1: Manufacturer: syz [ 334.043330][ T5745] usb 3-1: SerialNumber: syz [ 334.073154][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 334.088542][ T5745] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input8 [ 334.163930][ T7409] veth0_vlan: entered promiscuous mode [ 334.189791][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.204241][ T7409] veth1_vlan: entered promiscuous mode [ 334.277274][ T5745] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 334.277290][ T5745] (id 0x00) [ 334.293811][ T7409] veth0_macvtap: entered promiscuous mode [ 334.302507][ T7409] veth1_macvtap: entered promiscuous mode [ 334.334611][ T7409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.350128][ T7409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.377033][ T6724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.380251][ T6721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.380287][ T6721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.380331][ T6721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.438158][ T5745] rc_core: IR keymap rc-imon-pad not found [ 334.438171][ T5745] Registered IR keymap rc-empty [ 334.438571][ T5745] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 334.438588][ T5745] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 334.524482][ T7667] loop4: detected capacity change from 0 to 512 [ 334.532006][ T5745] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 334.546668][ T7667] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 334.546683][ T7667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 334.546698][ T7667] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 334.573271][ T5745] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input9 [ 334.641387][ T5745] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:12> initialized [ 334.761047][ T6722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.768253][ T6722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.815266][ T7653] loop2: detected capacity change from 0 to 512 [ 334.816051][ T7653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.822911][ T7653] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 334.852398][ T5721] usb 1-1: USB disconnect, device number 9 [ 335.073744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.094749][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.121061][ T7678] UHID_CREATE from different security context by process 343 (syz.1.508), this is not allowed. [ 335.176820][ T7653] EXT4-fs (loop2): 1 truncate cleaned up [ 335.216340][ T7653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.243392][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.243645][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.779303][ T5824] usb 3-1: USB disconnect, device number 12 [ 337.314055][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 338.104368][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.656331][ T7711] FAULT_INJECTION: forcing a failure. [ 339.656331][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 339.656361][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.5.516 Not tainted syzkaller #0 PREEMPT(full) [ 339.656382][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.656394][ T7711] Call Trace: [ 339.656401][ T7711] [ 339.656410][ T7711] dump_stack_lvl+0xe8/0x150 [ 339.656444][ T7711] should_fail_ex+0x3eb/0x540 [ 339.656472][ T7711] should_failslab+0xa8/0x100 [ 339.656499][ T7711] __kvmalloc_node_noprof+0x171/0x820 [ 339.656526][ T7711] ? alloc_netdev_mqs+0xb01/0x1240 [ 339.656554][ T7711] ? alloc_netdev_mqs+0xb01/0x1240 [ 339.656592][ T7711] alloc_netdev_mqs+0xb01/0x1240 [ 339.656626][ T7711] ip6gre_tunnel_locate+0x1d4/0x970 [ 339.656656][ T7711] ? __pfx_gre_flags_to_tnl_flags+0x10/0x10 [ 339.656688][ T7711] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 339.656713][ T7711] ? ip6gre_tnl_parm_from_user+0x41/0x400 [ 339.656744][ T7711] ? ip6gre_tunnel_siocdevprivate+0x8d9/0xd90 [ 339.656779][ T7711] ip6gre_tunnel_siocdevprivate+0x904/0xd90 [ 339.656812][ T7711] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 339.656865][ T7711] ? __pfx___mutex_lock+0x10/0x10 [ 339.656889][ T7711] ? full_name_hash+0x92/0xe0 [ 339.656928][ T7711] dev_ifsioc+0xb56/0x1360 [ 339.656960][ T7711] dev_ioctl+0x84c/0x1150 [ 339.656989][ T7711] sock_ioctl+0x753/0x7e0 [ 339.657020][ T7711] ? __pfx_sock_ioctl+0x10/0x10 [ 339.657052][ T7711] ? __fget_files+0x2a/0x420 [ 339.657076][ T7711] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.657098][ T7711] ? __pfx_sock_ioctl+0x10/0x10 [ 339.657126][ T7711] __se_sys_ioctl+0xfc/0x170 [ 339.657152][ T7711] do_syscall_64+0x166/0x520 [ 339.657175][ T7711] ? trace_irq_disable+0x3b/0x140 [ 339.657197][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.657223][ T7711] ? clear_bhb_loop+0x70/0xc0 [ 339.657248][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.657267][ T7711] RIP: 0033:0x7fdf5f99e559 [ 339.657284][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.657300][ T7711] RSP: 002b:00007fdf5dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.657322][ T7711] RAX: ffffffffffffffda RBX: 00007fdf5fc26090 RCX: 00007fdf5f99e559 [ 339.657335][ T7711] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000004 [ 339.657348][ T7711] RBP: 00007fdf5fa35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 339.657361][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.657373][ T7711] R13: 00007fdf5fc26128 R14: 00007fdf5fc26090 R15: 00007ffd71924e48 [ 339.657407][ T7711] [ 340.804349][ T7725] bond1: option downdelay: invalid value (18446744073709551103) [ 340.804373][ T7725] bond1: option downdelay: allowed values 0 - 2147483647 [ 340.831933][ T7725] bond1 (unregistering): Released all slaves [ 342.152483][ T7743] xt_hashlimit: size too large, truncated to 1048576 [ 343.785969][ T7716] syz.2.521 (7716): drop_caches: 2 [ 343.826697][ T5745] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 343.930520][ T7764] netlink: 'syz.2.533': attribute type 30 has an invalid length. [ 344.037816][ T7767] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 344.065075][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.1.532'. [ 344.065126][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.1.532'. [ 344.065154][ T7767] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 344.498829][ T5745] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.499955][ T5745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.499976][ T5745] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.679622][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.679648][ T5745] usb 1-1: Product: syz [ 344.679661][ T5745] usb 1-1: Manufacturer: syz [ 344.679675][ T5745] usb 1-1: SerialNumber: syz [ 344.685711][ T5745] usb 1-1: config 0 descriptor?? [ 344.792133][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.793067][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.831961][ T7776] loop4: detected capacity change from 0 to 16 [ 348.703809][ T5735] usb 1-1: USB disconnect, device number 10 [ 348.816167][ T7834] loop2: detected capacity change from 0 to 128 [ 348.862137][ T7834] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.864467][ T7834] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 349.691524][ T7845] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 349.691596][ T7845] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 350.333568][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.534466][ T7851] vlan0: entered promiscuous mode [ 351.559749][ T7868] loop0: detected capacity change from 0 to 512 [ 351.585675][ T7868] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.602077][ T7868] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.602095][ T7868] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 351.636543][ T7868] EXT4-fs error (device loop0): ext4_clear_blocks:893: inode #13: comm syz.0.551: attempt to clear invalid blocks 2 len 1 [ 351.636653][ T7868] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 351.637118][ T7868] EXT4-fs (loop0): Remounting filesystem read-only [ 351.637571][ T7868] EXT4-fs (loop0): 1 truncate cleaned up [ 351.677353][ T7868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.686256][ T7868] FAULT_INJECTION: forcing a failure. [ 351.686256][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.686280][ T7868] CPU: 1 UID: 0 PID: 7868 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT(full) [ 351.686300][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.686311][ T7868] Call Trace: [ 351.686412][ T7868] [ 351.686483][ T7868] dump_stack_lvl+0xe8/0x150 [ 351.686609][ T7868] should_fail_ex+0x3eb/0x540 [ 351.686705][ T7868] _copy_to_user+0x31/0xb0 [ 351.686796][ T7868] simple_read_from_buffer+0xe1/0x170 [ 351.686863][ T7868] proc_fail_nth_read+0x1bb/0x230 [ 351.686904][ T7868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.686962][ T7868] ? rw_verify_area+0x24a/0x4c0 [ 351.686990][ T7868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.687011][ T7868] vfs_read+0x213/0xa80 [ 351.687036][ T7868] ? __pfx___mutex_lock+0x10/0x10 [ 351.687138][ T7868] ? __pfx_vfs_read+0x10/0x10 [ 351.687159][ T7868] ? __fget_files+0x2a/0x420 [ 351.687176][ T7868] ? __fget_files+0x3a2/0x420 [ 351.687193][ T7868] ? __fget_files+0x2a/0x420 [ 351.687215][ T7868] ? fdget+0x1ac/0x250 [ 351.687241][ T7868] ksys_read+0x150/0x270 [ 351.687263][ T7868] ? __pfx_ksys_read+0x10/0x10 [ 351.687281][ T7868] ? __pfx_ext4_ioctl+0x10/0x10 [ 351.687378][ T7868] do_syscall_64+0x166/0x520 [ 351.687448][ T7868] ? trace_irq_disable+0x3b/0x140 [ 351.687489][ T7868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.687525][ T7868] ? clear_bhb_loop+0x70/0xc0 [ 351.687549][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.687567][ T7868] RIP: 0033:0x7f927955ed8e [ 351.687612][ T7868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.687628][ T7868] RSP: 002b:00007f927a4f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.687676][ T7868] RAX: ffffffffffffffda RBX: 00007f927a4f16c0 RCX: 00007f927955ed8e [ 351.687690][ T7868] RDX: 000000000000000f RSI: 00007f927a4f10a0 RDI: 0000000000000005 [ 351.687702][ T7868] RBP: 00007f927a4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 351.687715][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.687725][ T7868] R13: 00007f9279826038 R14: 00007f9279825fa0 R15: 00007ffd904f1398 [ 351.687755][ T7868] [ 351.899048][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.316498][ T7888] loop0: detected capacity change from 0 to 128 [ 352.358133][ T7888] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 352.406660][ T7888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.335847][ T7898] input: syz0 as /devices/virtual/input/input10 [ 353.497770][ T7907] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 353.497770][ T7907] [ 353.498076][ T7907] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 353.501507][ T7907] CIFS: Attempting to mount //172.20.20.170/share [ 354.321572][ T7907] CIFS: VFS: cifs_mount failed w/return code = -112 [ 354.669474][ T7927] loop5: detected capacity change from 0 to 512 [ 354.692879][ T7904] loop0: detected capacity change from 0 to 32768 [ 354.694209][ T7927] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 354.694223][ T7927] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 354.694239][ T7927] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 354.703818][ T7904] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 7143b7f7-9f5c-4d27-8e5b-f829f1f2f169 [ 354.703895][ T7904] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.559 (7904) [ 354.716378][ T7904] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 354.716503][ T7904] BTRFS info (device loop0): using blake2b checksum algorithm [ 354.904682][ T7904] BTRFS info (device loop0): enabling ssd optimizations [ 354.904706][ T7904] BTRFS info (device loop0): using spread ssd allocation scheme [ 354.904722][ T7904] BTRFS info (device loop0): turning off barriers [ 354.904762][ T7904] BTRFS info (device loop0): enabling free space tree [ 354.904778][ T7904] BTRFS info (device loop0): enabling auto defrag [ 354.904868][ T7904] BTRFS info (device loop0): force zlib compression, level 3 [ 355.169061][ T7951] ip_tables: iptables: counters copy to user failed while replacing table [ 356.923039][ T5611] BTRFS info (device loop0): last unmount of filesystem 7143b7f7-9f5c-4d27-8e5b-f829f1f2f169 [ 357.258241][ T7959] loop1: detected capacity change from 0 to 1756 [ 357.291463][ T7959] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 357.291567][ T7959] UDF-fs: Scanning with blocksize 512 failed [ 357.329857][ T7959] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 357.329875][ T7959] UDF-fs: Scanning with blocksize 1024 failed [ 357.343806][ T7959] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 357.345674][ T7959] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 357.888774][ T7974] loop5: detected capacity change from 0 to 512 [ 357.917664][ T7974] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 357.917679][ T7974] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 357.917694][ T7974] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 358.014371][ T7974] loop5: detected capacity change from 0 to 512 [ 358.030802][ T7974] EXT4-fs (loop5): DAX unsupported by block device. [ 358.206528][ T7961] loop0: detected capacity change from 0 to 32768 [ 358.258856][ T7980] loop2: detected capacity change from 0 to 4096 [ 358.275423][ T7980] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 358.319153][ T7961] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 358.382677][ T7980] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 358.429064][ T7980] ntfs3(loop2): Failed to load $Extend (-22). [ 358.429084][ T7980] ntfs3(loop2): Failed to initialize $Extend. [ 358.606181][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 358.783197][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 358.951636][ T8011] loop0: detected capacity change from 0 to 128 [ 359.004362][ T8011] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 359.063463][ T8011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.065453][ T8011] ext2 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.089966][ T8014] loop1: detected capacity change from 0 to 512 [ 359.108131][ T8014] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 359.108146][ T8014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 359.108161][ T8014] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 359.245348][ T8014] loop1: detected capacity change from 0 to 512 [ 359.258835][ T8014] EXT4-fs (loop1): DAX unsupported by block device. [ 360.329676][ T5824] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 360.364176][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.576699][ T5824] usb 5-1: device descriptor read/64, error -71 [ 360.753861][ T8039] loop0: detected capacity change from 0 to 4096 [ 360.769936][ T8039] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 360.816708][ T5824] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 360.864542][ T8039] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 360.869965][ T8039] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 360.947269][ T5824] usb 5-1: device descriptor read/64, error -71 [ 361.057516][ T5824] usb usb5-port1: attempt power cycle [ 361.098411][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 361.351709][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.353777][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.397910][ T5824] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 361.418363][ T5824] usb 5-1: device descriptor read/8, error -71 [ 362.173405][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 362.767332][ T5824] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 362.845654][ T5824] usb 5-1: device descriptor read/8, error -71 [ 362.947006][ T5824] usb usb5-port1: unable to enumerate USB device [ 363.140148][ T8067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.454439][ T8095] Cannot find add_set index 2 as target [ 365.604096][ T8117] loop1: detected capacity change from 0 to 128 [ 365.624512][ T8117] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.644911][ T8117] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.728451][ T5603] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.971107][ T8123] loop5: detected capacity change from 0 to 64 [ 365.972054][ T8123] minix: Unknown parameter '017777777777777777777770x0000000000000000' [ 367.105197][ T8134] loop8: detected capacity change from 0 to 7 [ 367.115320][ T8134] Dev loop8: unable to read RDB block 7 [ 367.115361][ T8134] loop8: unable to read partition table [ 367.130404][ T8134] loop8: partition table beyond EOD, truncated [ 367.130433][ T8134] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 367.238107][ T5721] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 367.260278][ T8140] loop1: detected capacity change from 0 to 64 [ 367.294983][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 367.295012][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 367.298353][ T8140] hfs: request for non-existent node 524288 in B*Tree [ 367.298368][ T8140] hfs: request for non-existent node 524288 in B*Tree [ 367.298389][ T8140] hfs: get root inode failed [ 367.416883][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 367.417531][ T5721] usb 6-1: New USB device found: idVendor=0763, idProduct=0150, bcdDevice=0.40 [ 367.418749][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.418772][ T5721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.421354][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.421376][ T5721] usb 6-1: Product: syz [ 367.421458][ T5721] usb 6-1: Manufacturer: syz [ 367.421472][ T5721] usb 6-1: SerialNumber: syz [ 367.806564][ T8155] loop0: detected capacity change from 0 to 4096 [ 367.852464][ T8159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.853507][ T8155] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 367.903051][ T8155] Remounting filesystem read-only [ 368.053972][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'. [ 368.077216][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.083344][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.487070][ T8176] ip_tables: iptables: counters copy to user failed while replacing table [ 368.940586][ T5721] usb 6-1: 0:1 : does not exist [ 368.940605][ T5721] usb 6-1: 0:2 : does not exist [ 368.940619][ T5721] usb 6-1: 0:3 : does not exist [ 368.940632][ T5721] usb 6-1: 0:4 : does not exist [ 369.122950][ T5721] usb 6-1: USB disconnect, device number 2 [ 369.255569][ T8027] udevd[8027]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.365042][ T8185] loop4: detected capacity change from 0 to 256 [ 369.370742][ T8185] exfat: Bad value for 'uid' [ 369.370757][ T8185] exfat: Bad value for 'uid' [ 371.474681][ T8207] loop1: detected capacity change from 0 to 128 [ 371.497045][ T8207] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 371.513803][ T8207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.962249][ T8210] netlink: 4520 bytes leftover after parsing attributes in process `syz.0.654'. [ 373.141759][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.649'. [ 373.247365][ T8224] loop0: detected capacity change from 0 to 512 [ 373.276012][ T8224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 373.276140][ T8224] System zones: 1-12 [ 373.294194][ T8224] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.656: missing EA_INODE flag [ 373.294220][ T8224] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 373.296987][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 373.297005][ C1] EXT4-fs (loop0): initial error at time 1792366455: ext4_xattr_inode_iget:437: inode 12 [ 373.297033][ C1] EXT4-fs (loop0): last error at time 1792366455: ext4_xattr_inode_iget:437: inode 12 [ 373.304945][ T8224] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.656: error while reading EA inode 12 err=-117 [ 373.304972][ T8224] loop0: lost filesystem error report for type 5 error -117 [ 373.327275][ T8224] EXT4-fs (loop0): 1 orphan inode deleted [ 373.329200][ T8224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.597274][ T8235] xt_hashlimit: size too large, truncated to 1048576 [ 374.962233][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.595757][ T8247] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 376.101414][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 378.104088][ T8262] loop1: detected capacity change from 0 to 128 [ 378.225471][ T8266] loop1: detected capacity change from 0 to 512 [ 378.340682][ T8269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.661'. [ 378.916851][ T8272] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 378.916873][ T8272] netlink: 'syz.4.670': attribute type 2 has an invalid length. [ 379.535585][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.535640][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.254096][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 383.729446][ T8299] kAFS: unparsable volume name [ 383.736053][ T8299] kAFS: unparsable volume name [ 383.736256][ T8299] kAFS: unparsable volume name [ 383.736396][ T8299] kAFS: unparsable volume name [ 383.736533][ T8299] kAFS: unparsable volume name [ 383.736850][ T8299] kAFS: unparsable volume name [ 383.737088][ T8299] kAFS: unparsable volume name [ 383.737320][ T8299] kAFS: unparsable volume name [ 383.745039][ T8299] kAFS: unparsable volume name [ 383.745296][ T8299] kAFS: unparsable volume name [ 383.745532][ T8299] kAFS: unparsable volume name [ 383.745772][ T8299] kAFS: unparsable volume name [ 383.746004][ T8299] kAFS: unparsable volume name [ 383.746237][ T8299] kAFS: unparsable volume name [ 383.746476][ T8299] kAFS: unparsable volume name [ 383.754232][ T8299] kAFS: unparsable volume name [ 383.754471][ T8299] kAFS: unparsable volume name [ 383.754719][ T8299] kAFS: unparsable volume name [ 383.754953][ T8299] kAFS: unparsable volume name [ 383.755188][ T8299] kAFS: unparsable volume name [ 383.755419][ T8299] kAFS: unparsable volume name [ 383.786727][ T8299] kAFS: unparsable volume name [ 383.786978][ T8299] kAFS: unparsable volume name [ 383.787222][ T8299] kAFS: unparsable volume name [ 383.787461][ T8299] kAFS: unparsable volume name [ 383.787701][ T8299] kAFS: unparsable volume name [ 383.787939][ T8299] kAFS: unparsable volume name [ 383.836481][ T8299] kAFS: unparsable volume name [ 383.836827][ T8299] kAFS: unparsable volume name [ 383.837095][ T8299] kAFS: unparsable volume name [ 383.837328][ T8299] kAFS: unparsable volume name [ 383.837560][ T8299] kAFS: unparsable volume name [ 383.878191][ T8299] kAFS: unparsable volume name [ 383.878448][ T8299] kAFS: unparsable volume name [ 383.878697][ T8299] kAFS: unparsable volume name [ 383.878931][ T8299] kAFS: unparsable volume name [ 383.885377][ T8299] kAFS: unparsable volume name [ 383.885640][ T8299] kAFS: unparsable volume name [ 383.921099][ T8299] kAFS: unparsable volume name [ 383.921339][ T8299] kAFS: unparsable volume name [ 383.921572][ T8299] kAFS: unparsable volume name [ 383.921815][ T8299] kAFS: unparsable volume name [ 383.922048][ T8299] kAFS: unparsable volume name [ 383.922285][ T8299] kAFS: unparsable volume name [ 383.970224][ T8299] kAFS: unparsable volume name [ 383.970370][ T8299] kAFS: unparsable volume name [ 383.970995][ T8299] kAFS: unparsable volume name [ 383.971139][ T8299] kAFS: unparsable volume name [ 383.971280][ T8299] kAFS: unparsable volume name [ 383.971430][ T8299] kAFS: unparsable volume name [ 384.010892][ T8299] kAFS: unparsable volume name [ 384.011055][ T8299] kAFS: unparsable volume name [ 384.011196][ T8299] kAFS: unparsable volume name [ 384.011339][ T8299] kAFS: unparsable volume name [ 384.011479][ T8299] kAFS: unparsable volume name [ 384.011623][ T8299] kAFS: unparsable volume name [ 384.011761][ T8299] kAFS: unparsable volume name [ 384.011898][ T8299] kAFS: unparsable volume name [ 384.012037][ T8299] kAFS: unparsable volume name [ 384.012193][ T8299] kAFS: unparsable volume name [ 384.012328][ T8299] kAFS: unparsable volume name [ 384.012463][ T8299] kAFS: unparsable volume name [ 384.051189][ T8299] kAFS: unparsable volume name [ 384.051428][ T8299] kAFS: unparsable volume name [ 384.051676][ T8299] kAFS: unparsable volume name [ 384.602461][ T8315] netlink: 'syz.5.682': attribute type 1 has an invalid length. [ 384.602502][ T8315] netlink: 'syz.5.682': attribute type 2 has an invalid length. [ 385.827471][ T8320] loop4: detected capacity change from 0 to 131072 [ 385.840910][ T8320] F2FS-fs (loop4): invalid crc value [ 385.898995][ T8320] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 385.914172][ T8320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 385.950168][ T32] audit: type=1800 audit(1792366468.140:913): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.685" name="file1" dev="loop4" ino=7 res=0 errno=-22 [ 386.175641][ T8330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.355459][ T8347] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 389.355474][ T8347] netlink: 'syz.2.694': attribute type 2 has an invalid length. [ 390.590876][ T8351] loop0: detected capacity change from 0 to 32768 [ 390.768381][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 391.042105][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 391.260319][ T8367] loop0: detected capacity change from 0 to 128 [ 391.267111][ T8367] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 391.457345][ T27] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 391.458883][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.462922][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.607295][ T27] usb 5-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 391.612002][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.612025][ T27] usb 5-1: Product: syz [ 391.612039][ T27] usb 5-1: Manufacturer: syz [ 391.612052][ T27] usb 5-1: SerialNumber: syz [ 391.617545][ T27] usb 5-1: config 0 descriptor?? [ 392.159359][ T8389] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 392.159434][ T8389] netlink: 'syz.0.705': attribute type 2 has an invalid length. [ 393.177877][ T27] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 014 [ 393.317350][ T8373] loop5: detected capacity change from 0 to 32768 [ 393.323549][ T8364] i2c i2c-1: failure writing data [ 393.354547][ T8373] find_entry called with index = 0 [ 393.354561][ T8373] find_entry called with index = 0 [ 393.354569][ T8373] find_entry called with index = 0 [ 393.354791][ T8373] find_entry called with index = 0 [ 393.354801][ T8373] find_entry called with index = 0 [ 393.354808][ T8373] find_entry called with index = 0 [ 393.355367][ T8373] read_mapping_page failed! [ 393.355573][ T8373] ERROR: (device loop5): txCommit: [ 393.355573][ T8373] [ 393.613820][ T7409] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 393.613820][ T7409] [ 393.613860][ T7409] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 393.613860][ T7409] [ 393.613892][ T7409] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 6 [ 393.613892][ T7409] [ 393.662570][ T7409] jfs_rmdir: dtDelete returned -2 [ 394.759372][ T7409] Oops: general protection fault, probably for non-canonical address 0xdffffc018f949f61: 0000 [#1] SMP KASAN PTI [ 394.771410][ T7409] KASAN: probably user-memory-access in range [0x0000000c7ca4fb08-0x0000000c7ca4fb0f] [ 394.780943][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 394.790386][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.800424][ T7409] RIP: 0010:bpf_inode_storage_free+0x1f4/0x5c0 [ 394.806600][ T7409] Code: 42 1b d0 ff c6 05 34 22 6b 0f 01 48 c7 c7 80 5c 17 8c be 53 03 00 00 48 c7 c2 c0 5c 17 8c e8 93 76 ab ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 ad ef 45 00 4d 8b 36 e8 45 6f fc [ 394.826197][ T7409] RSP: 0018:ffffc9000846f8f0 EFLAGS: 00010202 [ 394.832253][ T7409] RAX: 000000018f949f61 RBX: ffff8880270d4340 RCX: ffff8880270d3e80 [ 394.840239][ T7409] RDX: 0000000000000000 RSI: ffffffff8c6e6760 RDI: ffffffff8c6e6720 [ 394.848196][ T7409] RBP: 0000000000000001 R08: ffffffff81f8bbe2 R09: 0000000000000000 [ 394.856150][ T7409] R10: dffffc0000000000 R11: fffffbfff1f42939 R12: dffffc0000000000 [ 394.864106][ T7409] R13: 1ffff11004e1a868 R14: 0000000c7ca4fb08 R15: ffffffff81f8bbe2 [ 394.872065][ T7409] FS: 0000000000000000(0000) GS:ffff888123b8b000(0000) knlGS:0000000000000000 [ 394.880978][ T7409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.887553][ T7409] CR2: 000000110c3810fe CR3: 0000000023bfe000 CR4: 00000000003526f0 [ 394.895515][ T7409] Call Trace: [ 394.898781][ T7409] [ 394.901700][ T7409] security_inode_free+0xdc/0x180 [ 394.906785][ T7409] __destroy_inode+0x2a1/0x630 [ 394.911541][ T7409] evict+0x8d4/0xb50 [ 394.915426][ T7409] ? __pfx_evict+0x10/0x10 [ 394.919834][ T7409] ? do_raw_spin_unlock+0xf5/0x200 [ 394.924957][ T7409] evict_inodes+0x844/0x8c0 [ 394.929452][ T7409] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 394.935427][ T7409] ? __pfx_evict_inodes+0x10/0x10 [ 394.940454][ T7409] ? jfs_sync_fs+0x87/0xa0 [ 394.944927][ T7409] ? sync_filesystem+0x1f9/0x240 [ 394.949853][ T7409] generic_shutdown_super+0xaa/0x2d0 [ 394.955130][ T7409] kill_block_super+0x44/0xa0 [ 394.959797][ T7409] deactivate_locked_super+0xbe/0x110 [ 394.965169][ T7409] cleanup_mnt+0x204/0x2a0 [ 394.969590][ T7409] task_work_run+0x1d9/0x260 [ 394.974194][ T7409] ? __pfx_task_work_run+0x10/0x10 [ 394.979322][ T7409] ? do_exit+0x700/0x2360 [ 394.983664][ T7409] ? kmem_cache_free+0x182/0x650 [ 394.988624][ T7409] ? put_net+0x16a/0x260 [ 394.992860][ T7409] do_exit+0x705/0x2360 [ 394.997012][ T7409] ? __pfx_do_exit+0x10/0x10 [ 395.001615][ T7409] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.006669][ T7409] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.011915][ T7409] do_group_exit+0x22d/0x2f0 [ 395.016489][ T7409] __x64_sys_exit_group+0x3f/0x40 [ 395.021495][ T7409] x64_sys_call+0x18c6/0x18d0 [ 395.026183][ T7409] do_syscall_64+0x166/0x520 [ 395.030769][ T7409] ? trace_irq_disable+0x3b/0x140 [ 395.035791][ T7409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.041843][ T7409] ? clear_bhb_loop+0x70/0xc0 [ 395.046504][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.052385][ T7409] RIP: 0033:0x7fdf5f99e559 [ 395.056788][ T7409] Code: Unable to access opcode bytes at 0x7fdf5f99e52f. [ 395.063836][ T7409] RSP: 002b:00007ffd71921dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 395.072266][ T7409] RAX: ffffffffffffffda RBX: 00007fdf5fa34f7f RCX: 00007fdf5f99e559 [ 395.080229][ T7409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 395.088198][ T7409] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007fdf5fa34efb [ 395.096155][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd71923080 [ 395.104108][ T7409] R13: 00007fdf5fa34efb R14: 0000555568c6a4e8 R15: 00007ffd71925240 [ 395.112072][ T7409] [ 395.115084][ T7409] Modules linked in: [ 395.120010][ T7409] ---[ end trace 0000000000000000 ]--- [ 395.123508][ T1240] usb 5-1: USB disconnect, device number 14 [ 395.219362][ T7409] RIP: 0010:bpf_inode_storage_free+0x1f4/0x5c0 [ 395.219398][ T7409] Code: 42 1b d0 ff c6 05 34 22 6b 0f 01 48 c7 c7 80 5c 17 8c be 53 03 00 00 48 c7 c2 c0 5c 17 8c e8 93 76 ab ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 ad ef 45 00 4d 8b 36 e8 45 6f fc [ 395.219413][ T7409] RSP: 0018:ffffc9000846f8f0 EFLAGS: 00010202 [ 395.219429][ T7409] RAX: 000000018f949f61 RBX: ffff8880270d4340 RCX: ffff8880270d3e80 [ 395.219443][ T7409] RDX: 0000000000000000 RSI: ffffffff8c6e6760 RDI: ffffffff8c6e6720 [ 395.219456][ T7409] RBP: 0000000000000001 R08: ffffffff81f8bbe2 R09: 0000000000000000 [ 395.219467][ T7409] R10: dffffc0000000000 R11: fffffbfff1f42939 R12: dffffc0000000000 [ 395.219480][ T7409] R13: 1ffff11004e1a868 R14: 0000000c7ca4fb08 R15: ffffffff81f8bbe2 [ 395.219492][ T7409] FS: 0000000000000000(0000) GS:ffff888123b8b000(0000) knlGS:0000000000000000 [ 395.219506][ T7409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.219516][ T7409] CR2: 00007f6c9d3f37b0 CR3: 000000007e084000 CR4: 00000000003526f0 [ 395.219594][ T7409] Kernel panic - not syncing: Fatal exception [ 395.320833][ T7409] Kernel Offset: disabled [ 395.325184][ T7409] Rebooting in 86400 seconds..