last executing test programs: 1m39.141391296s ago: executing program 1 (id=53): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7000fedbdf2501000000140002007767320000000000000000000000000038000880"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 1m39.097527231s ago: executing program 32 (id=53): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7000fedbdf2501000000140002007767320000000000000000000000000038000880"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 1m33.648935717s ago: executing program 4 (id=79): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000100000000001c0000001c000000070000007b5031075ece0a05040000000500000004000000040000008d000000002e30615f3000"], &(0x7f0000000200)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000001900)=[@nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x5, 0xda, 0x7, 0x2e070a70, 0x2}}, @cpuid={0x64, 0x18, {0x4, 0x50}}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x1, 0x2cd}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control_nat=0x6008, 0xffff, 0x2, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x308}}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x0, 0x87b, 0xc757}}], 0x140}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000001280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001380), 0x651, 0x0) recvmmsg(r5, &(0x7f0000005d80)=[{{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001740)=""/80, 0x50}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/160, 0xa0}], 0x3, &(0x7f0000003f40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004f40)=@xdp, 0x80, &(0x7f0000005400)=[{&(0x7f0000004fc0)=""/7, 0x7}, {&(0x7f0000005000)=""/8, 0x8}, {&(0x7f0000005040)=""/220, 0xdc}, {&(0x7f0000005140)=""/133, 0x85}, {&(0x7f0000005200)=""/209, 0xd1}, {&(0x7f0000005300)=""/204, 0xcc}], 0x6, &(0x7f0000005480)=""/205, 0xcd}, 0xb}, {{&(0x7f0000005580)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005600)=""/136, 0x88}, {&(0x7f00000056c0)=""/188, 0xbc}, {&(0x7f0000005780)=""/34, 0x22}, {&(0x7f00000057c0)=""/81, 0x51}, {&(0x7f0000005840)=""/218, 0xda}, {&(0x7f0000005940)=""/81, 0x51}, {&(0x7f00000059c0)=""/73, 0x49}], 0x7, &(0x7f0000005ac0)=""/4, 0x4}, 0x7}, {{&(0x7f0000005b00)=@phonet, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005b80)=""/62, 0x3e}, {&(0x7f0000005bc0)=""/4, 0x4}, {&(0x7f0000005c00)=""/40, 0x28}, {&(0x7f0000005c40)=""/103, 0x67}, {&(0x7f0000005cc0)=""/19, 0x13}], 0x5}, 0x7}], 0x4, 0x40000003, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r7}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540), 0x0, 0x1, r7}, 0x38) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000001600)=0x7f) read(r8, &(0x7f0000001540)=""/95, 0x5f) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000015c0)=0xa) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, &(0x7f0000001640)="420fe1a90000000066baf80cb87d27328bef66bafc0cb000eed9f70f01cf0fc7777466b835008ec0c744240007000080c744240200000000c7442406000000000f011424400f01d1c4c1fa113066ba2100b007ee", 0x54}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002e00)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m32.028713303s ago: executing program 4 (id=89): r0 = syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000800, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000000480)="$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") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22880, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000005b40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f000000b080)='./bus\x00', 0x18f241, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f000000b0c0)=0xfffffff9) r3 = creat(&(0x7f000000b100)='./bus\x00', 0x182) fallocate(r3, 0x0, 0x1, 0x2000402) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f000000b140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) open(0x0, 0x51a382, 0x78e22799f4a46e8e) close(0x3) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x6, {0x42, 0x0, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000bb00)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f000000bb40)={@desc={0x1, 0x0, @auto="75bc16354dffa591"}}) 1m28.410563873s ago: executing program 4 (id=100): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x7, 0x1, [0x0, 0x7, 0x2, 0x6, 0xffff], [0x0, 0xff, 0x1, 0x7, 0x3, 0xb3a, 0x6, 0x2, 0x10001, 0x7, 0x10, 0x5180000000, 0xa1, 0x1, 0x4, 0xffffffff, 0x5, 0x2, 0x6bc, 0x1, 0x18000000, 0x8, 0xa79, 0x4, 0x9b33, 0x5, 0x7, 0x8, 0xff, 0x2, 0x4, 0x9edb, 0xaf, 0xe, 0x40, 0x480000, 0x20388102, 0x5, 0xffffffff00000000, 0x6, 0x3e2961ef, 0x4, 0x100, 0x1, 0xd58, 0x4, 0x0, 0xfffffffffffff801, 0x5e, 0x7, 0x5, 0x2, 0xffff, 0x0, 0x8, 0x10001, 0xf, 0x2, 0x7, 0x401, 0x10, 0x0, 0xffff, 0x1, 0xaba, 0x271000000, 0x5d3, 0x401, 0xc, 0x9, 0x58, 0xffffffffffffffff, 0x1, 0x6, 0x2, 0x8, 0x200, 0x907, 0x6, 0x0, 0x100000001, 0x6, 0x0, 0x6, 0x3, 0x6, 0x56f, 0x8, 0x6, 0x4, 0x94, 0x1ff, 0xa3, 0x1, 0x3, 0x4, 0x0, 0x9, 0x2, 0x6a5a, 0x40, 0x8, 0xffffffffffffff00, 0x8, 0x8e, 0xc, 0xc, 0x3, 0x100000000, 0xb15, 0x0, 0x4, 0x7f, 0x9e0, 0x5, 0x1, 0x5, 0x9, 0x2, 0x7, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000440)={0x0, 0xd9, 0x40000}) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000840)={0x0, "321b4cbb16682246eb45aa02b63f46e4"}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001840)={0x1, 0x6, {0x80000001, @usage, r0, 0x0, 0xf2a, 0x5, 0x1, 0x9, 0x40, @struct={0x3, 0xa}, 0x0, 0x1938, [0x6, 0x5, 0x4, 0xfffffffffffffff7, 0x1000, 0xfffffffffffffffa]}, {0xdc, @usage=0x69e7e3b8, r1, 0x100, 0x8000000000000000, 0x8ba2, 0x2, 0x4, 0x880, @struct={0x6, 0x1837}, 0x0, 0x9d2, [0x3, 0xff, 0x10, 0x6, 0x8, 0x9]}, {0x5, @struct={0x800, 0xffff0001}, r2, 0x6, 0x4a, 0x0, 0xc000000000000000, 0x7fffffffffffffff, 0x400, @usage=0xfffffffffffffff8, 0x2, 0x7, [0x8, 0x2, 0xfff, 0x4, 0x40, 0x10000]}, {0x2, 0x8000, 0x3}}) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001c40), &(0x7f0000001c80)=0x10, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000001dc0)={&(0x7f0000001cc0)=[{0xc1b, 0xc00000000000000, 0xefae, 0x9, 0x7}, {0x8, 0x8, 0x5, 0x2, 0x9}, {0x60436b98, 0xd, 0x800, 0x6, 0xd48}, {0x6, 0x1, 0xb, 0x1, 0x1d}, {0x100, 0xfffffffffffffffa, 0x7, 0x9456, 0x3}], 0x5, 0x28, 0x100, 0x6}) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x1f, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @jmp={0x5, 0x1, 0x1, 0x8, 0xb, 0x10, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x79}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0xe, 0x0, 0x6, 0xfffffffffffffff0}, @map_fd, @call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x88, &(0x7f0000001f40)=""/136, 0x41100, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002040)={0x0, 0x6, 0x300, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002080)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000020c0)=[{0x5, 0x2, 0xacfe, 0x1}, {0x3, 0x4, 0x1, 0x1}, {0x4, 0x4, 0xa, 0xc}, {0x1, 0x2, 0x9, 0x5}, {0x1, 0x1, 0xb, 0x5}, {0x5, 0x2, 0xd, 0x1}], 0x10, 0xffffff00}, 0x94) (rerun: 64) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002200), 0x4) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@fallback=r3, 0x2f, 0x0, 0x4, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000002280)=[0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r8 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0x7, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @map_val={0x18, 0x7}]}, &(0x7f0000002400)='GPL\x00', 0x9, 0x9, &(0x7f0000002440)=""/9, 0x41000, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480)={0x4, 0x8, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002380)={@cgroup=r8, r4, 0x4, 0x4, r5, @void, @value=r9, @void, @void, r7}, 0x20) (async, rerun: 32) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x10000, 0x128) (rerun: 32) mkdirat(r10, &(0x7f0000002600)='./file0\x00', 0x26) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000002640)={'batadv0\x00', 0x0}) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002680)={r4, r12, 0x25, 0x8, @void}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000026c0), 0x294200, 0x0) fdatasync(r8) writev(r11, &(0x7f00000027c0)=[{&(0x7f0000002700)="707b4ba2160f97ad5bf2d10bada59264f11345c83f93d9b13f41f4a40689ae4f2e20365624a58a7762dd0b58e69bde5ca4c2c05aaeb436eee8fc6bf51965de3313f969ac28c7335a9a16ba5d4ee8fc99be4528852757c08418d1f8a71e971c12fbe874937a48e05f25", 0x69}, {&(0x7f0000002780)='I', 0x1}], 0x2) sendmsg$nl_xfrm(r6, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)=@flushsa={0x38, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfb, {0x32}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd2b, 0x70bd25, 0x70bd26, 0xe, [0x5, 0x60f]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4841}, 0x400c000) r14 = openat$cgroup(r6, &(0x7f0000002900)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) r15 = eventfd(0x5) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000002c00)={0x84, 0x0, &(0x7f0000002a40)=[@acquire={0x40046305, 0x3}, @register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x1, 0x1, 0x93, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002980)={@ptr={0x70742a85, 0x0, &(0x7f0000002940)=[r14, r10, r13, r9, r3, r15], 0x18}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x10}}, &(0x7f0000002a00)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @request_freeze={0x400c6313, 0x2, 0x1}, @decrefs={0x40046307, 0x3}, @clear_death], 0x100, 0x0, &(0x7f0000002b00)}) (async) getsockname$packet(r8, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002d80)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002e40)={0xdd, 0x0}, 0x8) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ec0)=@generic={&(0x7f0000002e80)='./file0\x00', 0x0, 0x30}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x6, 0x6, &(0x7f0000002c40)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xa, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, @generic={0xb, 0x8, 0x4, 0xe11e, 0xfffffff8}], &(0x7f0000002c80)='syzkaller\x00', 0x400, 0x42, &(0x7f0000002cc0)=""/66, 0x41000, 0x24, '\x00', r16, @fallback=0x1f, r8, 0x8, &(0x7f0000002dc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002e00)={0x3, 0x9, 0x2, 0x3ff}, 0x10, r17, 0xffffffffffffffff, 0x7, &(0x7f0000002f00)=[r6, r8, r6, r18, r8, 0x1, r6, r8], &(0x7f0000002f40)=[{0x5, 0x1, 0x0, 0x9}, {0x4, 0x4, 0x10, 0x6}, {0x5, 0x2, 0x2, 0x2}, {0x3, 0x1, 0xf, 0xb}, {0x5, 0x1, 0x2, 0xb}, {0x4, 0x4, 0x9, 0xb}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0x8}, 0x94) (async) socket$unix(0x1, 0xf8b45767984d6b73, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000003080)) 1m27.735213282s ago: executing program 4 (id=104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8852, &(0x7f0000000200)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4f2, &(0x7f0000000bc0)="$eJzs3E9oHNUfAPDvbJIm6Z9f0/7668/WqqlVDBaTNq22B0EqCh4UxArqMSRpqU0baVKwpcoWpB6l4F08ehDEg1cVoYgnwWs9ClIo0ktbQRyZ3Zlks91Nmu0m25rPByb73vx77+2bN/vmvd0EsGYNZn+SavhqRGyOiFL9DoPVl1s3LozfvnFhPMppevSPpHLYzSyey08TG/LIUCmi9FEyv6HGzLnzJ8empibP5PGR2VPvjcycO//Mib58zeHDBw/sP/Tc6LPLL1SD9LJy3dz54fSuHa+8c/m18e5ifZFabTnaZTAGG2Wl4sl2J9Zhm2rCSXcHM8KyZNd/Vl09lfa/Obpiscorr2LOgJWWpmna23xzOc2VisDFFPjXSKLTOQA6o/igz55/i6VRR2DdynQ/Ou76keoDUFbuW/kS8VhlZTEO0lP3fNtOgxHxdvnPz7Il7m4c4svSCuUFAFgbvjtS9ATr+n8D1ZmRv85eeSF7/U8+hzIQEVsiYmtE/DcitkXE/yJie0T8PyIeqjt/V0Ski6RfP9o8l/5cJ6d0rU1FbSjr/z2fz23N9/8WZGCgK49tiig6zJP78vdkKHp6j52Ymty/SBrfv/TLJ8221fb/siVLv+gL5vm41l03QDcxNjvWcoHrXL8YsbO7vvxJd0QyVzdJROyIiJ3LOO9ATfjE01/smov0LNxv6fJXpA3n0dowz5R+HvFUtf7LsaD+51NMFsxPnho7Pnl88vTo3PzkSF9MTe4bya6CfQ3T+OnnS683S3/J8n/zW/0hLx/69mjesu5dVv/ra67/Ik815R9IIpK5+dqZ5adx6dePmz7TtHr9r0verISL59L3x2Znz+yPWJe8euf60flji3j2GuVq+Yf2NG7/W/Njsnfi4YjILuJHIuLRqD4hZnnfHRGPR8SeRcr/44tPvNt6+VdWVv6JuvtfteYX1P/8fH2zQJLPDVbX9Ndu6jq5++rtJjePu6v/g5XQUET80PD+l+UwWXCLaJbT4tMuW/N3295FAAAAuL+VImJjzVjSxiiVhoer3+HfFutLU9Mzs3uPTZ89PZFtixiInlIx0lUdD+5JivHPgZr4aF38QD5u/GlXfyU+PD49NdHRkgMbKm0+KQ1HvNVV0/4zv7dniBm4n/m9Fqxdi7X/rBO//fIqZgZYVXf/+X/lgxXNCLDqatp/s1/4l1v43hfwAPD8D8xb+h/9uGfAgy/VlmFNW1b731vtG3y1UpkBVlV3vNHpLAAdov8Pa9KSv+u/p0Da23hTX9y5c/QtfsKuaC0b/Q3S6kigFBEdSb2/laOK/6bQdJ8oLe+EvdGeOj02t+ZiS1dv+czM8e3tvfgnt5xP8+/Kt7sGv16Vdtoo0JHbEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv9EwAA//89EeB1") mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file4\x00', 0x11c0, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000840)='sysfs\x00', 0x1214040, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) chroot(&(0x7f0000000880)='./file0\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x9, 0x5, 0x8, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x11, 0x20}, 0x7f, 0x1, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, 0x2, @in=@local, 0x1502, 0x1, 0x3, 0x6, 0xc36, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x0, 0x99, @loopback}, 0x1c) mount$bind(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='./file0\x00', 0x0, 0x3a09007, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, 0x0) mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000010c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000001180), &(0x7f00000011c0)='./bus\x00', 0x1014004, &(0x7f0000000000)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d706f7369782c6d6f64653d667261676d656e743a626c6f636b2c64697361686c655f726f6c6c5f666f72776172642c616c6c6f635f6d6f64653d72657573652c666c7573685f6d657267652c6163746976655f6c6f67733d01586d656d6f72793d6e6f726d616c2c636865636b706f696e743d64697361626c652c6e6f61636c2c617467632c6a71666d743d76020000002c6e6f6c617a792feb6d652c696e6c696e655f78617474725f73697a653d3030303030312c696f5f6269d10f711fea5dcf4a0d4e1e138d6d74733d3030303030302c30303030303030303430312c00"/268], 0x8, 0x5543, &(0x7f0000001300)="$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") syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000006880)=ANY=[@ANYBLOB="1201010200000008410e444240000102030109028a000301090081080b0002010130f60904000000010130000a24010a260000000000092407060503000000132403ff0103020106ff0100000001070000100904010000010230000904010101010230000905010940000c09f10a252504000000f706000904020000010230000904020101010230000905820920000300020a252509000000800300"], &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0}) 1m24.349171118s ago: executing program 4 (id=112): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000100), 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001dc0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000001e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001e80)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001f00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001f40), 0x4000087, 0x2, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r2}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYRES64=r5, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYRES16=r6, @ANYRESHEX=r7, @ANYRES64=r1, @ANYRES32, @ANYRESDEC=r4, @ANYRES16=r2, @ANYRES64=r4], 0xff19) r9 = epoll_create1(0x0) r10 = eventfd2(0x20, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)={0x1c}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x1000001, 0x1000, 0xffffff77, 0x48, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0xb}) write(r9, &(0x7f00000001c0)="5465bb2941f3", 0x6) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r9, &(0x7f0000000080)={0xc0000000}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 1m24.068840307s ago: executing program 4 (id=113): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x8800, 0x85) lseek(r2, 0x1ba2, 0x1) (async, rerun: 64) getdents64(r2, 0x0, 0x0) (async, rerun: 64) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 32) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socketpair(0x1e, 0x80005, 0x0, 0x0) (async) mremap(&(0x7f0000031000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000000d000/0x3000)=nil) (async) mkdirat(r1, &(0x7f0000000080)='./sys\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x404, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3ff]}, 0x8) poll(&(0x7f00000002c0)=[{r4, 0x1014}, {r4, 0x1000}], 0x2, 0xfffffff9) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00070c2dbd7000000000000a000000", @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) setresgid(0xee00, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000003500)='./sys\x00', &(0x7f0000003540)) 1m23.974420706s ago: executing program 33 (id=113): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x8800, 0x85) lseek(r2, 0x1ba2, 0x1) (async, rerun: 64) getdents64(r2, 0x0, 0x0) (async, rerun: 64) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 32) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socketpair(0x1e, 0x80005, 0x0, 0x0) (async) mremap(&(0x7f0000031000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000000d000/0x3000)=nil) (async) mkdirat(r1, &(0x7f0000000080)='./sys\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x404, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3ff]}, 0x8) poll(&(0x7f00000002c0)=[{r4, 0x1014}, {r4, 0x1000}], 0x2, 0xfffffff9) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00070c2dbd7000000000000a000000", @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) setresgid(0xee00, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000003500)='./sys\x00', &(0x7f0000003540)) 1m20.339353488s ago: executing program 2 (id=134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000a00)='smaps_rollup\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x1c7000, 0x0) preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/7, 0x7}, {0x0}], 0x2, 0xe7, 0xf) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000200)={@mcast2}, 0x14) sendto$inet(r0, &(0x7f0000000140)='5/', 0x2, 0x20004800, 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000300)=ANY=[@ANYBLOB="12010006000201406d0425080001000000010902a1000201008032080b00020e23000009040000000e0100000d240100012700006cdc020101062402"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000ac0)={'mangle\x00', 0x0, [0x4, 0x0, 0x8001, 0x5, 0xa0c6]}, &(0x7f0000000b40)=0x54) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000180)=0xfffffffe, 0x4) sendto$inet(r0, &(0x7f00000001c0)='<', 0x1, 0x4841, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000700000001000004fdff00000100000001000000000000000061b1b6d18300ff"], 0x0, 0x4f}, 0x28) r5 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400), 0xfd, 0x4cb, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnHSdp+vEmbykfLYUWCqKASJq0QIU4UAQSB5CQuJRjSEIJTRuUpohWFQQO5Ygqca84IvEXcIILAk5IvZY7qlShXlqKkIzW3nWcxE4c105o/ftJsWfWa8883hl7ZifeALrW/vQmidgeEVcjYrCSXbrD/srdrRsXJv66cWEiiVLpnT+T8n43b1yYyHfNn7ctzyws3V7rzLnzJ8dnZqbmsvzI/KmPRs6cO//c9KnxE1Mnpk6PHT165PDoiy+MPd+48r1rx1dbp5t7Pp3du/uNdy+9NXH80nu/fJfk8S+J4+O1X7Q5++ts68kTT7arlP+IHeXbgfJtUsy3FjavQjQlbZDFrCtdjcHoierBi8F4/YtNrRzQUat/hQ5FRGlRkt3XbgPuYknTvblXv4d7SvZFn0QsTKRz4Nr5fDe4fqwyAUrjvpX9VR4pVmevvdX5bfsVI/pj4fbl4wu3L8fieYi+DhUHABA/HKvc52O/xfFfoVi73yvZ2tBQRPw/InZGxH0RsSsi7o+IByLiwYh4qOY59dZ9llu+SLJy/Fm41lJgTbr+bMTL2drW0vFfde1iqCfL7SjH35u8Pz0zdSgi/hcRB6O3P82PrlLGj69d+SpLrhjXpfEfz8Z/6V9afj4WzOpxrdi/9DmT4/Pjdxp37vrnEXuK9eJPqisB6XHcHRF79rVWxvQz3+5t9Nja8ddRXHZ/B0rfRDxVOf4LsSz+XLL6+uTIlpiZOjSSt4qVfv3t4tuNym8p/jZKj//Wuu2/Gv9QUrtee2b9ZVz8/cuGc8om2/+SfpO2/75kaVf6ZHx+fm40oi95s5zvK39ipdtj5X5ji/un8R88UL//74zFd+LhiEgb8SMR8WhE7Mvq/lhEPB4RB1aJ/+dXn/iw9fg7K41/cu3j/8HT1ePfMJGvba94qOfkT9+XH8kP2dAq8SdR5/gfKacOZlua+fxbtaZzd9KaAQAA4O5TiIjtkRSGq+lCYXi48v/yu2JrYWb2pZGI2bOnJyu/ERiK3kJ+pmuwej40FkazaX1+fnRsWf5wdt74656Bcn54YnZmcrODhy63rUH/T/3Rs9m1AzquDetowF2q1f5fKpU+a3NVgA3m+x+6l/4P3atO/x9Ylu/fqLoAG6um/xfyTM3E/p/F3wkD95pG4/8rG1wPYOOZ/0P30v+he+n/0JWyX8IXo6lfy7eQiOLa+6SfPw336YmIjlSs9aeXSltWXuWgkpg+24GqVhN9bXzB7cuvkjC4vteJwjoLTWrb2JZ1XKNhRSI69PZ2KvF3drHNDSgr7UpzA417U/OJzf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//+DutIv") statx(r5, &(0x7f0000000940)='./file0\x00', 0x4000, 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file2\x00', 0xc4842, 0x1bd) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000009c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast1, @initdev}, &(0x7f0000000000)=0xc) 1m15.662862746s ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000008c0)={0x3, &(0x7f0000000840)=[{0xfffffffd, 0x27, &(0x7f0000000100)="5ca434d8572bdbf694a4a25234e8168a8024342ba04ac3cedd0c1a25b6f8df900644b848b42781", 0x0, 0x1}, {0x2, 0x45, &(0x7f0000000340)="c1fd45528b68eccbd8e72bb2548a7eab1c6a5f21c6a3c40af7ad7e1559ad6a0550340b9a19a192d66f9d07b536ed12e4c96d447903434d2177d8db5ae0dc3ad126715ca7c8", 0x1, 0x1}, {0xe7, 0x52, &(0x7f00000007c0)="75fc440e4651904cd6cb3278dce629554c8a977721765165795a6035c022097bcb43b2308b02365f95e372db899bdfa5048237a46a5178ebd83fcfbc55ec83b8f15231aa143e2d66571a58603a5e174dbe86", 0x0, 0x1}]}) (async) sendfile(r0, r2, &(0x7f0000000900)=0x20000000000, 0x6) (async) r3 = fsmount(r2, 0x0, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@acquire={0x134, 0x17, 0x9, 0x70bd2b, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0x3c}, @in=@loopback, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21, 0x7, 0x4e20, 0xd, 0xa, 0x80, 0xa0, 0x4}, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e22, 0x7ff, 0x2, 0x20, 0x80, 0x1}, {0x8ef5, 0x5, 0x4de, 0x4, 0x22d3, 0xe147, 0x4, 0x213065c9}, {0x2, 0x0, 0x1}, 0x3, 0x6e6bbe, 0x2, 0x1, 0x2, 0x2}, 0x40, 0x4, 0x7f, 0x70bd2c}, [@mark={0xc, 0x15, {0x35075d, 0x80}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, r3, 0x16, 0x0, @void}, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000005c0)=0x1, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m14.175329368s ago: executing program 2 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="ea", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000400), 0x4) recvmmsg(r4, &(0x7f0000000440), 0x700, 0x2, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 1m12.386427731s ago: executing program 2 (id=160): r0 = creat(&(0x7f0000000680)='./file0\x00', 0x154) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$exfat(&(0x7f0000000640), &(0x7f0000000740)='./file1\x00', 0x208008de, &(0x7f0000000780)=ANY=[], 0x80, 0x150a, &(0x7f0000002640)="$eJzs3Au0j9XWMPA511oPm6R/klvWXPPhn1wWSZJLQi5JkiRJbgkJSZKQ3HJLQhJyT3IPyS12cr/fck+SI0mSkNyS9Q2d3s95T+d9O+93+j7fOHv+xljjv+Z+njn/a+25x36e5z/G3t91GFy5bpUKtZkZ/iX415fuAJACAP0A4DoAiACgeJbiWS4fz6Cx+7/2JuLP9ci0q70CcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62Wk3SGf/6dlcv3/N3K48Jiv1he+seP/IEX6n7ZJ/9M26X/aJv1P26T/aZv0/99f+f/mmPQ/bZP+C5GWXe3Pn2Vc3XG1f/6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQN58IVBgD+Y3611yWEEEIIIYQQQog/T0h/tVcghBBCCCGEEEKI//sQFGgwEEE6SA8pkAEywjWQCa6FzHAdJOB6yAI3QFa4EbJBdsgBOSEX3AS5wQKBA4YY8kBeSMLNkA9ugfxQAApCIfBQGIrArVAUboNicDsUhzugBNwJJaEUlIYycBeUhbuhHJSHCnAPVIRKUBmqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DevA41IcG0BAaQeP/o/yXoAu8DF2hG3SHHtATXoFe0Bv6QF/oB69Cf3gNBsDrMBAGwWB4A4bAmzAU3oJhMBxGwNswEkbBaBgDY2EcjId3YAK8CxPhPZgEk2EKTIVpMB1mwPswE2bBbPgA5sCHMBfmwXxYAAvhI1gEiyEVPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXvgc9sEXsB++/B/mn/27/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIW5MTcSEjIy5sE8mMQk5sN8mB/zY0EsiB49FsEiWBRvw2JYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2JlrIz34r14H1bDalgdq2MNrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYGltjG2yDbbEttsN22B7bYwfsgB2xE3bCl/AlfBlfxm5YUfXAntgTe2Ev7IN9sS++iv3xNXwNX8eBOAgH4xv4Br6JQ/EMDsPhOAJHYFk1CkfjGGQ1DsfjeJyAE3AiTsRJOBkn41SchtNxBs7AmTgLZ+EHOAc/xA9xHs7DBbgQF+IiXIypmIpL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/FT3I7bcSfuxN24Gz/Dz/Bz/BwH4n7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHF7AC3gRX8j1TZ3dBdYNBHWZUUalU+lUikpRGVVGlUllUplVZpVQCZVFZVHlACCbyqZyqBwql8qlcqvcihQpVrHKo/KkAIDKp/Kp/Cq/KqgKKq+8KqKKqKKqqCqmiqni6g5VQt2pSqpSqpkvo8qosqq5L6fKqwqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqqHVC3VA/vgI+pyZ+qqQVhPDcb6qoFqqBqpN/EJ1UQNxaaqmWqunlLDcRi2VE18a/WMaqNGY1v1nBqDz6v2ahx2UC+qjqqT6qxeUl1UU99VdVOTsIfqqaZiL9Vb9VF91UyspC53rLJ6XQ1Ug9Rg9YZagG+qoeotNUwNVyPU22qkGqVGqzFqrBqnxqt31AT1rpqo3lOT1GQ1RU1V09R0NUO9r2aqWWq2+kDNUR+quWqemq8WqIXqI7VILVap6mO1RH2ilqplarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9U2tV3tUDvVLrVb7VGfqb3qc7VPfaH2qy/VAfUXdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XP6gT6qQ6pX5Up9VP6ow6q86p8+qC+lldVL+oSyoo0KiV1troSKfT6XWKzqAz6mt0Jn2tzqyv0wl9vc6ib9BZ9Y06m86uc+icOpe+SefWVpN2mnWs8+i8Oqlv1vn0LTq/LqAL6kLa68K6iL5VF9W36WL6dl1c36FL6Dt1SV1Kl9Zl9F26rL5bl9PldQV9j66oK+nKuoq+V1fV9+lq+n5dXT+ga+gHdU39kK6lH9a19SO6jn5U19WP6Xr6cV1fN9ANdSPdWD+hm+gndVPdTDfXT+kW+mndUrfSrfUzuo1+VrfVz+l2+nndXr+gO+gXdUfdSXfWv+hLOuiuupvurnvonvoV3Uv31n10X91Pv6r769f0AP26HqgH6cH6DT1Ev6mH6rf0MD1cj9Bv65F6lB6tx+ixepwer9/RE/S7eqJ+T0/Sk/UUPVVP09N1n98qzf67/B6/XXX/Nv/df5A/4Nd336K36k/1Nr1d79A79S69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf00YAA+pg+ro/rE/qkPq9/1Kf1T/qMPqvP6vP6gr6gL/72PQCDRhltjIlMOpPepJgMJqO5xmQy15rM5jqTMNebLOYGk9XcaLKZ7CaHyWlymZtMbmMNGWfYxCaPyWuS5maTz9xi8psCpqApZLwpbIqYW//l/D9aX2PT2DQxTUxT09Q0N81NC9PCtDQtTWvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQ2nU0X08V0NV1Nd9Pd9DSvmF6mt+lj+pp+5lXT3/Q3A8wAM9AMNIPNYDPEDDFDzVAzzAwzI8wIM9KMNKPNaDPWjDXjzXgzwUwwE81EM8lMMlPMFDPNTDMzzAwz08w0s81sM8fMMXPNXDPfzDcLzUKzyCwyqSbVLDFLzFKzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyS81Ws9VsM9vMDrPD7DK7zB6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXOsx3Fz3JwwJ8wpc8qcNqfNGXPGnDPnzAVzwVw0F80lc+nybV+kIhWZyETponRRSpQSZYwyRpmiTFHmKHOUiBJRlihLlDW6McoWZY9yRDmjXNFNUe7IRhS5iKM4yhPljZLRzVG+6JYof1QgKhgVinxUOCoS3RoVjW6LikW3R8WjO6IS0Z1RyahUVDoqE90VlY3ujspF5aMK0T1RxahSVDmqEt0bVY3ui6pF90fVoweiGtGDUc3ooahW9HBUO3okqhM9GtWNHovqRY9H9aMGUcOoUdT4T60fwpnsT/qutpvtbnvYnvYV28v2tn1sX9vPvmr729fsAPu6HWgH2cH2DTvEvmmH2rfsMDvcjrBv25F2lB1tx9ixdpwdb9+xE+y7dqJ9z06yk+0UO9VOs9PtDPu+nWln2dn2AzvHfmjn2nl2vl1gF9qP7CK72Kbaj+0S+4ldapfZ5XaFXWlXnb8ewK616+x6u8FutJvsZrvFbrWf2m12u91hd9pddrfdYz+ze+3ndp/9wu63X9oD9i/2oP3KHrJf28P2G3vEfmuP2u/sMfu9PW5/sCfsSXvK/mhP25/sGXvWnrPn7QX7s71of7GXbLh8c3/58k6GDKWjdJRCKZSRMlImykSZKTMlKEFZKAtlpayUjbJRDspBuSgX5abcdBkTUx7KQ0lKUj7KR/kpPxWkguTJUxEqQkWpKBWjYlScilMJKkElqSSVptJ0F91Fd9PdVJ7K0z10D1WiSlSFqlBVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlJjakxNqAk1pabUnJpTC2pBLakltabW1IbaUFtqS+2oHbWn9tSBOlBH6kidqTN1oS7UlbpSd+pOPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jIbTCHqbRtIoGk1jaCyNo/E0nibQBJpIE2kSTaIpNIWm0TSaQTNoJs2k2TSb5tAcmktzaT7Np4W0kBbRIkqlVFpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2jC/QzXaRf6BIFSnEKMrprXCZ3rcvsrnMpLoP72ziHy+lyuZtcbmddNpf9P8XknMvvCriCrpDzrrAr4m79XVzSlXKlXRl3lyvr7nblfhdXdfe5au5+V9094Kq4e3+L0/8a13APupruMVfLPe5quwaujmvk6rrHXD33uKvvGriGrpFr4Z52LV0r19o949q4Z38XL3KL3Vq3zq13G9xe97k75867o+47d8H97Lq6bq6fe9X1d6+5Ae51N9AN+l08wr3tRrpRbrQb48a6cb+Lp7ipbpqb7ma4991MN+t38UL3kZvjUt1cN8/Ndwt+jS+vKdV97Ja4T9xSt8wtdyvcSrfKrXZr/vdaV7hNbrPb4va4z9w2t93tcDvdLrf71/jyPva5L9x+96U74r51B91X7pA75g67b36NL+/vmPveHXc/uBPupDvlfnSn3U/ujDv76/4v7/1H94u75IIDRlas2XDE6Tg9p3AGzsjXcCa+ljPzdZzg6zkL38BZ+UbOxtk5B+fkXHwT52bLxI6ZY87DeTnJN3M+voXzcwEuyIXYc2EuwrdyUb6Ni/HtXJzv4BJ8J5fkUlyay/BdXJbv5nJcnivwPVyRK3FlrsL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOvx41yfG3BDbsSN+Qluwk9yU27GzfkpbsFPc0tuxa35GW7Dz3Jbfo7b8fPcnl/gDvwid+RO3Jlf4i78Mnflbtyde3BPfoV7cW/uw325H7/K/fk1HsCv80AexIP5DR7Cb/JQfouH8XAewW/zSB7Fo3kMj+VxPJ7f4bMLW+W4fK83iSfzFJ7K03g6z+D3eSbP4tn8Ac/hD3kuz+P5vIAX8ke8iBdzKn/MS/gTXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/yNt7OO3gn7+LdvIc/4738Oe/jL3g/f8kH+C98kL/iQ/w1H+Zv+Ah/y0f5Oz7G3/Nx/oFP8Ek+xT/yaf6Jz/BZPsfn+QL/zBf5F77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxTfFuWMbU+xijuM4T5w3TsY3x/niW+L8cYG4YFwo9nHhuEh8a1w0vi0uFt8eF4/viEvEd8Yl41LxYw+Uie+Ky8Z3x+Xi8nGF+J64YlwprhxXie+Nq8b3xdXi++Pq8QNxsfjBuGb8UFwrfjiuHT8S14kfjevGj8X14sfj+nGDuGHcKG4cPxE3iZ+Mm8bN4ubxU3GL+Om4Zdwqbh0/E7eJn/3D493jHnHP+JX4lTiE+/X85ILkwuRHyUXJxcnU5MfJJclPkkuTy5LLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSIVRJDx698tobH/l0Pr1P8Rl8Rn+Nz+Sv9Zn9dT7hr/dZ/A0+q7/RZ/PZfQ6f0+fyN/nc3nryzrOPfR6f1yf9zT6fv8Xn9wV8QV/Ie1/YF/GNfGPf2DfxT/qmvplv7p/yT/mn/dO+lW/ln/Ft/LO+rX/Ot/PP+/b+Bf+Cf9F39J18Z/+S7+Jf9l19N9/dd/c9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz8s/xc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+1P+y/8Uf8t/6o/84f89/74/4Hf8Kf9Kf8j/60/8mf8Wf9OX/eX/A/+4v+F3/JBz8+8U5iQuLdxMTEe4lJicmJKYmpiWmJ6YkZifcTMxOzErMTHyTmJD5MzE3MS8xPLEgsTHyUWJRYnEhNfJxYkvgksTSxLLE8sSKxMrEqEcJN2+KQJ+QNyXBzyBduCflDgVAwFAo+FA5Fwq2haLgtFAu3h+LhjlAi3BlKhlKhdHg81A8NQsPQKDQOT4Qm4cnQNDQLzcNToUV4OrQMrULr8ExoE54NbcNzoV14PrQPL4QO4cXQMXQKncNLoUt4OXQN3UL30CP0DK+EXqF36BP6hn7h1dA/vBYGhNfDwDAoDA5vhCHhzTA0vBWGheFhRHg7jAyjwugwJowN48L48E6YEN4NE8N7YVKYHKaEqWFamB5mhPfDzDArzA4fhDnhwzA3zAvzw4KwMHwUFoXFITV8HJaET8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBp2Ba2hx1hZ9gVdoc94bOwN3we9oUvwv7wZTgQ/hIOhq/CofB1OBy+CUfCt+Fo+C4cC9+H4+GHcCKcDKfCj+F0+CmcCWfDuXA+XAg/h4vhl3BJ/mZNCCGEEOKfov/geI9/8DX127isJwBcuz3n4b+vuTHbX+e9Va4WCQB4pluHR/5jVKzYvXv3385dqiHKOw8AElfy08GVeBk0//W1GRT9h+vrrTpd4D+on7wDIOOVyr/KCFfqPw2toRnc9l/Uf+KpEYtKxOey/Df15wHkz3slJwNcia/UL/Zf1M/e5A/Wn+Gr8QBN/yYnE1yJr9QvAk/Cs9D6P50phBBCCCGEEEL8VW9Vut0fPT9ffj7PZa7kpIcr8ZXnz3/8fC6EEEIIIYQQQoir7/lOnVs90bp1s3b/5GSbBvinT04zk3L/fyxDJjL50yZX+zeTEEIIIYQQ4s925ab/aq9ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIu/5f/Duxq71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4mr7XwEAAP//7d019A==") mkdir(&(0x7f0000003b80)='./bus\x00', 0x19e) unlinkat(r2, 0x0, 0x0) mount$incfs(&(0x7f0000003bc0)='\x00', &(0x7f0000003c00)='./bus\x00', &(0x7f0000003c40), 0xc002, 0x0) chdir(&(0x7f0000003c80)='./bus\x00') sendmsg$NET_DM_CMD_START(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socket$inet(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000003cc0)='./bus\x00', 0x0) chdir(0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc008, &(0x7f0000000580)=ANY=[@ANYBLOB="ee26636861727365743d63703933322c696f636861727365743d6d6163636502000000000000006e695f786c6174653d312c0053cd667586ca811ffde5382bba6dc3ee8ea6cd04d28158ee169c1d66acf6949ae04c25e0b33eb07ac49749e101ffc35f40c87a4b6a7b7396cfcd1e20351fe2ac67b6e7034ffefb013ebb76bf6419581aa198b582cee1b4381c27a7726e49d14c397952b85b1200760d1ffba5d01bb459"], 0x91, 0x30b, &(0x7f00000001c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./bus\x00', 0x141000, 0x198) openat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x40, 0x0) getdents64(r3, &(0x7f00000008c0)=""/4096, 0x1000) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x88, 0x68, &(0x7f0000000700), 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m8.546458633s ago: executing program 2 (id=179): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) fcntl$addseals(r0, 0x409, 0xc) 1m8.470596391s ago: executing program 2 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 1m8.402209348s ago: executing program 34 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 52.135036241s ago: executing program 7 (id=277): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000180)="b7", 0x1, 0x44000, 0xfffffffffffffffd, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(r5, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="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", 0x564, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r8}) keyctl$KEYCTL_MOVE(0x1e, r8, r7, r6, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x78) 51.150785492s ago: executing program 7 (id=280): r0 = openat$kvm(0x0, &(0x7f00000008c0), 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001740)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80c406, &(0x7f0000000140)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456c1c8c4a4fc84fea7cabb001968d0d3591bee2f2c93453aa0e750a0b57ffb2d9eeba407a2e8b16c7b6bbeb5ff7fd5fc6c95c4169ffd42357bc6dfbcb88ca559d001460faf3504f22c5853ffa0860ad22946569f51608372adbc094dafdd94e8cc7eeb17d679ca2466e36ae023e13fb304a68f95dc1c56fd365fcf5af0a961b9a7e79e615d6c7daa97af0dca88191b4547239725d1dec265fcced6f805f894c1abdf83b56759ee877f9f220c1ef112adae061e7b6ba836f436d4d3af", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x40042, 0x0) socket(0x10, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffedf, 0x10, &(0x7f0000001640)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001700)="b99cdfe10723f0f0c10400007300", 0x0, 0xf3fb, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 47.931226851s ago: executing program 7 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x17, 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000510000007e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x8}, 0x4d) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000a80)="$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") mkdir(&(0x7f0000000d00)='./file\x00', 0x0) mkdir(&(0x7f0000000d40)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000d80)='./file/file0/..//file0\x00') 47.474980267s ago: executing program 5 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000b40)=ANY=[], 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000002) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r4, 0x0) connect$unix(r5, &(0x7f0000001340)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000013c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001400), 0x4000087, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000b80)={&(0x7f00000001c0), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x8, 0x10, &(0x7f00000009c0), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000a00)={r8, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000000a40)=@cgroup, 0x10}}, 0x20) 46.668771779s ago: executing program 7 (id=296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810, &(0x7f0000000080), 0x3, 0x4bc, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) mkdirat(r2, &(0x7f0000000740)='./dev\x00', 0x1ff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000000) syz_mount_image$ext4(&(0x7f0000000800)='ext3\x00', &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000880)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f0000000900)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="120000001e0000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x20000800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e40)={r3, &(0x7f0000000e80), &(0x7f0000000ec0)=@tcp=r4, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f00)={r3, &(0x7f0000000f40), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/mapper/control\x00', 0x2, 0x0) write$P9_RREADDIR(r2, &(0x7f00000007c0)={0xb, 0x29, 0x1, {0x1}}, 0xb) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000580)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000005c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f000001c980)={'sit0\x00', &(0x7f000001c9c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x67, 0x1, 0x57, 0xba, 0xfffffffd, 0x1000002, 0x8, 0x49, 0x9a, 0x45, [0x203, 0x10]}}) 46.053371362s ago: executing program 7 (id=298): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, r0, 0x2) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x8000002, 0x2004}, 0x1c) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x1, 0x80000000, 0xd, @empty, @private2, 0x700, 0x700, 0x1, 0xeaf}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@arena={0x21, 0x0, 0x0, 0x23, 0x40000, r2, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000240)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x7b, 0x4) recvmmsg(r4, &(0x7f0000000100), 0xa0d, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000140)=[@register_looper, @increfs_done={0x40106308, 0x1, 0x3}, @request_freeze={0x400c6313, 0x0, 0x3}]}) fcntl$addseals(r0, 0x409, 0xc) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$TCSETSW(r6, 0x4c07, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 45.581952291s ago: executing program 7 (id=302): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001280)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x100, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) getdents(r3, 0x0, 0x54) 45.581614061s ago: executing program 5 (id=303): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x800401, 0x0) chdir(&(0x7f0000000a40)='./proc/fs/nfsd\x00') r0 = open(&(0x7f00000007c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 45.554043964s ago: executing program 35 (id=302): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001280)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$eJzs3c1qY3UUAPBz852ZRbJwJcJcUNDVMPUJOsgIgwVByUJd6OBkQJpQaCFQFWNXPoFP4MaXcSO+gHu/dhYRr9zcfNabGEvbFOf3Wx3O+Z/ec/+9TVf3n49eGh4+PTp5dvb5j9FqJVHZj/04T6IblZj5Mkr98Et5HgC45c6zLH7LCs0idbq6or6ms1a59uEAgGux/P9/17MAADfj3ffef+vhwcGjd9K0FTH8atRLIlqL+sNn8UkMoh8PohN/RmRzRfzm44NHUUtz3XhlOB71Rr2I4Yffzfp/jpj070UnuuX9e2lhqX886tXjzvT6+4Pov/1NdOKF8v7XS/qj14jXXl6a/3504vuP4ygG8XQ626z/i700fSP7+vfPPsizeX8yHvWa83XT1dUb+6UAAAAAAAAAAAAAAAAAAAAAAPC/dz+d666evzM7+H9DfcP5QOOl83kepGmaJcX6RX8tXqxFbZf3DgAAAAAAAAAAAAAAAAAAALfFyemnh08Gg/7xImisL20bzF7rLynFX6uZZkRs85ObK5nKNLi3/WDFPFGdjjZIIra/r8bxyWk9mpPOf++qbr1Rf0yCdj5P/zipxWU3/J9BMs+0l0v3orhWnmkXwVJm60t8e7fYxYulVpGZPV2HT5LoVzbuWKvsIbmCICt5/KpruxoXM+0ov8G8tOHqjbuXmjnrXMi8+tOvj/MgiYj6fDNX10z+yO4sHsj61e5h6cdF44o/fgAAAAAAAAAAAAAAAAAAgCWLl35Limc7GAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdmDx/f//IRhPm9etyap5UItpZse3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHPg7wAAAP//kppZgg==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x100, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) getdents(r3, 0x0, 0x54) 45.506783498s ago: executing program 5 (id=307): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) rt_sigprocmask(0x0, &(0x7f0000000580)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0], 0x10}}, 0x0) tkill(r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x3, 0x0) sched_getparam(r3, &(0x7f0000000080)) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8001, 0x0, 0x0, @by_dev={r1}}) 45.355687374s ago: executing program 5 (id=308): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) rt_sigprocmask(0x0, &(0x7f0000000580)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x14, &(0x7f00000005c0)={[{@norecovery}]}, 0xee, 0x474, &(0x7f0000000ac0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") mount$incfs(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x82, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fsopen(&(0x7f0000000600)='fuseblk\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f00000010c0)={'syz0\x00', {0x5, 0x7, 0x1, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xe845, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffff6, 0x3ff, 0x2, 0x7, 0xc4, 0x3, 0x1, 0x5, 0x6, 0x9, 0x3, 0x9, 0x4, 0x9, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0xf9, 0x3, 0x8, 0x4, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0xffffffff, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x48, 0x1, 0x40, 0x8001, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0xd, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x405, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x9, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x10000, 0x0, 0x9, 0x5, 0x5, 0x4, 0x200009, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x3, 0x1, 0xa, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xfffffefc, 0x100, 0x7, 0x2, 0x0, 0x2, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3, 0xfffff800], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x0, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x9, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10003, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001540)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001580)="82", 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r8 = openat$incfs(r7, &(0x7f0000001040)='.pending_reads\x00', 0x20001, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0xc058671e, &(0x7f0000001080)) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x0, 0x2}, 0x10) ioctl$DM_DEV_SUSPEND(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8001, 0x0, 0x0, @by_dev={r1}}) 45.013347899s ago: executing program 5 (id=311): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x3, 0x12, 0x9, 0x7}, {0xcf66, 0x6, 0x5, 0x1}, {0xfff, 0x5, 0x2}, {0x73, 0x5, 0x8, 0x8}, {0x7, 0xf, 0x3, 0x6c}, {0x2400, 0xc, 0x2, 0x81}]}, 0x10) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x228, 0x2, {{0x30, 0x4, 0x2, 0x1, 0xc0, 0x66, 0x0, 0xef, 0x4, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x4b, [@empty, @empty, @local, @loopback]}, @timestamp_addr={0x44, 0x34, 0x3f, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x54cd}, {@loopback, 0x1}, {@loopback, 0x5}, {@broadcast, 0x7}]}, @noop, @cipso={0x86, 0x52, 0x3, [{0x0, 0x12, "cd1d2a18ed2ae920103cd2f7a02943d7"}, {0x0, 0x11, "e2af0590b458bd6fe07e7ce206fb6d"}, {0x7, 0xb, "963bf1a480ab56d9a3"}, {0x0, 0x7, "64aed96ad0"}, {0x1, 0x10, "36b2c998a3511016cd47cc575761"}, {0x6, 0x7, "62204bedbe"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x74, [@multicast2, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2, 0x3, 0x3, 0x5, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x10, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x50, 0x6, 0x5, 0xa, @local, @mcast1, 0x7f50, 0x0, 0x9, 0x3}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x45, 0x8000, 0x9, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffffff7, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x7, 0x40, 0x62fb, 0xe806, {{0x2d, 0x4, 0x1, 0x2, 0xb4, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x46, 0x0, 0x6, [0x0]}, @ssrr={0x89, 0x27, 0x97, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @private=0xa010100, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x34, 0x3, [{0x6, 0x4, "a295"}, {0x6, 0x7, "eb2daae3ff"}, {0x0, 0x7, "0279d1eba7"}, {0x0, 0xa, "9c3db13e3b6f84c0"}, {0x2, 0x4, '\"_'}, {0x7, 0xe, "117356ddf8901f9b3cbe8fb5"}]}, @rr={0x7, 0x7, 0x3c, [@empty]}, @generic={0x86, 0x12, "7edb2517276c030d40ec18042ff3203a"}, @timestamp={0x44, 0x18, 0x83, 0x0, 0x3, [0xfe, 0x10000, 0x3, 0x7fffffff, 0x4]}, @timestamp={0x44, 0xc, 0x19, 0x0, 0x8, [0x1, 0xe0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x5, 0x1, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @remote, {[@generic={0x7, 0x9, "636f2128bf7b2a"}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x0, [{@local, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x3, 0x10001, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x65, 0x0, 0x66, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0xcc, 0x3, 0x5, [{@multicast1, 0xaa}, {@empty, 0x80000001}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0xcca1}]}, @generic={0x88, 0x7, "9023178ae2"}, @rr={0x7, 0xb, 0x73, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0x2a, [@multicast2, @multicast1, @multicast1, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x9, 0x10, 0x3, 0x7, {{0x37, 0x4, 0x0, 0x9, 0xdc, 0x8000, 0x0, 0x2, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xf, 0xe8, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @multicast1]}, @cipso={0x86, 0x2c, 0x0, [{0x2, 0x12, "46a05e3d818736fa6b4c43f239c386e7"}, {0x5, 0x9, "6b7e05006bad86"}, {0x6, 0xb, "4e49aeb0c81c1b3e45"}]}, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x0, [{@rand_addr=0x64010101, 0x3}]}, @lsrr={0x83, 0x7, 0xe4, [@broadcast]}, @cipso={0x86, 0x53, 0x3, [{0x5, 0x11, "e1f48bace0ebefb227619a03baca7c"}, {0x2, 0xe, "d82cfcee3edf8b1457bfe375"}, {0x6, 0x7, "e9597caaf3"}, {0x1, 0xc, "bf83bf2e38a3fa0b91a0"}, {0x2, 0x6, "ee8dcc98"}, {0x1, 0x8, "a46f84bb58f8"}, {0x6, 0xd, "dfe0d4f39308d1d5d8d76e"}]}, @timestamp={0x44, 0x18, 0xf9, 0x0, 0x3, [0x2, 0x0, 0x4, 0x2, 0x400000]}, @timestamp={0x44, 0xc, 0x93, 0x0, 0x2, [0xad42, 0x80000000]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x254, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf07e4e5e5c0f5476}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x41}, 0xb743fb24f1e1eef9) r14 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000d00)={{r14}, "bb5661c0ea94ace0e4ac70feafd089b96147baec3966d3e3949ea3845077306ed2c85ce53d164501e35f8efb5adaa1851f77d1ba316bedae9d7d440f2df38b12b6296dd1f596925a3457538dcdabf5f36181a44c071f2288c829ea6fedbc681cf38f10063897ceefa5f6afe309dcb833f2f2a705eac8887128b9320fbd38e3057195df4a7985a674b8436cd44f15de5c4153265ef97966913e7bea0d0d45e6f0bb21f5cc2e730dbf774b6ee403a8fe88963697d12cf9078db0f9cf789091a915c46dc92459b5a62be3159eaa8dfe17028a931c45fa9b1513bc04bfa01c0dd4b14208a238ed3762682d0a6c652483dc8f875bde89af17c8abcb970b442a676874847461e12eab328867aa16d546bc91e4a50505118907b0ea266ae15b489f05d3e35afc14cb19afb39970f624aa0524aad51e07186772bdb1bbec9f428d889b4bcf91b42d666893f366ebfd3bf0227e37f2a11820f956319615fed38f3bbf1d8ed0115ad048f65d0214dd80aa52633c53218387972922f04b999840d64a1c94acf7b1766634236c827cba59d9ebfc3b942a8d846d1611539ba85e5e97cef48462189a4cd812c675a1534d5acae100d9efc190facd3a89d6068b8e07cddf804a5ef2dab91ec3970d27b72168307168edb968d022eaf6d7570c42ed8bfd83f21d206fbfb83702bb53fd8f16a7d9322b2a3a41e8362599f0da4475de5087c76833aa69ad998733769ba7db7723ee415b424adc527ab50b51c93998329c34423982e6eb4f09f3b1974c62c1f4261c8ab4893bd4ece6596951171fafb8f41bc2b806498ef380dbeeda7acfd50a35889371ce5c4133b960f44249e975187f1a7833793a8e536203b5a537164285fd825fc5787fd58afd93371cdaf2a1b761d12182d20e1b7d69c5ae6e23d4aa28949bb0eba2b424c86ba8d221d20a00c0c987cd770ff1bd985e7903a96b87f2fceb2c43c4e8e6e4bce653f7354e3eca3dbc48864a1dcc7fd297326409787cfc3a7211a998b33c5099dfa4e74b0835e1ea302569556d5f4f481b9b6f9c4b1050afc2db12624f5e74951eb2b0684c91787924b51f191be55b37b46599a6af5190e3c2532fc5f0c9e1017ec6803a044ca1aaefb480eb7007b8a576d46ab17dad4e37dc2a325a3b0d790795038ec6aa0967809442295f66cb437724d490ccba45291b1d199f9f478da46d7c30f2b6864667e14e60f0fce653d1a215e70b26cbb0948ceec5d609181e409365ec0a65905d8023e1452265995bdad19ec9ace6cf736297db0cd6452da72d2396d1386c20dfc14a6a21234c367145d9f6d210651438f6fdfcbaa94cae0293d6b957d0353f8086c68b26eb6152b8f73e8d2f495538621b4ae70facc39d3e500769c055555412153c11bc2d3e44abedc70014c754ce84f03bc41c22a4e998edd3b531acc337f46eaf4691d097c468f8c06d3078260a9fdfd34406b6f809dc765604efef6fac3be098b0a2d47a24e3a39a1f425d8e62bb6d0ada611c6ea5d9d8da8f6cabc2bebf9bd9345f1c507aaacd323f97bee2c4391f0f5ac76e5399a7b47a9cbec46b112f237aa2e581d249b13b3ef5b0a68e5e61bd8ad08fbb3346c2a54c582039d55f64e230c030fe59ef036e4986168357c75151a73f6cfaaba06d47c12a081bc4057f2c57b39ec4dd8ebc9baeff84acb33bf6e9f6d2fd93f2a877a4ff39ea14594f8a51751874ed22873d55f6da6efd074c81068348ebec63e12843f5d2c44b2347d9197d1b09927ed2b9bcbacc172f782afe3aa9d7c1a8cff26974596fd3369a5ece45b9c292943196a7304b4db9db184b2af059db8a55b87da925df146566c765d4dd9c1ccb50d4c588ae0d8969f867eba97653a9593a87b7747c833f078d66c444a69e3043b68acdf422f375ff09f7d20f6e5db546c16cafee40ebe5f0000b733cb243c479e08a39f5df68df356474bda212e6cdd2ab729c2bb2ba0476eaaada000bad3e517b2c3bfe681c20c3d2b682ae9bbe5af38b3967690b034c15dd2d612fd2e5ea69cb6177e4e56c95bbd5d5092f9a4a71533d0b6a332917def13b32f9a2d73757c3fa7945791abae74411df0ae3173f3aef7e0640c7d0bae2e5d38d64cda4e8c96a5085bfbbf9e2be7fab1b97aa71f589f24fbf26ffdd528b05834f58ec49a5cafb0edf4137426a2b80394ad255cc41746bde4233297de9a31eef1a99d1f07b80c6eba87174e8b20e5eba9e2a811fc5abc88eee12168f18cedebf4d7a00e68710d7977f33a43c7d97065b5beab47f6abb52e89f22bbc8d82522c240eb40beb5ef85dd86d4a8afad1c5d170aaa520ff6497b72e967af4be358cea511b09e3ac288a14ccf553fc5d2fc62044d66480ae60f5abf200613d9f789cb8591761e88cf1e774405e4349c4a9b0bf7a167803e2cac58bc64082b5e812a5a27e6042da93d2ff22687bca6721fc7847f9a94b62da8c712f6403ceac573da20197143ed13d87038486d09af1157d1653c9bdfb674e454c416f0f3067c24ead943b09ac40124934dcfde7bc1addcd737b8bf4541e31ca35eedb656e6367b553fd988d524cae4b6618e668089205858a1253c9ca05538676d29ccd0b569ba775982017744fe3bcf3d4760a8cfd05c30fd57ea4cb5aabe48b8a78ae9a7feab50cea0ba2a306e42fc4f847e4753061692003a0d6bdc9a9940443e5a2ff987c41282257cdf88ef2bc2994f387216bdd44d513691ba26f1e41bc3290344d2c304d98ac8c8910ce63a29c5e48d1428064ef692c258a0e47c3d15e0e4f3f4241f813b9c166ade19c302a68de2f65ae8943db78fcee48816137710db65c2b26f607695b22e5a9ba0646bf9423f313fa407e636acd69c1fdfac6ecbfb72b0d715b25d6daf939dcab19b5e4d1f258dd4d87312dfbfae4de0340f7278d1593a12a5d88bce136ab1621d783adf9dd7323071a01ec0661fe46cec6304d33467ce2e5044023d2b2e8a0941881ea3b7f2e888c997283922741aabe939882e1efd6d6085215c61b34dafd6955a75b95697e8c12b11292c8918730ff672e2addb92b8a8c43caa34821bd4df5b581a602cecafce17ac9522cd214ffdfe4d9af45088614e022e8bb30c9eb192a0ad01bbb3435ca8804f5b0b35e6b27c1076a28d12650748dd012c71b9d3ae995f9a6bc2f267b89ba4d23bdf52a7c0bdee100d7d187749a5a5cbec0c5da07f82c3d89b195daaba0178415cd899ff94a2a68673c6b9624545189c90b1bc3e4cbaa8aecae6100157e4735f4e686450fa1e08de48b70a842eb9325a9e6c06a6b27a8a723f659e5815e084c4a0104daefe688fc5404dd6dd141df6e47b3edad763d180c5d43d1ca1717d3fa8166879c70e407e25dce2baa8e6ef04ee82017dd30edfad0dcdd6fefc782f0e61f994197393f0b9b2fdd3a70deecff8a767690512ee97dadb28443b421242c81c954b59beb7743494bf8889f9bc6538d223efa5cf9893fc3a1cd83bb130301e5e5e880af7eb663c5ef6ba623d2c04a62ca029acef10e3ea5273f21290ac5a4ff3932cacc73e8a33f9dbaf004d96b22369e5bd04ce8649ad1ad2a7cc51ea5f637a193d42ee5aa574a8f45f4361ee8dc47d1ae6a06190a189e1b039ab46776d4c6792237414df3136e5c3abca03f67c03f49aeb7ecf2f14e20b85d69a00de164d70122d3beb2fc98d02821acb600b8540fa59523ea7499fccfabf828c081db825dc1b281476f7427dee91d0b0cd7986309d15c5fc1791c0dcdd73fc08477dbf6217cd42b0cab343ee20869e2f380e1e08992f0dffcad5b069f3919babda3d5f6f1667cd89ea7edbfbdfae5cac0a706386cb59c17ae3c7f8fd5338767a728186fc610c4563bf7a82cc84683bd5a911b5527bc012d5b9cd81c1b1184d514bff5716d0582a4120ff0655cd004f84ca397197f927164780a699e24e59079cb01bae5fb88cb3df53cc8596470e232f2e9fec8eee2d25dcf381fb537663a8a3a0096edd1f8950cc53dea1182b6ec29eb28f556f78d94cf623ad3ecca2a7b612839f9b4e3fd3ed923f8d1d25ef889e4de4a684e1397c6fcdba6ef2a1291cdfc4866284c69dd3f351d34aef2540c178e5d14d3654b58ed76661319ff048d4a1d107b1ece67f067a16f635999e25947d813600b0190083d4e863443eb62d8624f7451993e2a8a97dbbfe336476a9406879bff73443ea5541a5ecbbfea0cf1ccbfe1d88b00c9d33d3888824451eda36f21f616286747e628919729e288f995a66374ed91f174c0fda8568aa8733bf85bf5b3f1af8fe7d395e3c30b7d9e17d113c91970c018e2c4581d4fff5da2da1d6e3005915548183a8318278e7c8bfb3204ad4605fbe4bec77371dc75abd5a4a30c6e6cfa4b09b7d483640dd36c9f48b1d80524b0cdf4803a5851334ade137a752a803a936c20434fdd7bb19893a37f79755ef374309fefa77bf5e285fe39a95886041b3132702e1847455e275d3d0d5796cbf5d3f9a9ee7d802ec45926884b4f39fa4c884b5e0816a8549450b17a523fb2f7d604c4e202b2ebec0172cd2403848518502ca5a8e3cfbe825059dff5f352ccd7096781d105f1269b89d2f39ed319fcd9877a4b84e216230eb1948002391d73e399c20c49d42c01354ccb58d4816388a9f466ce1b947590ea55b19137bc55a3099999f8a0f664bc248ba0bb2b890dabd4602fa93cce8edbf659bf8f22e6618515582e011b58dc90bf1fcfab44d28eef6f3e616b2390bff4df1ea481b6f72978112e627bb81f3a88a563fe38c96f5daa24b8bbca4d97019ed06b9cd902f90aeee591f58957b90e7dc2b879f1f82451bc6848e24d2f72c2053b3df23b359fe3d2b004a22f1478b3151c833848dfe3f98181f4fb2ae127733ce269a835f0a2c6b06224463d2f4b46efcc5d66230072ec1481323e42e889d9bfb782f0acdfb5d180cd7e78790f761304cbc6ff4c24021ae119ebeccccd29e3678cbe93c2081c1d271d54a648b37549c782720b3e725b80e58743a4c39c52017a876980b6bbbce3a2fcfb9d94f8a63c5150cd8c090bdbb2dd3f091cde37465a7f1af04b8ac82d55cd9dbcfb2063000bb754889e116cd645837b2b70855901816e27e90258a4ea78e2644cd052dfe49e585b69c727bdbf432f2c12cde2638bb51e4bb0d19c509a7316b39588d4ad01ef2edecfb94fb320673af486e74d91823c1695413505fd3a290ef27e44c6fbf6f643e1b0d9d7efd89c524fba5fbbd6f8fc2712efffc78181cc0eb632b2efbb2b8fc4603d37bbb065cd56eaf58066807f18b2a164e1199289e84b180572de328ff5cfa23d812a56384bd59c0eb0e89727cd6852f3143c598b98d6e6fdd586bb4aba123be5e52c1d57561773a59ff440ca1d9e5bd3238590b20e78cb9c0896d65f3dfd8c0a36b4ba40320bf329a13688c854cea1aaad81fc6e9889e6a68aedd4287cf5f8edf3da5dd22a2f5507f8700289330a68f918a04a8a4a292d4d27ca698502c6aaf341d6da086322e6db1aebf7558588ae0d0b0ed413525cb8c60b6ee8c847d9a9ec6c0d255e464786d34ec5a32bede5889e4eec2614b57c93128802966e12fb3664ec79d87c29984d53d96867bbebc562864290cf0940bd70a22607db1171a18b1118b926df3bf0c771fcf076ccba50200d163ab4cb54b2e8d07ed81f8eeceb7b1b56e93df4365083fa4292510495310d9478b6ba3a1b0bea4e2dc5515a3cd9eb8b3be410530d1acbd228c6be2e77ac7bd41bd5dee407b83bb9e2cf4f87a9e9fbc1f634087cd69fab09eee110b01ef5807ca7166a8"}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000001d40)={{r15, r16+10000000}, {0x77359400}}, &(0x7f0000001d80)) r17 = dup3(0xffffffffffffffff, r1, 0x80000) fcntl$setstatus(r17, 0x4, 0x2800) r18 = fcntl$getown(r2, 0x9) ptrace(0x11, r18) ioctl$LOOP_SET_BLOCK_SIZE(r17, 0x4c09, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@bloom_filter={0x1e, 0x9, 0x0, 0x9, 0x20188, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0x1, 0x0, 0x5, 0x8}, 0x50) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001e40)={0x0, 0xce, "e26b05b6a2e92c1e9cbef89b8cd435c828ced13ff916612faac98a009c83d0a443b6d7558e7235a687b9466e0545db5d9ae79bfaaf8dbe6e25890f3bc02657310d727e0b3686b22293030cdcfd50654aa60ebfcf2163b08b95c4b86b6fa35fca4c57dcfddf16606ee772e160f9789b7744558fff9ae0ee28eb2443a288203a27ee132dbad8d51db69d9a9de69d2c799e17cd2d515e9d5e04b74276ed572ee1098996bc1d2b46e8d36dbe7192a09c03cff308c984138fa751cab0d34883b61d0040d0cec41d506300efc70d284899"}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000001f40)) 44.723094178s ago: executing program 5 (id=312): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000040)={0x23800000, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f00000001c0)="b7", 0x1, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2440, &(0x7f0000000980)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}]}, 0x1, 0x4b8, &(0x7f00000009c0)="$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") socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x23800000, &(0x7f00000000c0), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x1, &(0x7f0000000100)) (async) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f00000001c0)="b7", 0x1, 0x0, 0x0, 0x2}]) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2440, &(0x7f0000000980)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}]}, 0x1, 0x4b8, &(0x7f00000009c0)="$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") (async) 44.696535341s ago: executing program 36 (id=312): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000040)={0x23800000, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f00000001c0)="b7", 0x1, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2440, &(0x7f0000000980)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}]}, 0x1, 0x4b8, &(0x7f00000009c0)="$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") socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x23800000, &(0x7f00000000c0), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x1, &(0x7f0000000100)) (async) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f00000001c0)="b7", 0x1, 0x0, 0x0, 0x2}]) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2440, &(0x7f0000000980)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}]}, 0x1, 0x4b8, &(0x7f00000009c0)="$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") (async) 8.89917066s ago: executing program 3 (id=536): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000ac0)) 7.935382429s ago: executing program 3 (id=546): mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x100, 0xc98, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0), 0x171}}], 0x400000000000172, 0x4000000) 7.079380986s ago: executing program 3 (id=568): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) getuid() r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000440)={@cgroup=r3, r4, 0x11, 0x0, r3}, 0x11) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_mount_image$ext4(&(0x7f0000000480)='ext3\x00', &(0x7f00000004c0)='./bus\x00', 0x1008800, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000540)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0}) write(r5, &(0x7f0000000ac0)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) keyctl$negate(0xd, r0, 0x4, r1) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, 0x0) keyctl$instantiate(0xc, r1, &(0x7f0000000180)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'keyring\x00', 0x20, 0x2, 0x20, [0x37, 0x1]}, 0x37, r0) 6.195401636s ago: executing program 3 (id=579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8001, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x89901) move_mount(r1, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x152) 6.121005334s ago: executing program 3 (id=581): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x5, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_create_resource$futex(0x0) exit(0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x200010, 0x10, 0x10, 0x10, 0x1, 0x0, 0xf, 0x6, 0x9, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.936687693s ago: executing program 3 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x40000006}) r6 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x10000014}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000240)={r4, r6}) 5.886442138s ago: executing program 37 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x40000006}) r6 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x10000014}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000240)={r4, r6}) 4.364005173s ago: executing program 1 (id=587): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x109, 0x7fff}]}) 4.30697924s ago: executing program 1 (id=605): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.30675046s ago: executing program 1 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000004780)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000003c0)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffff1000, {}, 0x0, 0x9}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000134200"}}) 4.252742205s ago: executing program 1 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x34}}, 0xc000) 4.219619248s ago: executing program 1 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='100', 0x3) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0xc88, 0x0, 0x60, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'p', 0x20, '128'}}]}) 3.547412207s ago: executing program 9 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) connect$pppl2tp(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x4, 0x1, 0x1, 0x4}}, 0x26) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="b00500000000"], 0x5b0}, 0x20008001) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="5273ab327fd8", 0x6}], 0x2}}], 0x1, 0x24000000) r5 = socket$inet6(0xa, 0x80003, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000001a00010024bd70000000000002201406fc0200060002000008000300", @ANYRES32=r6, @ANYBLOB="08000200e00000024649cfcfd4286d408f6c3a0100000000000000c5cd23"], 0x2c}}, 0xea5bc50b6199d7fe) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) pread64(r7, 0x0, 0x0, 0x9) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="19d32bfb45c9"}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x9, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c00000000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xc33, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r11) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fde26f0e", @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000500006800800010000040000040002003d00040067636d28616573290000000000000000000000000000000000000000000000001500000062d02b1100bf7a75deac95af7b934f2e9b83b8e5e100000004000580"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xb, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) 3.285148724s ago: executing program 0 (id=621): getegid() prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x80000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000fc0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000001100), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x100000000000002) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) fchdir(r4) r5 = open(&(0x7f0000001200)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) pipe2(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000000e40)=ANY=[], 0xffffff6a) (async) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x80000) (async) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000ec0)={0xb0000011}) (async) epoll_wait(r8, &(0x7f0000000f00)=[{}], 0x1, 0x800) 3.279714344s ago: executing program 9 (id=622): r0 = syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000800, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000000480)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22880, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000005b40)="$eJzs3E1vG0UYAOCx0/SbUiEO3LpShZRItVWnH4JbgVYFRKuq0AMncGzXcmt7o9hxTU49cEQc+CeISpw48hs4cOaGOIC4IRV5Z4IaKJQqm7hNn0dav7uzs+/MWImld71yAF5YJ7Pff62EE+FICGEhhHA8hGK/krbCpRheCyGcCiFUH9kqqf2vhoMhhKMhhBOz5DFnJZ366szk9IVf3v/tux8OHTj29bc/zm/VwLy9HkIYrMX9e4MY826Md1J7c9Ir4uD8JMV4on84nh/ksf1eZ7XIcK+51a9ZxHPd2D9f2xjN4u1+szWL3d7ton1tGAccTbpbeYoL7jTXi+N2Z7WIvVFexO5mHHe6GT/bNkfjmKed8n1WpA/j8VaM7Z1pJ65n7W4RW8Nxao9583ZnOouTFNNwoZX328U8VnfwRj/jPugNN6bZpLM+6uXD7EK98Ua9cbHWWM/bnXHnfK05aF88ny11+73hxvHauNMcXOrmebffqbfywXK21G21ao1GtnS5s9prDrNGo36ufrZ2YTntncmuXr+V9dvZUvX6rezt3nBj3OuPstv5ehavWM5W6ufeXM5ON7IPr93Ibty8cuXajY8+ufzx9beuvfdO6vSPaWVLK2dXVmqNs7WVxvJTLvhh8vTrn+5k/VfLWP/nadI7WT+UqTLvCQA8f9T/wDzspP4f3E3Hj63/12+GsPv1f1D/l+K5qn/LqP+tH8qj/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGH9tPjNu8XOyXh8LLW/lJpeSceVEEI1hPDwMRbCwW05F1KexX/pv/i3OXxfCUWG2RiH0nY0hHApbX+8vNvvAgAAAOxfD+6f+jJW6/FlVu8fePJlkwe7PzXKUfmPc/GmTfX4pyWOtXjy55KyVWcvr5aUrPj7PhCmJWUrbmAdLilZvOX2P/7vSrSwLRx+JFRiqO7pdAAAgD2xvRLY2yoEAACAvfTFvCfAfBTfDadn8dMD/IdiSF8IHtl2BAAAADxz0pPf95/YAwAAANjHivrf7/8BAADA/hZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mTnbnKWBsI4gD8tbwW/IjHuvYo7OIZHcOnScAAvwQFccAYvwBlw5xEMGDoTPkxdddrmJb9fUoY25d8ZAotnJhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEi/ml0T3z5+75tzPPVTZjQAAABAl0OzW7dvlun8db7+Nl96n8+riKgjoqt2n8WLu8xZzmmu9/+4vb/5pw8/I9qE8zPm+XgVEZ/y8efd0N8CAAAAPK79ZrtK1Xp6WU7dIcaUJm3qN58L5VUR0Sx/F0qrz3kfCoW1v++n+FoorZ3AWhQKS1NuT/95yjDav/tl1m5x01SpqTs/dulksbEDAAAjmt01HVUIAAAAD+LL1B1gGlVcFxnzUuA8NXl57+XdGQAAAPAMVVN3AAAAABhcW/+PtP/fyf5/AAAAMLJcT6f9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjSodmt95vtqm/O8dRPmdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Jf9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+Hdmdra2KsYoOUREwYNebLqtrb2JByV48E8ohHRbY7f+aHOwpYi5eJOcexE9ighKeuv/0HMLvdRbDzlUEI8rMzuTTNtQE6Ez2+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDb/HA7zorDzCROq3O3H1xbLvo7j/SFm+t354tWxEmbST8bXq+DG2cikrlukwEAAOBgyOr6PiLu5RuLRZ/OlPV/Xl9T1Pw/vTiJ63r+0bq/7uvav2g3/rj/6tZAM5NxipueWxkNjz2eSu/pzXK6vfSfV/TKJ1++e8nKLyT9ZO2Vzbx8nskPt2591C/DQ21kCwD8H0frvgrq34eKftBlYgAcGL1G4V3X/9lMtzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGFzLZ6v4yQi5nvbceHOg2vLO/U31+/O1+3U9evr8d32PYtb5BFxbmU0PNbqbKbb5StXLyyNRsNL7QdvRERXo39QTf/CmV1cHNHJ89l78M90pPHkIHptD5pWX3b3c3+Wgg5/KAEAsC/lVSvq+nv5xmJxLpmNGP/8cP3/diOOXdb/9z87dbs5VrP+H7Q2w+m3sHrxq4XLV66+u3Jx6fzw/PCL944P3h+cOH3y5OmF8l3JgjcmAAAA7Nl4PB5vfehXrVn/p7OPr/8facSxy/r/6x8H3zYHztT/O9pe9Os6EwAAgIPt5Tf//ivZ4XzS78c3S6urlwaT49bn45NjB6nu2aGqNev/bLbrrAAAAIA2bK4lD63/n23Escv1/xd+ee235j2ziDhcrf8fXf5ydLa96Uy1Nv6cuOs5AgAA0K3DVWuu/+fl/v90a8tDGhHvvDWJq38D+MT6P6/q/+zj739tjtXc/3+ivSlOpXRu8jzKfi6iN9d1RgAAAOxnz1WtKPb/zDcWP//9yKd9+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vZvAAAA//+4GEnN") r2 = openat(0xffffffffffffff9c, &(0x7f000000b080)='./bus\x00', 0x18f241, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f000000b0c0)=0xfffffff9) r3 = creat(&(0x7f000000b100)='./bus\x00', 0x182) fallocate(r3, 0x300, 0x1, 0x2000402) 2.283682376s ago: executing program 0 (id=629): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20040, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getpid() creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x24004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x22020600) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) 2.201871875s ago: executing program 6 (id=631): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x6f, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x61, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x9}, @generic={0x8, 0x2}]}}, {"1ddd0d4136975b90055d26326bd394cab5096c4bad165fef54cdfc3f860a5b16a060bfa62e05a38cb710b1f289d500a1c8"}}}}}}, 0x0) 2.066830338s ago: executing program 6 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.691135267s ago: executing program 6 (id=634): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xc2101) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x2c, 0x3, 0x3}) 1.66419886s ago: executing program 8 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640000001000fbffd6f407eb55f8234400000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000b00", @ANYRES32, @ANYBLOB="140003000000000000000000200000000000003414000200fe"], 0x64}}, 0x4008000) 1.55912313s ago: executing program 6 (id=636): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1004801, &(0x7f0000000080)=ANY=[], 0x1, 0x22a, &(0x7f00000003c0)="$eJzsmb9rFEEUx7+zu7d7RhEstLA5i4ARzN7unkoai9iKICSilodZQ3CTk7srcgGLYGPjH+A/opDKws5GLKwEf4BgYUoRFByZnZnbd7uX5DwJFnmfYvnO3Hfem3nLvikODMMcWT5/+v7x6bWF5YsATmAWgZn/6hYeh/jfP3NrRr7aOPloR8va8HcBQMrC7x2Q38dxvFx0VXKN/CnLHimlXIaDWTO+BQcXjL4NgdAlRrM6hcBd/JAapfVOOseMN0vFvU62cn8tSyP1iNUjUUdtAXJk/7vbAisA6iaFIHvrDbYetDOgq0WWWlGTNo8tX1rx7CPUAjujl38YW798f4sOrpISqIR3njzeVuPQzEekfjEcxEa3ILBk9AIChGHYsPuNyfnPekV8V722kfNPdKS026tPZg4wnAn+qmolcWp+X48/zYuZQvyWhxLZn+oVHI5Qn8TBZuWiM06jusqfIA4twmRm26D0NsoeQT62wZndndfVOF/+a3n/TajGpQpQ+entTJbdoDNvrhtxeiTOOVofInxa1XL2oj8JDzhP+pNHboVmf/1hszfYml9bb6+mq+lGkrSuRJei6HLSzHuzfo7tfTp+Pe9PMyR+bQ+vL3xstvv9brwJ9LvxcJzoZ3EALD3vfMvXOHn/czD3y1wlMM0vGJ8jv/8CvU7kozl7O/l7HoJhGIZhGIZhGIZhGIZhGGYMjXeVGbzA8G8vWFnGS27m7j8BAAD//8qAYL4=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20842, 0x63) eventfd2(0x0, 0x80800) unshare(0x26020480) pselect6(0x40, &(0x7f0000000200)={0x0, 0x10, 0x4, 0x2, 0x7fffffff, 0x10, 0x4c4, 0x8096}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x41, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback}, "f50088"}}}}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 1.55886002s ago: executing program 9 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) 1.558682161s ago: executing program 8 (id=638): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000006900)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006980)={&(0x7f00000069c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000006a40)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000006b40)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.480517818s ago: executing program 8 (id=639): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x1011f, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1.36591086s ago: executing program 0 (id=640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001bc0)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f0000001c00)={0xfffffffffffffe4f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x9, 0x5, 0x8, 0x5f, 0x8}}}, 0x0) 947.181403ms ago: executing program 9 (id=641): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb0, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101bd, 0x4000000d, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x9, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x405, 0x0, 0x9, 0x9, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x81, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0xfffffffd, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}], 0x68}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x8, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa400}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 785.913369ms ago: executing program 9 (id=642): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x20000037) 755.086802ms ago: executing program 9 (id=643): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_marker\x00', 0x1, 0x5a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000000bc0)=""/16384, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, &(0x7f00000004c0)="baa40d1a853737d31462de9468fdbfd74720ebd307b989cf33d3d7381a57bbb40d78d5c70864737503efe60197e85a52fe5325ecad7294c3ac2a1fc138cefb686577b959dc77575e10ae3d049365875974cea6157eb6a282948326b70f2844f5c500d990ab6a5f51c8286c0bd5aa0556c0c3b8", 0x73, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000004bc0)="27b1bd891d06caf4043010b26fbef7a24d6a9e3689a2c287482e8160c1ecf34e43c4a62a389160a180db924610a60a3a19e0a74a542e95d119c591ae5ef8af8c9686448d6096985e0aeda0230d263cd4046993044d2ea33047080c9bb73f26f2f0bac4f47bd1d787259bd913db0583448472b6d9bc5f002ea51a0269058a1109b3d1f5be16c3c947b523a0a50dab1e49ec2ff5c5592c793cafde5221e51ed0de6e17fad66502d4a4bbd89726171d46e6c89c5ffd76b9041de24246d65129c0ee67febfa8") 706.072378ms ago: executing program 6 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0200000008000300", @ANYRES32=r2, @ANYBLOB="080026001b17000008002500030000000800a00067090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 658.704752ms ago: executing program 0 (id=645): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x34}}, 0x0) 607.105308ms ago: executing program 6 (id=646): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2200002, &(0x7f00000000c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x80342, 0xcc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000a00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6) pwrite64(r0, &(0x7f0000000740)='2', 0xfdef, 0x8800000) 601.849768ms ago: executing program 0 (id=647): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000016c0)={0xbc, 0x0, 0x3}) 543.321314ms ago: executing program 0 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, 0x0, 0x22) r3 = fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000900), 0xc) 504.624788ms ago: executing program 8 (id=649): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc67", 0x6}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x6) sendto(r1, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) 151.445034ms ago: executing program 8 (id=650): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000200)="42cac7916dfb6993", 0x8, 0x8, 0x0, 0x0, r0}]) 0s ago: executing program 8 (id=651): ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) getcwd(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setresuid(0x0, 0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002ac0), &(0x7f0000002b00)='./file0\x00', 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) llistxattr(&(0x7f0000002bc0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 73.082833][ T24] audit: type=1400 audit(1793637604.000:255): avc: denied { map } for pid=1074 comm="syz.3.195" path="/38/file1/file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.467505][ T24] audit: type=1400 audit(1793637604.380:256): avc: denied { map } for pid=1074 comm="syz.3.195" path="/38/file1/blkio.bfq.io_merged" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.629391][ T431] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.662167][ T431] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.702350][ T431] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.716708][ T431] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.724038][ T431] usb 8-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 73.733159][ T431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.749552][ T431] usb 8-1: config 0 descriptor?? [ 73.918224][ T1120] F2FS-fs (loop6): invalid crc value [ 73.939873][ T1120] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.022578][ T1120] F2FS-fs (loop6): Start checkpoint disabled! [ 74.030884][ T1120] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 74.081696][ T1130] erofs: (device loop7): mounted with root inode @ nid 36. [ 74.148042][ T1132] udc-core: couldn't find an available UDC or it's busy [ 74.165921][ T1132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.166242][ T431] input: HID 046d:c623 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C623.0002/input/input5 [ 74.261246][ T431] logitech 0003:046D:C623.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.7-1/input0 [ 74.888183][ T1120] tipc: Failed to remove local publication {66,0,0}/185538514 [ 74.908654][ T9] attempt to access beyond end of device [ 74.908654][ T9] loop6: rw=2049, want=45104, limit=40427 [ 75.077492][ T1173] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.103698][ T1176] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 75.390265][ T1186] erofs: (device loop3): mounted with root inode @ nid 36. [ 76.732568][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 76.732581][ T24] audit: type=1400 audit(1793637607.650:266): avc: denied { getopt } for pid=1200 comm="syz.7.229" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.849280][ T24] audit: type=1326 audit(1793637607.680:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 76.931833][ T24] audit: type=1326 audit(1793637607.680:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.048250][ T24] audit: type=1326 audit(1793637607.680:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.073259][ T24] audit: type=1326 audit(1793637607.680:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.098220][ T24] audit: type=1326 audit(1793637607.680:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.123395][ T24] audit: type=1326 audit(1793637607.680:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.149436][ T1225] xt_hashlimit: size too large, truncated to 1048576 [ 77.170597][ T24] audit: type=1326 audit(1793637607.680:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.195661][ T431] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.220602][ T24] audit: type=1326 audit(1793637607.680:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.260570][ T24] audit: type=1326 audit(1793637607.680:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.7.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312f05bb19 code=0x7ffc0000 [ 77.426032][ T1210] F2FS-fs (loop6): invalid crc value [ 77.439230][ T431] usb 6-1: Using ep0 maxpacket: 32 [ 77.448441][ T1210] F2FS-fs (loop6): Found nat_bits in checkpoint [ 77.496562][ T1210] F2FS-fs (loop6): Start checkpoint disabled! [ 77.505217][ T1210] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 77.559311][ T431] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.576844][ T431] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 77.599252][ T431] usb 6-1: config 0 interface 0 has no altsetting 0 [ 77.612133][ T431] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 77.640068][ T1244] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 77.649738][ T431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.657883][ T1244] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.679658][ T310] usb 8-1: USB disconnect, device number 2 [ 77.764687][ T431] usb 6-1: config 0 descriptor?? [ 78.083421][ T1252] tipc: Failed to remove local publication {66,0,0}/1338977929 [ 78.386398][ T1256] EXT4-fs (loop7): Mount option "journal_checksum" incompatible with ext3 [ 78.997227][ T1272] futex_wake_op: syz.3.246 tries to shift op by 32; fix this program [ 79.942181][ T1303] FAT-fs (loop3): Directory bread(block 64) failed [ 79.948754][ T1303] FAT-fs (loop3): Directory bread(block 65) failed [ 79.986457][ T1303] FAT-fs (loop3): Directory bread(block 66) failed [ 79.997464][ T1298] F2FS-fs (loop6): invalid crc value [ 80.016943][ T1303] FAT-fs (loop3): Directory bread(block 67) failed [ 80.024494][ T1298] F2FS-fs (loop6): Found nat_bits in checkpoint [ 80.050741][ T1303] FAT-fs (loop3): Directory bread(block 68) failed [ 80.058969][ T431] usbhid 6-1:0.0: can't add hid device: -71 [ 80.065238][ T431] usbhid: probe of 6-1:0.0 failed with error -71 [ 80.065909][ T1303] FAT-fs (loop3): Directory bread(block 69) failed [ 80.079356][ T431] usb 6-1: USB disconnect, device number 5 [ 80.088198][ T1303] FAT-fs (loop3): Directory bread(block 70) failed [ 80.112275][ T1303] FAT-fs (loop3): Directory bread(block 71) failed [ 80.119146][ T1303] FAT-fs (loop3): Directory bread(block 72) failed [ 80.126591][ T1303] FAT-fs (loop3): Directory bread(block 73) failed [ 80.152247][ T1298] F2FS-fs (loop6): Start checkpoint disabled! [ 80.162954][ T1298] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 80.449258][ T431] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 80.489282][ T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.759282][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 80.783670][ T1324] tipc: Failed to remove local publication {66,0,0}/747207756 [ 80.849730][ T431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.865938][ T431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 80.886165][ T431] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.901790][ T431] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.913503][ T15] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 80.921966][ T15] usb 4-1: config 32 has an invalid descriptor of length 95, skipping remainder of the config [ 80.932687][ T431] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 80.952096][ T15] usb 4-1: config 32 has no interface number 0 [ 80.958425][ T431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.972687][ T15] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 80.997188][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.005540][ T1282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.014626][ T1282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.041790][ T431] pl2303 6-1:1.0: pl2303 converter detected [ 81.069904][ T15] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 81.077286][ T15] uvcvideo: No valid video chain found. [ 81.138631][ T1336] FAULT_INJECTION: forcing a failure. [ 81.138631][ T1336] name failslab, interval 1, probability 0, space 0, times 0 [ 81.154378][ T1336] CPU: 0 PID: 1336 Comm: syz.7.266 Not tainted syzkaller #0 [ 81.161695][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.171767][ T1336] Call Trace: [ 81.175076][ T1336] __dump_stack+0x21/0x24 [ 81.179424][ T1336] dump_stack_lvl+0x1a7/0x208 [ 81.184119][ T1336] ? show_regs_print_info+0x18/0x18 [ 81.189335][ T1336] ? get_random_u64+0x560/0x560 [ 81.194209][ T1336] dump_stack+0x15/0x1c [ 81.198378][ T1336] should_fail+0x3ab/0x500 [ 81.202814][ T1336] ? kvmalloc_node+0x88/0x130 [ 81.207511][ T1336] __should_failslab+0xa4/0xe0 [ 81.212291][ T1336] should_failslab+0x9/0x20 [ 81.216810][ T1336] __kmalloc+0x60/0x330 [ 81.220998][ T1336] ? kvmalloc_node+0x88/0x130 [ 81.225692][ T1336] kvmalloc_node+0x88/0x130 [ 81.230218][ T1336] rhashtable_init+0x4b6/0x980 [ 81.235005][ T1336] ? rhashtable_init+0x634/0x980 [ 81.239960][ T1336] br_mdb_hash_init+0x55/0x90 [ 81.244655][ T1336] br_dev_init+0x1ca/0x2a0 [ 81.249086][ T1336] register_netdevice+0x328/0x13a0 [ 81.254218][ T1336] ? memset+0x35/0x40 [ 81.258216][ T1336] ? xdp_rxq_info_reg+0xec/0x2e0 [ 81.263177][ T1336] ? netif_stacked_transfer_operstate+0x220/0x220 [ 81.269619][ T1336] ? alloc_netdev_mqs+0x9da/0xca0 [ 81.274660][ T1336] br_dev_newlink+0x26/0x110 [ 81.279268][ T1336] ? br_validate+0x160/0x160 [ 81.283873][ T1336] rtnl_newlink+0x1307/0x1830 [ 81.288566][ T1336] ? rtnl_setlink+0x480/0x480 [ 81.293267][ T1336] ? __kernel_text_address+0xa0/0x100 [ 81.298661][ T1336] ? unwind_get_return_address+0x4d/0x90 [ 81.304315][ T1336] ? stack_trace_save+0xf0/0xf0 [ 81.309179][ T1336] ? memcpy+0x56/0x70 [ 81.313186][ T1336] ? unwind_get_return_address+0x4d/0x90 [ 81.318828][ T1336] ? cap_capable+0x19c/0x220 [ 81.323443][ T1336] ? __kasan_check_write+0x14/0x20 [ 81.328570][ T1336] ? mutex_lock+0x92/0xf0 [ 81.332915][ T1336] ? mutex_trylock+0xb0/0xb0 [ 81.337519][ T1336] ? ns_capable+0x8c/0xf0 [ 81.341865][ T1336] ? netlink_net_capable+0x125/0x160 [ 81.347174][ T1336] ? rtnl_setlink+0x480/0x480 [ 81.351860][ T1336] rtnetlink_rcv_msg+0x9e9/0xca0 [ 81.356813][ T1336] ? unwind_get_return_address+0x4d/0x90 [ 81.362454][ T1336] ? rtnetlink_bind+0x80/0x80 [ 81.367146][ T1336] ? stack_trace_save+0xa6/0xf0 [ 81.372008][ T1336] ? stack_trace_snprint+0xe0/0xe0 [ 81.377131][ T1336] ? avc_has_perm+0x168/0x3d0 [ 81.381819][ T1336] ? memcpy+0x56/0x70 [ 81.385813][ T1336] ? avc_has_perm+0x27f/0x3d0 [ 81.390504][ T1336] ? __kasan_slab_alloc+0xc9/0xe0 [ 81.395683][ T1336] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 81.401073][ T1336] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 81.407156][ T1336] ? selinux_nlmsg_lookup+0x37e/0x430 [ 81.412546][ T1336] netlink_rcv_skb+0x1e9/0x430 [ 81.417320][ T1336] ? rtnetlink_bind+0x80/0x80 [ 81.422007][ T1336] ? netlink_ack+0xb30/0xb30 [ 81.426606][ T1336] ? __netlink_lookup+0x387/0x3b0 [ 81.431644][ T1336] rtnetlink_rcv+0x1c/0x20 [ 81.436069][ T1336] netlink_unicast+0x86c/0xa30 [ 81.440852][ T1336] netlink_sendmsg+0x949/0xb70 [ 81.445631][ T1336] ? netlink_getsockopt+0x530/0x530 [ 81.450839][ T1336] ? kasan_set_track+0x5b/0x70 [ 81.455616][ T1336] ? slab_free_freelist_hook+0xc5/0x190 [ 81.461186][ T1336] ? security_socket_sendmsg+0x82/0xa0 [ 81.466669][ T1336] ? netlink_getsockopt+0x530/0x530 [ 81.471881][ T1336] ____sys_sendmsg+0x5be/0x8f0 [ 81.476668][ T1336] ? __sys_sendmsg_sock+0x40/0x40 [ 81.481708][ T1336] ? import_iovec+0x7c/0xb0 [ 81.486227][ T1336] ___sys_sendmsg+0x236/0x2e0 [ 81.490921][ T1336] ? __sys_sendmsg+0x280/0x280 [ 81.495707][ T1336] ? rw_verify_area+0x1c0/0x360 [ 81.500581][ T1336] ? __fdget+0x1a1/0x230 [ 81.504844][ T1336] __x64_sys_sendmsg+0x201/0x2d0 [ 81.509795][ T1336] ? fput+0x1a/0x20 [ 81.513620][ T1336] ? ___sys_sendmsg+0x2e0/0x2e0 [ 81.518490][ T1336] ? debug_smp_processor_id+0x17/0x20 [ 81.523881][ T1336] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 81.529967][ T1336] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 81.535616][ T1336] do_syscall_64+0x31/0x40 [ 81.540047][ T1336] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 81.545948][ T1336] RIP: 0033:0x7f312f05bb19 [ 81.550382][ T1336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.570000][ T1336] RSP: 002b:00007f312dab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.578433][ T1336] RAX: ffffffffffffffda RBX: 00007f312f2e1fa0 RCX: 00007f312f05bb19 [ 81.586450][ T1336] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 81.594442][ T1336] RBP: 00007f312dab3090 R08: 0000000000000000 R09: 0000000000000000 [ 81.602431][ T1336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.610407][ T1336] R13: 00007f312f2e2038 R14: 00007f312f2e1fa0 R15: 00007ffc98f21628 [ 81.810047][ T301] usb 4-1: USB disconnect, device number 4 [ 81.970328][ T431] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 81.981648][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 81.981662][ T24] audit: type=1400 audit(1793637612.900:297): avc: denied { write } for pid=1281 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.017886][ T431] usb 6-1: USB disconnect, device number 6 [ 82.040437][ T431] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 82.050391][ T431] pl2303 6-1:1.0: device disconnected [ 82.101443][ T1343] EXT4-fs (loop7): Mount option "journal_checksum" incompatible with ext3 [ 83.529410][ T24] audit: type=1400 audit(1793637614.440:298): avc: denied { bind } for pid=1348 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.560371][ T1363] F2FS-fs (loop5): invalid crc value [ 84.587107][ T1363] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.609391][ T24] audit: type=1400 audit(1793637615.500:299): avc: denied { read } for pid=1371 comm="syz.7.276" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.661822][ T24] audit: type=1400 audit(1793637615.500:300): avc: denied { open } for pid=1371 comm="syz.7.276" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.690475][ T24] audit: type=1400 audit(1793637615.500:301): avc: denied { ioctl } for pid=1371 comm="syz.7.276" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.751008][ T1363] F2FS-fs (loop5): Start checkpoint disabled! [ 84.757828][ T1363] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 86.309255][ T24] audit: type=1400 audit(1793637617.110:302): avc: denied { create } for pid=1388 comm="syz.7.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.426544][ T1403] tipc: Failed to remove local publication {66,0,0}/4214638584 [ 86.476168][ T9] attempt to access beyond end of device [ 86.476168][ T9] loop5: rw=2049, want=45104, limit=40427 [ 86.492708][ T1401] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 86.573063][ T704] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.596029][ T1409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.284'. [ 86.829283][ T704] usb 8-1: Using ep0 maxpacket: 16 [ 86.949387][ T704] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.187559][ T704] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.508576][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.287'. [ 87.629620][ T704] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.648993][ T704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.687569][ T704] usb 8-1: Product: syz [ 88.956432][ T704] usb 8-1: Manufacturer: syz [ 88.961242][ T704] usb 8-1: SerialNumber: syz [ 89.079329][ T704] usb 8-1: can't set config #1, error -71 [ 89.089424][ T704] usb 8-1: USB disconnect, device number 3 [ 89.100757][ T1433] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.275372][ T1433] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.358719][ T1433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e02d, mo2=0002] [ 89.377757][ T1433] System zones: 1-12 [ 89.404348][ T1433] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug,inode_readahead_blks=0x0000000000080000,jqfmt=vfsv1,prjquota,prjquota,jqfmt=vfsv1,errors=remount-ro,auto_da_alloc,test_dummy_encryption,nombcache, [ 89.438282][ T1443] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 89.449043][ T1443] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.219260][ T15] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.479403][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 90.508314][ T1456] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 90.525541][ T1456] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.595829][ T1456] EXT4-fs (loop7): shut down requested (0) [ 90.629381][ T15] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 90.640686][ T24] audit: type=1400 audit(1793637621.540:303): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.667771][ T1456] IPv6: A: Disabled Multicast RS [ 90.679039][ T15] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.717861][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.731954][ T24] audit: type=1400 audit(1793637621.540:304): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.757229][ T15] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.773625][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.809337][ T15] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 90.819467][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.838791][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.847032][ T24] audit: type=1400 audit(1793637621.540:305): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.879284][ T15] usb 4-1: config 0 descriptor?? [ 90.886879][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.906421][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.927002][ T24] audit: type=1400 audit(1793637621.540:306): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.954045][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.966560][ T1463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 90.975731][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 90.991546][ T24] audit: type=1400 audit(1793637621.540:307): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.015864][ T1017] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 91.066389][ T24] audit: type=1400 audit(1793637621.540:308): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.116916][ T24] audit: type=1400 audit(1793637621.540:309): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.187982][ T24] audit: type=1400 audit(1793637622.080:310): avc: denied { create } for pid=1465 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.282644][ T1477] device-mapper: table: 253:4: crypt: Device lookup failed [ 91.290162][ T1477] device-mapper: ioctl: error adding target to table [ 91.316789][ T24] audit: type=1400 audit(1793637622.230:311): avc: denied { write } for pid=1476 comm="syz.5.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.446789][ T15] wacom 0003:056A:0303.0003: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 91.504547][ T1488] device-mapper: table: 253:4: crypt: Device lookup failed [ 91.532260][ T1488] device-mapper: ioctl: error adding target to table [ 91.569396][ T15] wacom 0003:056A:0303.0003: hidraw0: USB HID v80.00 Joystick [HID 056a:0303] on usb-dummy_hcd.3-1/input0 [ 91.581728][ T15] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0303.0003/input/input7 [ 91.613060][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.620640][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.628205][ T1483] device bridge_slave_0 entered promiscuous mode [ 91.638058][ T1488] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 91.650191][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.657394][ T1433] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 91.683739][ T1488] EXT4-fs (loop5): invalid journal inode [ 91.696668][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.703914][ T1488] EXT4-fs (loop5): can't get journal size [ 91.712121][ T1433] EXT4-fs error (device loop3): ext4_add_entry:2442: inode #2: comm syz.3.290: Directory hole found for htree leaf block 0 [ 91.725406][ T1483] device bridge_slave_1 entered promiscuous mode [ 91.726422][ T1433] EXT4-fs (loop3): Remounting filesystem read-only [ 91.746778][ T1488] EXT4-fs (loop5): 1 truncate cleaned up [ 91.752784][ T1488] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 91.818358][ T1490] F2FS-fs (loop6): invalid crc value [ 91.829081][ T1490] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.867660][ T9] device bridge_slave_1 left promiscuous mode [ 91.875502][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.883969][ T9] device bridge_slave_0 left promiscuous mode [ 91.890774][ T1490] F2FS-fs (loop6): Start checkpoint disabled! [ 91.891420][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.904050][ T1490] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 91.911943][ T622] usb 4-1: USB disconnect, device number 5 [ 91.920177][ T9] device veth1_macvtap left promiscuous mode [ 91.926251][ T9] device veth0_vlan left promiscuous mode [ 92.031538][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.038610][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.062435][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.072314][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.090298][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.106060][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.113182][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.130671][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.141707][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.164711][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.171872][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.199325][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.207524][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.215891][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.224792][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.249220][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.257826][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.276985][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.285542][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.294547][ T1483] device veth0_vlan entered promiscuous mode [ 92.306624][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.314349][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.332283][ T300] attempt to access beyond end of device [ 92.332283][ T300] loop6: rw=2049, want=40984, limit=40427 [ 92.351576][ T1483] device veth1_macvtap entered promiscuous mode [ 92.358574][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.366991][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.375359][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.386714][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.394430][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.401922][ T1512] device bridge_slave_0 entered promiscuous mode [ 92.415537][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.422672][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.430941][ T1512] device bridge_slave_1 entered promiscuous mode [ 92.444806][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.463182][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.474486][ T24] audit: type=1400 audit(1793637623.390:312): avc: denied { mount } for pid=1516 comm="syz.0.315" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.478358][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.546464][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.620999][ T1532] device-mapper: table: 253:3: crypt: Not enough arguments [ 92.628269][ T1532] device-mapper: ioctl: error adding target to table [ 92.636584][ T1530] EXT4-fs (loop8): Mount option "journal_checksum" incompatible with ext3 [ 94.508685][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.526481][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.562201][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.592741][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.614124][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.621244][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.628977][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.639099][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.647900][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.655008][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.663655][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.696056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.704268][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.713015][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.722702][ T1550] EXT4-fs (loop8): Mount option "journal_checksum" incompatible with ext3 [ 94.731616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.749624][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.758275][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.772193][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.780242][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.789532][ T1512] device veth0_vlan entered promiscuous mode [ 94.801394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.808945][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.846476][ T1566] device veth1_macvtap left promiscuous mode [ 94.877319][ T1542] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 94.900399][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.912142][ T1512] device veth1_macvtap entered promiscuous mode [ 94.922903][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.931633][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.972635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.982721][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.153650][ T9] device veth1_macvtap left promiscuous mode [ 95.182510][ T9] device veth0_vlan left promiscuous mode [ 95.707900][ T1577] netlink: 36 bytes leftover after parsing attributes in process `syz.9.313'. [ 95.799245][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 95.799258][ T24] audit: type=1400 audit(1793637626.710:319): avc: denied { create } for pid=1583 comm="syz.6.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.841445][ T1584] attempt to access beyond end of device [ 95.841445][ T1584] loop6: rw=2049, want=1041, limit=128 [ 95.852593][ T24] audit: type=1400 audit(1793637626.710:320): avc: denied { connect } for pid=1583 comm="syz.6.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.886603][ T1584] attempt to access beyond end of device [ 95.886603][ T1584] loop6: rw=524288, want=369, limit=128 [ 95.898181][ T1584] attempt to access beyond end of device [ 95.898181][ T1584] loop6: rw=0, want=153, limit=128 [ 95.909043][ T1584] attempt to access beyond end of device [ 95.909043][ T1584] loop6: rw=0, want=153, limit=128 [ 95.920119][ T1584] attempt to access beyond end of device [ 95.920119][ T1584] loop6: rw=0, want=153, limit=128 [ 95.936249][ T1584] attempt to access beyond end of device [ 95.936249][ T1584] loop6: rw=0, want=153, limit=128 [ 95.947370][ T1584] attempt to access beyond end of device [ 95.947370][ T1584] loop6: rw=0, want=153, limit=128 [ 95.964828][ T1584] attempt to access beyond end of device [ 95.964828][ T1584] loop6: rw=0, want=153, limit=128 [ 95.975791][ T1584] attempt to access beyond end of device [ 95.975791][ T1584] loop6: rw=0, want=153, limit=128 [ 96.062962][ T1584] Buffer I/O error on dev loop6, logical block 145, async page read [ 96.071700][ T1584] Buffer I/O error on dev loop6, logical block 146, async page read [ 96.080148][ T1584] Buffer I/O error on dev loop6, logical block 147, async page read [ 96.088305][ T1584] Buffer I/O error on dev loop6, logical block 148, async page read [ 96.096641][ T1584] Buffer I/O error on dev loop6, logical block 149, async page read [ 96.169755][ T1584] Buffer I/O error on dev loop6, logical block 150, async page read [ 96.299294][ T1584] Buffer I/O error on dev loop6, logical block 151, async page read [ 96.352626][ T1584] Buffer I/O error on dev loop6, logical block 152, async page read [ 96.389583][ T24] audit: type=1400 audit(1793637627.310:321): avc: denied { read } for pid=1600 comm="syz.9.333" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.419839][ T1584] Buffer I/O error on dev loop6, logical block 145, async page read [ 96.477376][ T1584] Buffer I/O error on dev loop6, logical block 146, async page read [ 96.529739][ T1602] EXT4-fs error (device loop9): ext4_map_blocks:632: inode #3: block 2: comm syz.9.333: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.553778][ T24] audit: type=1400 audit(1793637627.330:322): avc: denied { open } for pid=1600 comm="syz.9.333" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.802253][ T1602] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 96.851959][ T1602] EXT4-fs error (device loop9): ext4_map_blocks:632: inode #3: block 48: comm syz.9.333: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.872309][ T1602] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 96.881722][ T1602] EXT4-fs error (device loop9): ext4_acquire_dquot:6230: comm syz.9.333: Failed to acquire dquot type 0 [ 96.893288][ T1602] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 96.902949][ T1602] EXT4-fs error (device loop9): ext4_evict_inode:285: inode #11: comm syz.9.333: mark_inode_dirty error [ 96.917188][ T1602] EXT4-fs warning (device loop9): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 96.929031][ T1588] F2FS-fs (loop3): invalid crc value [ 96.952822][ T1602] EXT4-fs (loop9): 1 orphan inode deleted [ 96.958757][ T1602] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue [ 96.979402][ T9] EXT4-fs error (device loop9): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.994296][ T1588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.996566][ T9] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 97.271122][ T9] EXT4-fs error (device loop9): ext4_release_dquot:6266: comm kworker/u4:1: Failed to release dquot type 0 [ 97.336066][ T1588] F2FS-fs (loop3): Start checkpoint disabled! [ 97.379297][ T24] audit: type=1400 audit(1793637628.240:323): avc: denied { map } for pid=1629 comm="syz.0.339" path="socket:[21900]" dev="sockfs" ino=21900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 98.042581][ T1637] netlink: 'syz.6.338': attribute type 6 has an invalid length. [ 98.124328][ T1588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 98.135520][ T1512] EXT4-fs error (device loop9): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 98.147213][ T1641] fuse: Bad value for 'fd' [ 98.150492][ T1512] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.155429][ T1641] 9pnet: Insufficient options for proto=fd [ 98.183332][ T1641] tipc: Started in network mode [ 98.188439][ T1641] tipc: Own node identity 1001001, cluster identity 4711 [ 98.197573][ T1641] tipc: 32-bit node address hash set to 1001001 [ 98.222224][ T1512] EXT4-fs error (device loop9): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 98.861377][ T1652] process 'syz.8.342' launched './file0' with NULL argv: empty string added [ 99.706650][ T1678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1678 comm=syz.9.353 [ 100.170158][ T24] audit: type=1400 audit(1793637631.090:324): avc: denied { execute } for pid=1684 comm="syz.8.355" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.294747][ T1691] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.421932][ T1691] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 100.490971][ T1691] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3357: comm syz.6.357: Allocating blocks 42-43 which overlap fs metadata [ 100.651876][ T1691] Quota error (device loop6): write_blk: dquota write failed [ 100.795142][ T1691] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.357: Failed to acquire dquot type 0 [ 100.930723][ T1691] EXT4-fs (loop6): 1 truncate cleaned up [ 100.998710][ T1691] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 101.142091][ T1709] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 101.575006][ T1709] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,max_batch_time=0x000000000000186b,stripe=0x000000000004fffc,i_version,nouid32,nomblk_io_submit,,errors=continue [ 101.729207][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 101.729221][ T24] audit: type=1400 audit(1793637632.640:325): avc: denied { setattr } for pid=1708 comm="syz.3.361" name="cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.040530][ T1732] F2FS-fs (loop6): invalid crc value [ 102.080248][ T1732] F2FS-fs (loop6): Found nat_bits in checkpoint [ 102.132030][ T1732] F2FS-fs (loop6): Start checkpoint disabled! [ 102.159330][ T1732] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 102.531517][ T1769] FAULT_INJECTION: forcing a failure. [ 102.531517][ T1769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.549467][ T1769] CPU: 1 PID: 1769 Comm: syz.9.369 Not tainted syzkaller #0 [ 102.556780][ T1769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.566860][ T1769] Call Trace: [ 102.570181][ T1769] __dump_stack+0x21/0x24 [ 102.574532][ T1769] dump_stack_lvl+0x1a7/0x208 [ 102.579250][ T1769] ? thaw_kernel_threads+0x220/0x220 [ 102.584578][ T1769] ? vsnprintf+0x189d/0x1990 [ 102.589200][ T1769] ? show_regs_print_info+0x18/0x18 [ 102.594411][ T1769] dump_stack+0x15/0x1c [ 102.598576][ T1769] should_fail+0x3ab/0x500 [ 102.603013][ T1769] should_fail_usercopy+0x1a/0x20 [ 102.608068][ T1769] _copy_to_user+0x20/0x90 [ 102.612506][ T1769] simple_read_from_buffer+0xe9/0x160 [ 102.617891][ T1769] proc_fail_nth_read+0x1a6/0x220 [ 102.622956][ T1769] ? proc_fault_inject_write+0x310/0x310 [ 102.628600][ T1769] ? rw_verify_area+0x1c0/0x360 [ 102.633462][ T1769] ? proc_fault_inject_write+0x310/0x310 [ 102.639117][ T1769] vfs_read+0x209/0xa50 [ 102.643295][ T1769] ? kernel_read+0x70/0x70 [ 102.647733][ T1769] ? __kasan_check_write+0x14/0x20 [ 102.652858][ T1769] ? mutex_lock+0x92/0xf0 [ 102.657202][ T1769] ? mutex_trylock+0xb0/0xb0 [ 102.661801][ T1769] ? __fget_files+0x2e1/0x340 [ 102.666503][ T1769] ? __fdget_pos+0x2d2/0x380 [ 102.671106][ T1769] ? ksys_read+0x70/0x260 [ 102.675456][ T1769] ksys_read+0x14a/0x260 [ 102.679712][ T1769] ? vfs_write+0xd70/0xd70 [ 102.684148][ T1769] ? debug_smp_processor_id+0x17/0x20 [ 102.689537][ T1769] __x64_sys_read+0x7b/0x90 [ 102.694050][ T1769] do_syscall_64+0x31/0x40 [ 102.698477][ T1769] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.704376][ T1769] RIP: 0033:0x7f22280d434e [ 102.708894][ T1769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.728499][ T1769] RSP: 002b:00007f2226b6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.736920][ T1769] RAX: ffffffffffffffda RBX: 00007f2226b6b6c0 RCX: 00007f22280d434e [ 102.744910][ T1769] RDX: 000000000000000f RSI: 00007f2226b6b0a0 RDI: 0000000000000006 [ 102.752879][ T1769] RBP: 00007f2226b6b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.760848][ T1769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.768824][ T1769] R13: 00007f222839a038 R14: 00007f2228399fa0 R15: 00007ffd441d27a8 [ 102.783165][ T1775] tipc: Failed to remove local publication {66,0,0}/2400104772 [ 102.910715][ T1781] ip_tables: iptables: counters copy to user failed while replacing table [ 103.111182][ T1783] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 103.131625][ T1783] EXT4-fs (loop6): group descriptors corrupted! [ 103.142310][ T1788] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 103.241211][ T24] audit: type=1400 audit(1793637634.160:326): avc: denied { read write } for pid=1795 comm="syz.3.375" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 103.264586][ T24] audit: type=1400 audit(1793637634.160:327): avc: denied { open } for pid=1795 comm="syz.3.375" path="/66/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 103.264706][ T1796] MTRR 1 not used [ 103.289734][ T24] audit: type=1400 audit(1793637634.180:328): avc: denied { ioctl } for pid=1795 comm="syz.3.375" path="/66/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 103.317434][ T24] audit: type=1400 audit(1793637634.240:329): avc: denied { ioctl } for pid=1795 comm="syz.3.375" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 103.321849][ T1783] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 103.357595][ T1783] EXT4-fs (loop6): group descriptors corrupted! [ 103.417879][ T1783] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 103.430907][ T1783] EXT4-fs (loop6): group descriptors corrupted! [ 103.446614][ T24] audit: type=1400 audit(1793637634.360:330): avc: denied { lock } for pid=1776 comm="syz.9.371" path="/8/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.572574][ T1783] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 103.585794][ T1783] EXT4-fs (loop6): group descriptors corrupted! [ 103.738168][ T1783] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 103.750284][ T1783] EXT4-fs (loop6): group descriptors corrupted! [ 103.790738][ T1818] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,,errors=continue [ 103.800701][ T1818] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.850680][ T1818] incfs: Can't find or create .incomplete dir in ./file0 [ 103.858156][ T1818] incfs: mount failed -28 [ 103.865612][ T1818] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 103.967583][ T1827] x86/PAT: syz.9.379:1827 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 104.040795][ T1823] F2FS-fs (loop6): invalid crc value [ 104.058077][ T1823] F2FS-fs (loop6): Found nat_bits in checkpoint [ 104.125245][ T24] audit: type=1400 audit(1793637635.040:331): avc: denied { ioctl } for pid=1837 comm="syz.0.384" path="socket:[21211]" dev="sockfs" ino=21211 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.153978][ T1823] F2FS-fs (loop6): Start checkpoint disabled! [ 104.155475][ T1823] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 104.209309][ T1771] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 104.288047][ T1846] exfat: Deprecated parameter 'utf8' [ 104.298959][ T1841] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 104.322173][ T24] audit: type=1400 audit(1793637635.240:332): avc: denied { append } for pid=1840 comm="syz.3.385" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.343787][ T1846] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb9557297, utbl_chksum : 0xe619d30d) [ 104.356550][ T1841] fs-verity: sha512 using implementation "sha512-avx2" [ 104.361643][ T24] audit: type=1400 audit(1793637635.280:333): avc: denied { ioctl } for pid=1840 comm="syz.3.385" path="/68/file0/file1" dev="loop3" ino=15 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.391765][ T1846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.387'. [ 104.449232][ T1771] usb 9-1: Using ep0 maxpacket: 8 [ 104.466666][ T1823] tipc: Failed to remove local publication {66,0,0}/3087212870 [ 104.480171][ T9] handle_bad_sector: 3302 callbacks suppressed [ 104.480180][ T9] attempt to access beyond end of device [ 104.480180][ T9] loop6: rw=2049, want=45104, limit=40427 [ 104.679239][ T1765] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 104.790684][ T1857] F2FS-fs (loop6): invalid crc value [ 104.797170][ T1857] F2FS-fs (loop6): Found nat_bits in checkpoint [ 104.809369][ T1771] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 104.818633][ T1771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.826957][ T1771] usb 9-1: Product: syz [ 104.831341][ T1771] usb 9-1: Manufacturer: syz [ 104.835958][ T1771] usb 9-1: SerialNumber: syz [ 104.854839][ T1857] F2FS-fs (loop6): Start checkpoint disabled! [ 104.861690][ T1857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 104.998757][ T1857] FAULT_INJECTION: forcing a failure. [ 104.998757][ T1857] name failslab, interval 1, probability 0, space 0, times 0 [ 105.011661][ T1857] CPU: 1 PID: 1857 Comm: syz.6.389 Not tainted syzkaller #0 [ 105.019152][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.029234][ T1857] Call Trace: [ 105.032535][ T1857] __dump_stack+0x21/0x24 [ 105.036854][ T1857] dump_stack_lvl+0x1a7/0x208 [ 105.041519][ T1857] ? show_regs_print_info+0x18/0x18 [ 105.046710][ T1857] ? 0xffffffffa0018000 [ 105.050875][ T1857] ? __kernel_text_address+0xa0/0x100 [ 105.056249][ T1857] dump_stack+0x15/0x1c [ 105.060395][ T1857] should_fail+0x3ab/0x500 [ 105.064801][ T1857] ? f2fs_getxattr+0x3f9/0x1250 [ 105.069639][ T1857] __should_failslab+0xa4/0xe0 [ 105.074395][ T1857] should_failslab+0x9/0x20 [ 105.078883][ T1857] kmem_cache_alloc+0x3d/0x2d0 [ 105.083651][ T1857] f2fs_getxattr+0x3f9/0x1250 [ 105.088332][ T1857] ? kasan_set_track+0x4a/0x70 [ 105.089426][ T1765] usb 10-1: not running at top speed; connect to a high speed hub [ 105.093123][ T1857] ? kasan_set_free_info+0x23/0x40 [ 105.106024][ T1857] ? __kasan_slab_free+0x11/0x20 [ 105.110976][ T1857] ? kmem_cache_free+0x100/0x2d0 [ 105.115923][ T1857] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.121982][ T1857] ? f2fs_xattr_advise_set+0x140/0x140 [ 105.127448][ T1857] ? _kstrtoull+0x3bb/0x4c0 [ 105.131943][ T1857] ? kstrtouint_from_user+0x1c4/0x220 [ 105.137304][ T1857] f2fs_xattr_generic_get+0x12f/0x180 [ 105.142675][ T1857] ? memset+0x35/0x40 [ 105.146648][ T1857] ? f2fs_xattr_user_list+0xa0/0xa0 [ 105.151836][ T1857] __vfs_getxattr+0x61e/0x720 [ 105.156502][ T1857] ? vfs_getxattr_alloc+0x590/0x590 [ 105.161706][ T1857] ? rw_verify_area+0x1c0/0x360 [ 105.166547][ T1857] ? preempt_count_add+0x90/0x1b0 [ 105.171579][ T1857] cap_inode_need_killpriv+0x4b/0x70 [ 105.176866][ T1857] security_inode_need_killpriv+0x62/0x90 [ 105.179547][ T1765] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.182623][ T1857] file_remove_privs+0x202/0x590 [ 105.200359][ T1857] ? dentry_needs_remove_privs+0xf0/0xf0 [ 105.206001][ T1857] ? __kasan_check_write+0x14/0x20 [ 105.211101][ T1857] ? __kasan_check_write+0x14/0x20 [ 105.216197][ T1857] ? down_write+0xb2/0x120 [ 105.220621][ T1857] ? down_read_killable+0xe0/0xe0 [ 105.225635][ T1857] file_modified+0x19/0xb0 [ 105.230045][ T1857] f2fs_fallocate+0x33e/0x750 [ 105.234708][ T1857] vfs_fallocate+0x4b9/0x590 [ 105.239288][ T1857] __x64_sys_fallocate+0xc0/0x110 [ 105.244302][ T1857] do_syscall_64+0x31/0x40 [ 105.248705][ T1857] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.254581][ T1857] RIP: 0033:0x7fd312344b19 [ 105.259010][ T1857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.278604][ T1857] RSP: 002b:00007fd310d9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 105.287003][ T1857] RAX: ffffffffffffffda RBX: 00007fd3125cafa0 RCX: 00007fd312344b19 [ 105.294963][ T1857] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000006 [ 105.302926][ T1857] RBP: 00007fd310d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 105.310898][ T1857] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000001 [ 105.318871][ T1857] R13: 00007fd3125cb038 R14: 00007fd3125cafa0 R15: 00007ffc28653b68 [ 105.371994][ T549] attempt to access beyond end of device [ 105.371994][ T549] loop6: rw=2049, want=45104, limit=40427 [ 105.429299][ T1765] usb 10-1: string descriptor 0 read error: -22 [ 105.435628][ T1765] usb 10-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 105.445345][ T1765] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.459369][ T1771] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 105.467791][ T1771] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 105.509347][ T1771] usb 9-1: USB disconnect, device number 2 [ 105.529910][ T1765] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 105.540235][ T1872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 105.564368][ T24] audit: type=1400 audit(1793637636.480:334): avc: denied { getopt } for pid=1871 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.714574][ T1884] netlink: 'syz.0.399': attribute type 30 has an invalid length. [ 105.734889][ T1771] usb 10-1: USB disconnect, device number 2 [ 106.021108][ T1881] F2FS-fs (loop6): invalid crc value [ 106.046848][ T1881] F2FS-fs (loop6): Found nat_bits in checkpoint [ 106.080827][ T1898] F2FS-fs (loop8): invalid crc value [ 106.088791][ T1898] F2FS-fs (loop8): Found nat_bits in checkpoint [ 106.097771][ T1881] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 106.139786][ T1898] F2FS-fs (loop8): Start checkpoint disabled! [ 106.146699][ T1898] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 106.459496][ T1920] netlink: 28 bytes leftover after parsing attributes in process `syz.9.406'. [ 106.505396][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.407'. [ 106.547318][ T9] attempt to access beyond end of device [ 106.547318][ T9] loop8: rw=2049, want=40976, limit=40427 [ 106.622829][ T1908] F2FS-fs (loop3): invalid crc value [ 106.642115][ T1908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.662930][ T1926] device bridge_slave_0 left promiscuous mode [ 106.692231][ T1926] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.749622][ T1908] F2FS-fs (loop3): Start checkpoint disabled! [ 106.757177][ T1926] device bridge_slave_1 left promiscuous mode [ 106.763653][ T1926] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.767697][ T1908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.605104][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 107.605118][ T24] audit: type=1400 audit(1793637638.520:338): avc: denied { mount } for pid=1941 comm="syz.8.413" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.662444][ T24] audit: type=1400 audit(1793637638.560:339): avc: denied { search } for pid=1941 comm="syz.8.413" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.987744][ T1947] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 108.090592][ T24] audit: type=1400 audit(1793637638.560:340): avc: denied { write } for pid=1941 comm="syz.8.413" name="current_tracer" dev="tracefs" ino=12649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 108.135737][ T24] audit: type=1400 audit(1793637638.560:341): avc: denied { open } for pid=1941 comm="syz.8.413" path="/13/trace/current_tracer" dev="tracefs" ino=12649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 108.159728][ T24] audit: type=1400 audit(1793637638.610:342): avc: denied { append } for pid=1941 comm="syz.8.413" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.199227][ T1766] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.285080][ T549] attempt to access beyond end of device [ 108.285080][ T549] loop3: rw=2049, want=45104, limit=40427 [ 108.942713][ T1956] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,nombcache,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000040,inlinecrypt,grpid,nobarrier,nouid32,,errors=continue [ 109.132317][ T1956] 9pnet: p9_errstr2errno: server reported unknown error nž [ 109.132317][ T1956] §ñ秷iFMw gÿÿ [ 109.203781][ T1961] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 109.285056][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 110.674618][ T1766] usb 7-1: Using ep0 maxpacket: 8 [ 110.690098][ T1981] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 110.739330][ T1766] usb 7-1: device descriptor read/all, error -71 [ 110.816677][ T1989] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.831565][ T1989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.838843][ T1989] IPv6: NLM_F_CREATE should be set when creating new route [ 110.846084][ T1989] IPv6: NLM_F_CREATE should be set when creating new route [ 110.913090][ T1993] netlink: 'syz.0.425': attribute type 6 has an invalid length. [ 112.049628][ T1975] F2FS-fs (loop9): invalid crc value [ 112.344609][ T1975] F2FS-fs (loop9): Found nat_bits in checkpoint [ 112.380514][ T2004] device batadv_slave_0 entered promiscuous mode [ 112.397897][ T2003] device batadv_slave_0 left promiscuous mode [ 112.522080][ T1975] F2FS-fs (loop9): Start checkpoint disabled! [ 112.732159][ T24] audit: type=1400 audit(1793637643.650:343): avc: denied { write } for pid=2013 comm="syz.3.430" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.888075][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.9.431'. [ 112.979067][ T2019] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 113.003766][ T2030] netlink: 'syz.9.435': attribute type 11 has an invalid length. [ 113.025030][ T24] audit: type=1400 audit(1793637643.940:344): avc: denied { ioctl } for pid=2018 comm="syz.6.433" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.108284][ T24] audit: type=1400 audit(1793637644.020:345): avc: denied { mount } for pid=2033 comm="syz.9.438" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.191451][ T24] audit: type=1400 audit(1793637644.110:346): avc: denied { watch watch_reads } for pid=2033 comm="syz.9.438" path="/file0" dev="bpf" ino=21469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 114.545392][ T24] audit: type=1400 audit(1793637645.460:347): avc: denied { map } for pid=2057 comm="syz.6.440" path="socket:[22979]" dev="sockfs" ino=22979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.587869][ T2058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2058 comm=syz.6.440 [ 114.590349][ T2055] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 114.600852][ T24] audit: type=1400 audit(1793637645.480:348): avc: denied { read accept } for pid=2057 comm="syz.6.440" path="socket:[22979]" dev="sockfs" ino=22979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.679230][ T24] audit: type=1400 audit(1793637645.560:349): avc: denied { create } for pid=2046 comm="syz.3.436" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.732641][ T2061] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.801949][ T24] audit: type=1400 audit(1793637645.560:350): avc: denied { write } for pid=2046 comm="syz.3.436" name="file1" dev="loop3" ino=1048761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.839564][ T2061] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 114.851191][ T2061] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3357: comm syz.9.439: Allocating blocks 42-43 which overlap fs metadata [ 114.867860][ T24] audit: type=1400 audit(1793637645.560:351): avc: denied { open } for pid=2046 comm="syz.3.436" path="/80/file1/file1" dev="loop3" ino=1048761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.892513][ T24] audit: type=1400 audit(1793637645.710:352): avc: denied { unmount } for pid=1483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.919821][ T2061] EXT4-fs error (device loop9): ext4_acquire_dquot:6230: comm syz.9.439: Failed to acquire dquot type 0 [ 114.932588][ T2061] EXT4-fs (loop9): 1 truncate cleaned up [ 114.938353][ T2061] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 115.395126][ T2080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 115.407369][ T2077] EXT4-fs (loop9): Mount option "journal_checksum" incompatible with ext3 [ 115.439340][ T1771] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 115.527023][ T2082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=2082 comm=syz.0.446 [ 116.159154][ T2092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 116.341813][ T2096] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 116.381869][ T2098] device gretap1 entered promiscuous mode [ 116.549278][ T1771] usb 9-1: Using ep0 maxpacket: 8 [ 116.657583][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.664678][ T2102] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.672169][ T2102] device bridge_slave_0 entered promiscuous mode [ 116.679257][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.686322][ T2102] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.693805][ T2102] device bridge_slave_1 entered promiscuous mode [ 116.710736][ T1771] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.719152][ T1771] usb 9-1: config 179 has no interface number 0 [ 116.725517][ T1771] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 116.737087][ T1771] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 116.748551][ T1771] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 116.760118][ T1771] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 117.675667][ T1771] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.689566][ T1771] usb 9-1: config 179 interface 65 has no altsetting 0 [ 117.697363][ T1771] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 117.706964][ T1771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.734238][ T2110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 117.750935][ T1771] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input10 [ 117.800927][ T1771] usb 9-1: USB disconnect, device number 3 [ 117.819619][ T1771] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 117.850214][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.872610][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.890964][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.900937][ T2120] ip_tables: iptables: counters copy to user failed while replacing table [ 117.909941][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.918170][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.925276][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.932696][ T2122] ip_tables: iptables: counters copy to user failed while replacing table [ 117.941349][ T2117] EXT4-fs (loop6): Ignoring removed nobh option [ 117.955241][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.963448][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.963630][ T2122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.979983][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.998026][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.005089][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.012763][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.023624][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 118.023639][ T24] audit: type=1400 audit(1793637648.940:354): avc: denied { write } for pid=2121 comm="syz.8.461" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.053671][ T2117] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.460: invalid indirect mapped block 256 (level 2) [ 118.076793][ T2117] EXT4-fs (loop6): 2 truncates cleaned up [ 118.082735][ T2117] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue [ 118.094546][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.144745][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.151963][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.159707][ T2119] device bridge_slave_0 entered promiscuous mode [ 118.166872][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.174104][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.181977][ T2119] device bridge_slave_1 entered promiscuous mode [ 118.199128][ T2102] device veth0_vlan entered promiscuous mode [ 118.211464][ T2102] device veth1_macvtap entered promiscuous mode [ 118.241649][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.250406][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.258883][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.267765][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.275568][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.283339][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.292949][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.302228][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.533739][ T2131] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.610700][ T2131] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000008,grpquota,stripe=0x0000000000008000,debug_want_extra_isize=0x0000000000000080,delalloc,inlinecrypt,noauto_da_alloc,dioread_nolock,,errors=continue [ 118.649056][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.656348][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.663848][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.670945][ T2119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.679550][ T1764] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.713110][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.721160][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.725763][ T2116] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.460: bg 0: block 5: invalid block bitmap [ 118.740903][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.741410][ T2116] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 118.760440][ T2116] EXT4-fs (loop6): This should not happen!! Data will be lost [ 118.760440][ T2116] [ 118.770169][ T2116] EXT4-fs (loop6): Total free blocks count 0 [ 118.776197][ T2116] EXT4-fs (loop6): Free/Dirty block details [ 118.782148][ T2116] EXT4-fs (loop6): free_blocks=0 [ 118.787154][ T2116] EXT4-fs (loop6): dirty_blocks=33 [ 118.788152][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.792966][ T2116] EXT4-fs (loop6): Block reservation details [ 118.802240][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.806318][ T2116] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 118.813397][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.830746][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.839730][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.847904][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.855004][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.923720][ T2119] device veth0_vlan entered promiscuous mode [ 118.936892][ T2119] device veth1_macvtap entered promiscuous mode [ 118.960841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.969147][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.986433][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.994887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.003773][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.012832][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.021587][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.029612][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.037848][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.046073][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.107667][ T1763] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.116750][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.128017][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.137760][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.147293][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.165327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.206229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.216532][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.239519][ T2144] netlink: 'syz.9.458': attribute type 6 has an invalid length. [ 120.299354][ T1764] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.319260][ T1764] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.475180][ T2156] F2FS-fs (loop6): invalid crc value [ 120.496076][ T2156] F2FS-fs (loop6): Found nat_bits in checkpoint [ 120.529279][ T1763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.539585][ T1763] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 120.549717][ T1764] usb 9-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 120.559332][ T1764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.567451][ T1763] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 120.580385][ T1764] usb 9-1: Product: syz [ 120.580827][ T2156] F2FS-fs (loop6): Start checkpoint disabled! [ 120.584557][ T1764] usb 9-1: Manufacturer: syz [ 120.584567][ T1764] usb 9-1: SerialNumber: syz [ 120.629893][ T1764] ums-onetouch 9-1:1.0: USB Mass Storage device detected [ 120.638503][ T2156] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 120.670423][ T1764] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/input/input11 [ 120.678965][ T1764] input input11: usb_submit_urb failed [ 120.699373][ T1764] input: failed to attach handler kbd to device input11, error: -5 [ 120.707802][ T80] input input11: usb_submit_urb failed [ 120.713710][ T80] input input11: usb_submit_urb failed [ 120.720562][ T300] device veth1_macvtap left promiscuous mode [ 120.729667][ T300] device veth0_vlan left promiscuous mode [ 120.736865][ T1764] scsi host1: usb-storage 9-1:1.0 [ 120.757827][ T416] input input11: usb_submit_urb failed [ 120.763464][ T1763] usb 4-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 120.772797][ T1763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.780904][ T1763] usb 4-1: Product: syz [ 120.785085][ T1763] usb 4-1: Manufacturer: syz [ 120.790148][ T1763] usb 4-1: SerialNumber: syz [ 120.793221][ T80] input input11: usb_submit_urb failed [ 120.819542][ T80] input input11: usb_submit_urb failed [ 120.839782][ T1763] usb-storage 4-1:1.0: USB Mass Storage device detected [ 120.878848][ T1763] scsi host2: usb-storage 4-1:1.0 [ 121.023878][ T24] audit: type=1400 audit(1793637651.940:355): avc: denied { write open } for pid=2155 comm="syz.6.466" path="/64/file0/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.049339][ T1764] usb 4-1: USB disconnect, device number 6 [ 121.067042][ T2161] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 121.081281][ T2161] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.092176][ T49] attempt to access beyond end of device [ 121.092176][ T49] loop6: rw=2049, want=40984, limit=40427 [ 121.105175][ T2161] netlink: 'syz.9.467': attribute type 7 has an invalid length. [ 121.113192][ T2161] netlink: 'syz.9.467': attribute type 5 has an invalid length. [ 121.129375][ T2161] netlink: 17 bytes leftover after parsing attributes in process `syz.9.467'. [ 121.253821][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.469'. [ 121.353633][ T1767] usb 9-1: USB disconnect, device number 4 [ 121.363266][ T2178] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 121.388356][ T2178] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 121.398399][ T2178] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 121.408178][ T2178] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 121.421900][ T2178] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 121.427832][ T2149] 9pnet: Insufficient options for proto=fd [ 121.441068][ T2178] EXT4-fs (loop6): orphan cleanup on readonly fs [ 121.448133][ T2178] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.470: bg 0: block 34: padding at end of block bitmap is not set [ 121.462606][ T2178] Quota error (device loop6): write_blk: dquota write failed [ 121.470984][ T2178] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 121.481205][ T2178] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.470: Failed to acquire dquot type 1 [ 121.492886][ T2178] EXT4-fs (loop6): 1 truncate cleaned up [ 121.498719][ T2178] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,stripe=0x000000000000000a,acl,max_dir_size_kb=0x0000000000000003,noblock_validity,nombcache,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue [ 121.559633][ T2184] FAT-fs (loop9): Unrecognized mount option "ÿÿÿÿ" or missing value [ 121.588785][ T24] audit: type=1400 audit(1793637652.500:356): avc: denied { accept } for pid=2193 comm="syz.6.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.155167][ T2201] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.310567][ T2201] EXT4-fs error (device loop8): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 122.365673][ T2206] device bridge_slave_0 left promiscuous mode [ 122.400333][ T2206] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.515265][ T2201] Quota error (device loop8): write_blk: dquota write failed [ 122.606810][ T2213] device bridge_slave_1 left promiscuous mode [ 122.613259][ T2201] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 122.629347][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.644626][ T2201] EXT4-fs error (device loop8): ext4_acquire_dquot:6230: comm syz.8.477: Failed to acquire dquot type 0 [ 123.032368][ T2201] EXT4-fs (loop8): 1 truncate cleaned up [ 123.087604][ T2201] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000001,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 123.683338][ T2236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.694715][ T2212] F2FS-fs (loop6): invalid crc value [ 123.725915][ T24] audit: type=1400 audit(1793637654.640:357): avc: denied { accept } for pid=2235 comm="syz.9.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 123.729979][ T2212] F2FS-fs (loop6): Found nat_bits in checkpoint [ 123.772321][ T2241] syz.3.488 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.803402][ T24] audit: type=1400 audit(1793637654.710:358): avc: denied { create } for pid=2242 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.865244][ T2250] device-mapper: table: 253:4: snapshot: Cannot get origin device [ 123.895386][ T2250] device-mapper: ioctl: error adding target to table [ 123.904115][ T2212] F2FS-fs (loop6): Start checkpoint disabled! [ 123.911761][ T2212] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 123.928427][ T2263] ip_tables: iptables: counters copy to user failed while replacing table [ 123.947920][ T2248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 123.996092][ T24] audit: type=1400 audit(1793637654.910:359): avc: denied { create } for pid=2259 comm="syz.0.495" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.023707][ T2246] EXT4-fs (loop8): Ignoring removed bh option [ 124.079279][ T24] audit: type=1400 audit(1793637654.910:360): avc: denied { read write } for pid=2259 comm="syz.0.495" name="md0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.129624][ T24] audit: type=1400 audit(1793637654.910:361): avc: denied { open } for pid=2259 comm="syz.0.495" path="/140/md0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.167083][ T2246] EXT4-fs warning (device loop8): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.230155][ T2246] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 124.299669][ T2246] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz.8.484: Corrupt directory, running e2fsck is recommended [ 124.314931][ T2246] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 124.324377][ T2246] EXT4-fs error (device loop8): ext4_iget_extra_inode:4692: inode #15: comm syz.8.484: corrupted in-inode xattr [ 124.349752][ T2246] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.484: couldn't read orphan inode 15 (err -117) [ 124.362618][ T2273] EXT4-fs (loop9): Test dummy encryption mode enabled [ 124.401353][ T2246] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue [ 124.429886][ T2273] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.498: inode has both inline data and extents flags [ 124.445297][ T2273] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.498: couldn't read orphan inode 15 (err -117) [ 124.448228][ T2234] EXT4-fs warning (device loop8): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.468653][ T2234] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 124.504809][ T2234] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz.8.484: Corrupt directory, running e2fsck is recommended [ 124.527958][ T2273] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 124.677523][ T2273] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 124.711193][ T24] audit: type=1400 audit(1793637655.630:362): avc: denied { read } for pid=2272 comm="syz.9.498" path="/11/file1/file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.845164][ T24] audit: type=1400 audit(1793637655.760:363): avc: denied { unlink } for pid=281 comm="syz-executor" name="md0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.907442][ T2280] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 124.915402][ T2280] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 125.041908][ T24] audit: type=1400 audit(1793637655.960:364): avc: denied { write } for pid=2281 comm="syz.9.499" name="netlink" dev="proc" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 125.368611][ T24] audit: type=1400 audit(1793637656.280:365): avc: denied { ioctl } for pid=2210 comm="syz.6.480" path="/69/file0/bus" dev="loop6" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.376680][ T2212] tipc: Failed to remove local publication {66,0,0}/3505417035 [ 125.631493][ T24] audit: type=1400 audit(1793637656.550:366): avc: denied { create } for pid=2295 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.867855][ T2299] EXT4-fs warning (device loop8): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.880054][ T2299] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 125.893678][ T2299] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz.8.484: Corrupt directory, running e2fsck is recommended [ 125.909171][ T2299] EXT4-fs warning (device loop8): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.969699][ T2299] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 125.997002][ T2299] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz.8.484: Corrupt directory, running e2fsck is recommended [ 126.047593][ T1483] EXT4-fs warning (device loop8): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.149645][ T1483] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 126.177662][ T1483] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 22: comm syz-executor: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 126.223762][ T1483] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 8: comm syz-executor: path /17/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 127.172237][ T2350] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.190952][ T2350] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.525: bad orphan inode 13 [ 127.201342][ T2350] ext4_test_bit(bit=12, block=18) = 1 [ 127.207017][ T2350] is_bad_inode(inode)=0 [ 127.211331][ T2350] NEXT_ORPHAN(inode)=0 [ 127.213801][ T2361] FAULT_INJECTION: forcing a failure. [ 127.213801][ T2361] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 127.215523][ T2350] max_ino=32 [ 127.230293][ T2361] CPU: 1 PID: 2361 Comm: syz.9.529 Not tainted syzkaller #0 [ 127.233089][ T2350] i_nlink=1 [ 127.239227][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.239233][ T2361] Call Trace: [ 127.239274][ T2361] __dump_stack+0x21/0x24 [ 127.239313][ T2361] dump_stack_lvl+0x1a7/0x208 [ 127.242752][ T2350] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 127.252470][ T2361] ? show_regs_print_info+0x18/0x18 [ 127.252481][ T2361] ? __se_sys_bpf+0x49a/0x740 [ 127.252526][ T2361] dump_stack+0x15/0x1c [ 127.270766][ T2350] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.273631][ T2361] should_fail+0x3ab/0x500 [ 127.273690][ T2361] should_fail_alloc_page+0x4f/0x60 [ 127.279818][ T2350] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.525: bg 0: block 248: padding at end of block bitmap is not set [ 127.283528][ T2361] __alloc_pages_nodemask+0x11a/0x640 [ 127.283575][ T2361] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 127.288566][ T2350] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.525: Failed to acquire dquot type 1 [ 127.302062][ T2361] ? __kmalloc+0x19f/0x330 [ 127.302077][ T2361] ? __vmalloc_node_range+0x294/0x7a0 [ 127.302090][ T2361] __vmalloc_node_range+0x388/0x7a0 [ 127.302139][ T2361] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 127.368473][ T2361] __vmalloc+0x79/0x90 [ 127.372534][ T2361] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 127.378095][ T2361] bpf_prog_alloc_no_stats+0x3a/0x240 [ 127.383476][ T2361] bpf_prog_alloc+0x21/0x1f0 [ 127.388064][ T2361] bpf_prog_load+0x7ca/0x14e0 [ 127.392729][ T2361] ? map_freeze+0x330/0x330 [ 127.397221][ T2361] ? vfs_write+0xae4/0xd70 [ 127.401626][ T2361] ? selinux_bpf+0xc7/0xf0 [ 127.406033][ T2361] ? security_bpf+0x82/0xa0 [ 127.410541][ T2361] __se_sys_bpf+0x49a/0x740 [ 127.415034][ T2361] ? __x64_sys_bpf+0x90/0x90 [ 127.419617][ T2361] ? __kasan_check_read+0x11/0x20 [ 127.424634][ T2361] __x64_sys_bpf+0x7b/0x90 [ 127.429049][ T2361] do_syscall_64+0x31/0x40 [ 127.433459][ T2361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 127.439340][ T2361] RIP: 0033:0x7fe00fcaab19 [ 127.443749][ T2361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.463443][ T2361] RSP: 002b:00007fe00e702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.471866][ T2361] RAX: ffffffffffffffda RBX: 00007fe00ff30fa0 RCX: 00007fe00fcaab19 [ 127.479930][ T2361] RDX: 000000000000001b RSI: 00002000000008c0 RDI: 0000000000000005 [ 127.487900][ T2361] RBP: 00007fe00fd42af8 R08: 0000000000000000 R09: 0000000000000000 [ 127.495882][ T2361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.503852][ T2361] R13: 00007fe00ff31038 R14: 00007fe00ff30fa0 R15: 00007ffd235392a8 [ 127.527376][ T49] EXT4-fs error (device loop6): ext4_release_dquot:6266: comm kworker/u4:2: Failed to release dquot type 1 [ 127.654408][ T2377] tipc: Started in network mode [ 127.659483][ T2377] tipc: Own node identity 7f000001, cluster identity 4711 [ 127.667075][ T2377] tipc: New replicast peer: 127.0.0.1 [ 127.672895][ T2377] tipc: Enabled bearer , priority 10 [ 127.829455][ T704] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 128.109235][ T704] usb 9-1: Using ep0 maxpacket: 32 [ 128.269298][ T704] usb 9-1: unable to get BOS descriptor or descriptor too short [ 128.349275][ T704] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 128.357525][ T704] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 128.365881][ T704] usb 9-1: config 14 has no interface number 0 [ 128.372203][ T704] usb 9-1: config 14 has no interface number 1 [ 128.523541][ T704] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 128.538840][ T704] usb 9-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 128.550609][ T704] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 128.586457][ T704] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.653851][ T704] usb 9-1: config 14 interface 57 has no altsetting 0 [ 128.677828][ T704] usb 9-1: config 14 interface 228 has no altsetting 0 [ 128.789230][ T1761] tipc: 32-bit node address hash set to 100007f [ 128.839322][ T704] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 128.848582][ T704] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.856893][ T704] usb 9-1: Product: syz [ 128.861385][ T704] usb 9-1: Manufacturer: syz [ 128.869903][ T704] usb 9-1: SerialNumber: syz [ 129.304627][ T2426] Disabled LAPIC found during irq injection [ 129.337987][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 129.338002][ T24] audit: type=1400 audit(1793637660.249:371): avc: denied { wake_alarm } for pid=2427 comm="syz.6.553" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.374214][ T24] audit: type=1400 audit(1793637660.289:372): avc: denied { mount } for pid=2429 comm="syz.6.554" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.396615][ T24] audit: type=1400 audit(1793637660.309:373): avc: denied { unmount } for pid=774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.570959][ T2449] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 129.587926][ T2449] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512) [ 129.595653][ T2449] FAT-fs (loop9): Filesystem has been set read-only [ 129.603178][ T2449] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 130.038009][ T24] audit: type=1400 audit(1793637660.939:374): avc: denied { append } for pid=2474 comm="syz.9.572" name="sda" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.618731][ T2492] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,block_validity,grpid,,errors=continue [ 130.680169][ T2492] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.691235][ T24] audit: type=1400 audit(1793637661.609:375): avc: denied { unmount } for pid=2102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.850507][ T24] audit: type=1400 audit(1793637661.769:376): avc: denied { ioctl } for pid=2504 comm="syz.9.584" path="/32/file0" dev="tmpfs" ino=192 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.054481][ T24] audit: type=1400 audit(1793637661.969:377): avc: denied { read } for pid=2506 comm="syz.6.583" name="dynamic_events" dev="tracefs" ino=12713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 131.133782][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.141284][ T2512] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.148694][ T2523] FAULT_INJECTION: forcing a failure. [ 131.148694][ T2523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.150436][ T2512] device bridge_slave_0 entered promiscuous mode [ 131.162704][ T2523] CPU: 1 PID: 2523 Comm: syz.9.590 Not tainted syzkaller #0 [ 131.175553][ T2523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.185610][ T2523] Call Trace: [ 131.188902][ T2523] __dump_stack+0x21/0x24 [ 131.193232][ T2523] dump_stack_lvl+0x1a7/0x208 [ 131.197906][ T2523] ? show_regs_print_info+0x18/0x18 [ 131.203100][ T2523] ? __schedule+0xc0b/0x13e0 [ 131.207692][ T2523] dump_stack+0x15/0x1c [ 131.211870][ T2523] should_fail+0x3ab/0x500 [ 131.216284][ T2523] should_fail_alloc_page+0x4f/0x60 [ 131.221480][ T2523] __alloc_pages_nodemask+0x11a/0x640 [ 131.226848][ T2523] ? preempt_schedule_notrace+0x120/0x120 [ 131.232565][ T2523] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 131.238123][ T2523] __get_free_pages+0xe/0x30 [ 131.242716][ T2523] __tlb_remove_page_size+0x18a/0x310 [ 131.248108][ T2523] unmap_page_range+0x1303/0x2190 [ 131.253137][ T2523] ? copy_page_range+0x27a0/0x27a0 [ 131.258357][ T2523] ? __kasan_check_read+0x11/0x20 [ 131.263385][ T2523] unmap_vmas+0x25f/0x360 [ 131.267719][ T2523] ? unmap_page_range+0x2190/0x2190 [ 131.272922][ T2523] ? __kasan_check_write+0x14/0x20 [ 131.278036][ T2523] ? tlb_gather_mmu+0x269/0x330 [ 131.282890][ T2523] exit_mmap+0x309/0x590 [ 131.287150][ T2523] ? vm_brk+0x30/0x30 [ 131.291153][ T2523] ? uprobe_clear_state+0x2d5/0x350 [ 131.296354][ T2523] __mmput+0x92/0x2d0 [ 131.300353][ T2523] mmput+0x4e/0x150 [ 131.304175][ T2523] do_exit+0x9d8/0x24e0 [ 131.308336][ T2523] ? try_to_wake_up+0x670/0xdf0 [ 131.313277][ T2523] ? wake_up_q+0x123/0x1e0 [ 131.317698][ T2523] ? put_task_struct+0x90/0x90 [ 131.322467][ T2523] ? futex_wake+0x4c4/0x570 [ 131.326972][ T2523] ? __kasan_check_write+0x14/0x20 [ 131.332089][ T2523] ? _raw_spin_lock_irq+0x95/0xf0 [ 131.337113][ T2523] do_group_exit+0x149/0x310 [ 131.341832][ T2523] ? __kasan_check_write+0x14/0x20 [ 131.346946][ T2523] ? recalc_sigpending+0x1ac/0x230 [ 131.352061][ T2523] get_signal+0xfb1/0x1300 [ 131.356484][ T2523] arch_do_signal_or_restart+0xe7/0x11b0 [ 131.362121][ T2523] ? kernel_write+0x3c0/0x3c0 [ 131.366800][ T2523] ? futex_exit_release+0x1e0/0x1e0 [ 131.372012][ T2523] ? mutex_lock+0x92/0xf0 [ 131.376357][ T2523] ? mutex_trylock+0xb0/0xb0 [ 131.380953][ T2523] ? __fget_files+0x2e1/0x340 [ 131.385634][ T2523] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 131.391275][ T2523] ? __se_sys_futex+0x2ba/0x370 [ 131.396135][ T2523] ? fpu__clear_all+0x20/0x20 [ 131.400816][ T2523] exit_to_user_mode_loop+0xa2/0xe0 [ 131.406017][ T2523] exit_to_user_mode_prepare+0x76/0xa0 [ 131.411472][ T2523] syscall_exit_to_user_mode+0x1d/0x40 [ 131.416932][ T2523] do_syscall_64+0x3d/0x40 [ 131.421357][ T2523] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.427253][ T2523] RIP: 0033:0x7fe00fcaab19 [ 131.431667][ T2523] Code: Unable to access opcode bytes at RIP 0x7fe00fcaaaef. [ 131.439144][ T2523] RSP: 002b:00007fe00e7020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.447572][ T2523] RAX: 0000000000000001 RBX: 00007fe00ff30fa8 RCX: 00007fe00fcaab19 [ 131.455551][ T2523] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe00ff30fac [ 131.463531][ T2523] RBP: 00007fe00ff30fa0 R08: 0006d88094257729 R09: 0000000000000000 [ 131.471507][ T2523] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 131.479486][ T2523] R13: 00007fe00ff31038 R14: 00007ffd235391c0 R15: 00007ffd235392a8 [ 131.504315][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.517506][ T2512] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.527137][ T2512] device bridge_slave_1 entered promiscuous mode [ 131.548846][ T1761] usb 9-1: USB disconnect, device number 5 [ 131.748614][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.755739][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.763050][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.770105][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.818410][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.828378][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.849665][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.890257][ T2541] 9pnet: Insufficient options for proto=fd [ 131.896448][ T49] device bridge_slave_1 left promiscuous mode [ 131.903009][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.912923][ T49] device bridge_slave_0 left promiscuous mode [ 131.919346][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.927645][ T49] device veth1_macvtap left promiscuous mode [ 131.934924][ T49] device veth0_vlan left promiscuous mode [ 131.955409][ T2543] EXT4-fs (loop6): Ignoring removed bh option [ 132.039008][ T2543] EXT4-fs (loop6): quotafile must be on filesystem root [ 132.054496][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.064468][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.072853][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.079911][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.087667][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.096573][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.105465][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.112539][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.232250][ T1761] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 132.245048][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.253960][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.269104][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.277604][ T2560] Disabled LAPIC found during irq injection [ 132.278704][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.297773][ T2512] device veth0_vlan entered promiscuous mode [ 132.304504][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.313299][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.322018][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.330366][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.340344][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.347839][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.361385][ T2512] device veth1_macvtap entered promiscuous mode [ 132.368349][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.377024][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.385397][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.401876][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.410430][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.419097][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.427818][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.469254][ T2564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.489347][ T1761] usb 9-1: Using ep0 maxpacket: 16 [ 132.500258][ T2556] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 132.509966][ T2556] F2FS-fs (loop6): invalid crc value [ 132.515665][ T2556] F2FS-fs (loop6): invalid crc value [ 132.533484][ T2556] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 132.601529][ T2572] FAULT_INJECTION: forcing a failure. [ 132.601529][ T2572] name failslab, interval 1, probability 0, space 0, times 0 [ 132.614867][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Not tainted syzkaller #0 [ 132.622214][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.632291][ T2572] Call Trace: [ 132.635602][ T2572] __dump_stack+0x21/0x24 [ 132.639949][ T2572] dump_stack_lvl+0x1a7/0x208 [ 132.644646][ T2572] ? show_regs_print_info+0x18/0x18 [ 132.649887][ T2572] ? selinux_kernfs_init_security+0x143/0x450 [ 132.655986][ T2572] ? selinux_path_notify+0x670/0x670 [ 132.661294][ T2572] dump_stack+0x15/0x1c [ 132.665478][ T2572] should_fail+0x3ab/0x500 [ 132.669916][ T2572] ? __kernfs_new_node+0xe1/0x670 [ 132.674964][ T2572] __should_failslab+0xa4/0xe0 [ 132.679945][ T2572] should_failslab+0x9/0x20 [ 132.684473][ T2572] kmem_cache_alloc+0x3d/0x2d0 [ 132.689262][ T2572] __kernfs_new_node+0xe1/0x670 [ 132.694136][ T2572] ? kernfs_new_node+0x260/0x260 [ 132.699093][ T2572] ? down_write+0xb2/0x120 [ 132.703534][ T2572] ? down_read_killable+0xe0/0xe0 [ 132.708583][ T2572] ? __kasan_check_write+0x14/0x20 [ 132.713764][ T2572] ? up_write+0x57/0x120 [ 132.718026][ T2572] ? kernfs_activate+0x35e/0x370 [ 132.722990][ T2572] kernfs_new_node+0x150/0x260 [ 132.727953][ T2572] __kernfs_create_file+0x4e/0x270 [ 132.733093][ T2572] sysfs_add_file_mode_ns+0x29a/0x350 [ 132.738501][ T2572] sysfs_merge_group+0x182/0x320 [ 132.743468][ T2572] ? sysfs_remove_groups+0xb0/0xb0 [ 132.748609][ T2572] dpm_sysfs_add+0xe0/0x290 [ 132.753144][ T2572] device_add+0x53b/0xc00 [ 132.757583][ T2572] __device_add_disk+0x6c7/0x1010 [ 132.762637][ T2572] device_add_disk_no_queue_reg+0x21/0x30 [ 132.768374][ T2572] dm_create+0x992/0xdd0 [ 132.772644][ T2572] dev_create+0x12e/0x2c0 [ 132.776994][ T2572] ? list_devices+0x570/0x570 [ 132.781702][ T2572] ? __kasan_check_write+0x14/0x20 [ 132.786844][ T2572] ? _copy_from_user+0x95/0xd0 [ 132.791896][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 132.796445][ T2572] ? list_devices+0x570/0x570 [ 132.801169][ T2572] ? dm_poll+0x120/0x120 [ 132.805447][ T2572] ? security_file_ioctl+0x84/0xa0 [ 132.810578][ T2572] ? dm_poll+0x120/0x120 [ 132.814843][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 132.819542][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 132.824170][ T2572] do_syscall_64+0x31/0x40 [ 132.828609][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 132.834523][ T2572] RIP: 0033:0x7f35983dab19 [ 132.838962][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.858589][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.867014][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 132.874980][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 132.882958][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 132.891020][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.898987][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 132.908043][ T1761] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.921251][ T2572] ------------[ cut here ]------------ [ 132.926794][ T2572] WARNING: CPU: 1 PID: 2572 at fs/sysfs/file.c:332 sysfs_create_files+0x227/0x360 [ 132.936234][ T1761] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.946357][ T1761] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.959844][ T2572] Modules linked in: [ 132.963906][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Not tainted syzkaller #0 [ 132.971575][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.981959][ T1761] usb 9-1: config 0 interface 0 has no altsetting 0 [ 132.988623][ T1761] usb 9-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 132.998221][ T2572] RIP: 0010:sysfs_create_files+0x227/0x360 [ 133.004348][ T2572] Code: 4d 89 ef 49 89 fd 48 89 c7 e8 c5 41 d7 ff 4c 89 ef 4d 89 fd e9 2f ff ff ff e8 15 b4 9c ff 31 c0 e9 f4 00 00 00 e8 09 b4 9c ff <0f> 0b 41 c6 44 1d 06 f8 41 c6 44 1d 04 f8 c7 44 24 1c ea ff ff ff [ 133.032156][ T1761] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.049383][ T2572] RSP: 0018:ffffc90000e279a0 EFLAGS: 00010283 [ 133.051637][ T1761] usb 9-1: config 0 descriptor?? [ 133.056136][ T2572] RAX: ffffffff81c803df RBX: dffffc0000000000 RCX: 0000000000080000 [ 133.086969][ T2572] RDX: ffffc9000255f000 RSI: 000000000002e1d4 RDI: 000000000002e1d5 [ 133.096038][ T2572] RBP: ffffc90000e27a68 R08: ffff88810b3c4eeb R09: 1ffff110216789dd [ 133.113558][ T2572] R10: dffffc0000000000 R11: ffffed10216789de R12: ffffffff853fc3c0 [ 133.121905][ T2572] R13: 1ffff920001c4f3c R14: ffff8881283f0098 R15: ffff8881283f0068 [ 133.152740][ T2592] tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 133.160400][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 133.189110][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.206069][ T2572] CR2: 0000200000007038 CR3: 000000010fdf7000 CR4: 00000000003506a0 [ 133.220499][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.230810][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 133.241793][ T2572] Call Trace: [ 133.245180][ T2572] ? device_add+0x78f/0xc00 [ 133.249817][ T2572] ? sysfs_create_file_ns+0x1b0/0x1b0 [ 133.255247][ T2572] ? __kasan_check_write+0x14/0x20 [ 133.260526][ T2572] ? kobject_get+0xd3/0x120 [ 133.265352][ T2572] __device_add_disk+0xb5f/0x1010 [ 133.271029][ T2572] device_add_disk_no_queue_reg+0x21/0x30 [ 133.276845][ T2572] dm_create+0x992/0xdd0 [ 133.281386][ T2572] dev_create+0x12e/0x2c0 [ 133.285787][ T2572] ? list_devices+0x570/0x570 [ 133.290734][ T2572] ? __kasan_check_write+0x14/0x20 [ 133.296605][ T2572] ? _copy_from_user+0x95/0xd0 [ 133.301650][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 133.306849][ T2572] ? list_devices+0x570/0x570 [ 133.312637][ T2572] ? dm_poll+0x120/0x120 [ 133.317554][ T2572] ? security_file_ioctl+0x84/0xa0 [ 133.323103][ T2572] ? dm_poll+0x120/0x120 [ 133.327491][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 133.332739][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 133.337480][ T2572] do_syscall_64+0x31/0x40 [ 133.342174][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 133.344296][ T2599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.620'. [ 133.348398][ T2572] RIP: 0033:0x7f35983dab19 [ 133.363519][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.383851][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.393156][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 133.401471][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 133.410367][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 133.419334][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.427971][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 133.442099][ T2572] ---[ end trace d338e12723bf9bc9 ]--- [ 133.447675][ T2572] ------------[ cut here ]------------ [ 133.453346][ T2572] kernfs: can not remove 'events', no directory [ 133.460214][ T2572] WARNING: CPU: 0 PID: 2572 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 133.470572][ T2572] Modules linked in: [ 133.474556][ T2572] CPU: 0 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 133.483486][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.493695][ T2572] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 133.500403][ T2572] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 133.526065][ T2572] RSP: 0018:ffffc90000e27968 EFLAGS: 00010246 [ 133.532716][ T2572] RAX: d3cf089b33a1e300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 133.540938][ T2572] RDX: ffffc9000255f000 RSI: 000000000006d437 RDI: 000000000006d438 [ 133.548986][ T2572] RBP: ffffc90000e27990 R08: ffff8881f7052fff R09: 1ffff1103ee0a5ff [ 133.558364][ T2572] R10: dffffc0000000000 R11: ffffed103ee0a600 R12: 0000000000000000 [ 133.573575][ T2572] R13: 0000000000000000 R14: ffffffff853fc3a0 R15: 0000000000000000 [ 133.589309][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 133.607060][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.619275][ T2572] CR2: 00007fe00673f000 CR3: 000000010fdf7000 CR4: 00000000003506b0 [ 133.638518][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.661782][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 133.683886][ T2572] Call Trace: [ 133.692457][ T2572] sysfs_create_files+0x2d8/0x360 [ 133.706795][ T2572] ? device_add+0x78f/0xc00 [ 133.721642][ T2572] ? sysfs_create_file_ns+0x1b0/0x1b0 [ 133.736435][ T2572] ? __kasan_check_write+0x14/0x20 [ 133.751848][ T2572] ? kobject_get+0xd3/0x120 [ 133.764030][ T2572] __device_add_disk+0xb5f/0x1010 [ 133.778391][ T2572] device_add_disk_no_queue_reg+0x21/0x30 [ 133.780409][ T1761] usbhid 9-1:0.0: can't add hid device: -71 [ 133.790388][ T1761] usbhid: probe of 9-1:0.0 failed with error -71 [ 133.798041][ T2572] dm_create+0x992/0xdd0 [ 133.803428][ T1761] usb 9-1: USB disconnect, device number 6 [ 133.811132][ T2572] dev_create+0x12e/0x2c0 [ 133.815496][ T2572] ? list_devices+0x570/0x570 [ 133.820413][ T2572] ? __kasan_check_write+0x14/0x20 [ 133.825701][ T2572] ? _copy_from_user+0x95/0xd0 [ 133.830575][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 133.835104][ T2572] ? list_devices+0x570/0x570 [ 133.839865][ T2572] ? dm_poll+0x120/0x120 [ 133.844138][ T2572] ? security_file_ioctl+0x84/0xa0 [ 133.849452][ T2572] ? dm_poll+0x120/0x120 [ 133.853719][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 133.858445][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 133.863211][ T2572] do_syscall_64+0x31/0x40 [ 133.867650][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 133.879195][ T2572] RIP: 0033:0x7f35983dab19 [ 133.883647][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.919201][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.927787][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 133.944506][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 133.953646][ T2603] F2FS-fs (loop9): invalid crc value [ 133.959376][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 133.967385][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.976848][ T2603] F2FS-fs (loop9): Found nat_bits in checkpoint [ 134.001363][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 134.029318][ T2572] ---[ end trace d338e12723bf9bca ]--- [ 134.034910][ T2572] dm-5: failed to create sysfs files for events [ 134.080210][ T2572] ------------[ cut here ]------------ [ 134.085728][ T2572] kernfs: can not remove 'events', no directory [ 134.092144][ T2603] F2FS-fs (loop9): Start checkpoint disabled! [ 134.095630][ T2621] fuse: Bad value for 'fd' [ 134.098243][ T24] audit: type=1400 audit(1793637665.009:378): avc: denied { mounton } for pid=2620 comm="syz.6.625" path="/107/file0" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.110070][ T2572] WARNING: CPU: 1 PID: 2572 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 134.136528][ T2572] Modules linked in: [ 134.141034][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 134.145046][ T2603] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 134.149784][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.149804][ T2572] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 134.149818][ T2572] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 134.149826][ T2572] RSP: 0018:ffffc90000e27a10 EFLAGS: 00010246 [ 134.149838][ T2572] RAX: d3cf089b33a1e300 RBX: 0000000000000001 RCX: 0000000000080000 [ 134.149867][ T2572] RDX: ffffc9000255f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 134.216335][ T2572] RBP: ffffc90000e27a38 R08: ffffc90000e273a7 R09: fffff520001c4ea8 [ 134.224379][ T2572] R10: dffffc0000000000 R11: fffff520001c4e75 R12: 0000000000000000 [ 134.232514][ T2572] R13: ffffffff8674f000 R14: ffffffff853fc3a0 R15: 0000000000000000 [ 134.240550][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 134.249544][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.256239][ T2572] CR2: 00007fd310d7aff8 CR3: 000000010fdf7000 CR4: 00000000003506a0 [ 134.264282][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.272452][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.280492][ T2572] Call Trace: [ 134.283801][ T2572] sysfs_remove_files+0xa4/0x100 [ 134.288759][ T2572] del_gendisk+0x254/0xa10 [ 134.298515][ T2572] cleanup_mapped_device+0x16c/0x270 [ 134.308120][ T2572] dm_create+0xb03/0xdd0 [ 134.313741][ T2572] dev_create+0x12e/0x2c0 [ 134.318789][ T2572] ? list_devices+0x570/0x570 [ 134.323548][ T2572] ? __kasan_check_write+0x14/0x20 [ 134.328686][ T2572] ? _copy_from_user+0x95/0xd0 [ 134.333661][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 134.338203][ T2572] ? list_devices+0x570/0x570 [ 134.342964][ T2572] ? dm_poll+0x120/0x120 [ 134.347467][ T2572] ? security_file_ioctl+0x84/0xa0 [ 134.353237][ T2572] ? dm_poll+0x120/0x120 [ 134.357514][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 134.364415][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 134.369054][ T2572] do_syscall_64+0x31/0x40 [ 134.377562][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 134.383926][ T2572] RIP: 0033:0x7f35983dab19 [ 134.388739][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.408700][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.459276][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 134.477495][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 134.487580][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 134.525050][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.533374][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 134.541792][ T2572] ---[ end trace d338e12723bf9bcb ]--- [ 134.547271][ T2572] ------------[ cut here ]------------ [ 134.555370][ T2572] kernfs: can not remove 'events_async', no directory [ 134.562339][ T2572] WARNING: CPU: 1 PID: 2572 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 134.572490][ T2572] Modules linked in: [ 134.579140][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 134.588841][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.608899][ T2572] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 134.670371][ T2572] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 134.701664][ T2572] RSP: 0018:ffffc90000e27a10 EFLAGS: 00010246 [ 134.717957][ T2572] RAX: d3cf089b33a1e300 RBX: 0000000000000002 RCX: 0000000000080000 [ 134.736176][ T2572] RDX: ffffc9000255f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 134.754417][ T2572] RBP: ffffc90000e27a38 R08: ffffc90000e273a7 R09: fffff520001c4ea8 [ 134.762743][ T2572] R10: dffffc0000000000 R11: fffff520001c4e75 R12: 0000000000000000 [ 134.771133][ T2572] R13: ffffffff8674f000 R14: ffffffff853fc480 R15: 0000000000000000 [ 134.779245][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 134.788327][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.820436][ T24] audit: type=1400 audit(1793637665.729:379): avc: denied { bind } for pid=2632 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.843137][ T2572] CR2: 00007fe00fcf8200 CR3: 000000010fdf7000 CR4: 00000000003506a0 [ 134.878915][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.983773][ T24] audit: type=1400 audit(1793637665.729:380): avc: denied { name_bind } for pid=2632 comm="syz.0.629" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 135.043151][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.140488][ T2572] Call Trace: [ 135.167796][ T2572] sysfs_remove_files+0xa4/0x100 [ 135.179100][ T24] audit: type=1400 audit(1793637665.729:381): avc: denied { node_bind } for pid=2632 comm="syz.0.629" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 135.180063][ T2572] del_gendisk+0x254/0xa10 [ 135.206947][ T1760] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.219247][ T1760] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.228929][ T2572] cleanup_mapped_device+0x16c/0x270 [ 135.234331][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.243390][ T2572] dm_create+0xb03/0xdd0 [ 135.247668][ T2572] dev_create+0x12e/0x2c0 [ 135.252063][ T2572] ? list_devices+0x570/0x570 [ 135.256810][ T2572] ? __kasan_check_write+0x14/0x20 [ 135.262043][ T2572] ? _copy_from_user+0x95/0xd0 [ 135.266843][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 135.271442][ T2572] ? list_devices+0x570/0x570 [ 135.276146][ T2572] ? dm_poll+0x120/0x120 [ 135.281903][ T2572] ? security_file_ioctl+0x84/0xa0 [ 135.287706][ T2572] ? dm_poll+0x120/0x120 [ 135.288329][ T24] audit: type=1400 audit(1793637666.199:382): avc: denied { bind } for pid=2651 comm="syz.8.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.293790][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 135.314879][ T300] attempt to access beyond end of device [ 135.314879][ T300] loop9: rw=2049, want=40976, limit=40427 [ 135.335035][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 135.339739][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.349369][ T2572] do_syscall_64+0x31/0x40 [ 135.353819][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 135.360137][ T2572] RIP: 0033:0x7f35983dab19 [ 135.364669][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.385059][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.447170][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 135.456959][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 135.465267][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 135.473700][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.481837][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 135.489877][ T2572] ---[ end trace d338e12723bf9bcc ]--- [ 135.495333][ T2572] ------------[ cut here ]------------ [ 135.499404][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.501053][ T2572] kernfs: can not remove 'events_poll_msecs', no directory [ 135.516207][ T2572] WARNING: CPU: 1 PID: 2572 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 135.526338][ T2572] Modules linked in: [ 135.530552][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 135.539492][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.550084][ T2572] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 135.556479][ T2572] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 135.672618][ T2572] RSP: 0018:ffffc90000e27a10 EFLAGS: 00010246 [ 135.719396][ T2572] RAX: d3cf089b33a1e300 RBX: 0000000000000003 RCX: 0000000000080000 [ 135.730598][ T2572] RDX: ffffc9000255f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 135.746878][ T2572] RBP: ffffc90000e27a38 R08: ffff8881f7152fff R09: 1ffff1103ee2a5ff [ 135.763285][ T2572] R10: dffffc0000000000 R11: ffffed103ee2a600 R12: 0000000000000000 [ 135.771640][ T2572] R13: ffffffff8674f000 R14: ffffffff853fc4e0 R15: 0000000000000000 [ 135.782417][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 135.791738][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.798430][ T2572] CR2: 00007fe00ff32dac CR3: 000000010fdf7000 CR4: 00000000003506b0 [ 135.807043][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.828514][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.851942][ T2572] Call Trace: [ 135.868729][ T2572] sysfs_remove_files+0xa4/0x100 [ 135.882079][ T2572] del_gendisk+0x254/0xa10 [ 135.891830][ T2572] cleanup_mapped_device+0x16c/0x270 [ 135.902727][ T2572] dm_create+0xb03/0xdd0 [ 135.912282][ T2572] dev_create+0x12e/0x2c0 [ 135.922266][ T2572] ? list_devices+0x570/0x570 [ 135.931590][ T2572] ? __kasan_check_write+0x14/0x20 [ 135.943066][ T2572] ? _copy_from_user+0x95/0xd0 [ 135.953117][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 135.962950][ T2572] ? list_devices+0x570/0x570 [ 135.969501][ T2572] ? dm_poll+0x120/0x120 [ 135.982211][ T2572] ? security_file_ioctl+0x84/0xa0 [ 136.007787][ T2572] ? dm_poll+0x120/0x120 [ 136.017350][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 136.027723][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 136.039044][ T2572] do_syscall_64+0x31/0x40 [ 136.048753][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.062107][ T2572] RIP: 0033:0x7f35983dab19 [ 136.069798][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.096762][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.108642][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 136.116767][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 136.125257][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 136.134499][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.142555][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 136.151128][ T2572] ---[ end trace d338e12723bf9bcd ]--- [ 136.156660][ T2572] ------------[ cut here ]------------ [ 136.162184][ T2572] kernfs: can not remove 'bdi', no directory [ 136.168274][ T2572] WARNING: CPU: 1 PID: 2572 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 136.178150][ T2572] Modules linked in: [ 136.182137][ T2572] CPU: 1 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 136.191539][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.306987][ T2572] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 136.319496][ T2572] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 136.364422][ T2572] RSP: 0018:ffffc90000e27a30 EFLAGS: 00010246 [ 136.493075][ T2572] RAX: d3cf089b33a1e300 RBX: ffffffff853fbdc0 RCX: 0000000000080000 [ 136.510488][ T2572] RDX: ffffc9000255f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 136.523051][ T2572] RBP: ffffc90000e27a58 R08: ffff8881f7152fff R09: 1ffff1103ee2a5ff [ 136.534400][ T2572] R10: dffffc0000000000 R11: ffffed103ee2a600 R12: 0000000000000000 [ 136.545610][ T2572] R13: 1ffff1102507e08f R14: ffffffff853fbdc0 R15: 0000000000000000 [ 136.556750][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 136.569869][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.579319][ T2572] CR2: 0000200000404030 CR3: 000000010fdf7000 CR4: 00000000003506a0 [ 136.592515][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.605682][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.618941][ T2572] Call Trace: [ 136.624456][ T2572] sysfs_remove_link+0x50/0x60 [ 136.632393][ T2572] del_gendisk+0x3f8/0xa10 [ 136.639219][ T2572] cleanup_mapped_device+0x16c/0x270 [ 136.649725][ T2572] dm_create+0xb03/0xdd0 [ 136.657131][ T2572] dev_create+0x12e/0x2c0 [ 136.665677][ T2572] ? list_devices+0x570/0x570 [ 136.672004][ T2572] ? __kasan_check_write+0x14/0x20 [ 136.677202][ T2572] ? _copy_from_user+0x95/0xd0 [ 136.682489][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 136.687122][ T2572] ? list_devices+0x570/0x570 [ 136.692037][ T2572] ? dm_poll+0x120/0x120 [ 136.696556][ T2572] ? security_file_ioctl+0x84/0xa0 [ 136.702310][ T2572] ? dm_poll+0x120/0x120 [ 136.706777][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 136.711674][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 136.716357][ T2572] do_syscall_64+0x31/0x40 [ 136.721072][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.727030][ T2572] RIP: 0033:0x7f35983dab19 [ 136.731749][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.751715][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.767484][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 136.778782][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 136.787117][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 136.795367][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.803942][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 136.814829][ T2572] ---[ end trace d338e12723bf9bce ]--- [ 136.821898][ T2572] general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN [ 136.833630][ T2572] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 136.842066][ T2572] CPU: 0 PID: 2572 Comm: syz.1.608 Tainted: G W syzkaller #0 [ 136.850750][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.860838][ T2572] RIP: 0010:device_del+0xe0/0xe60 [ 136.865884][ T2572] Code: 42 80 3c 30 00 74 08 4c 89 ef e8 5b f4 ef fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6 [ 136.885509][ T2572] RSP: 0018:ffffc90000e27980 EFLAGS: 00010202 [ 136.891618][ T2572] RAX: dffffc0000000000 RBX: ffff8881283f0108 RCX: ffffffff84823af2 [ 136.899618][ T2572] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000e27900 [ 136.907608][ T2572] RBP: ffffc90000e27a78 R08: ffffc90000e27907 R09: 1ffff920001c4f20 [ 136.915602][ T2572] R10: dffffc0000000000 R11: fffff520001c4f21 R12: ffff8881283f0068 [ 136.923586][ T2572] R13: ffff8881283f00d0 R14: 000000000000001a R15: 00000000000000d0 [ 136.931583][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 136.940532][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.947133][ T2572] CR2: 0000000000000000 CR3: 000000010fdf7000 CR4: 00000000003506b0 [ 136.955132][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.963126][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.971112][ T2572] Call Trace: [ 136.974434][ T2572] ? __kasan_check_write+0x14/0x20 [ 136.979579][ T2572] ? _raw_spin_lock_irq+0x95/0xf0 [ 136.984619][ T2572] ? _raw_spin_lock_irqsave+0x130/0x130 [ 136.990208][ T2572] ? kill_device+0xd0/0xd0 [ 136.994648][ T2572] ? __kasan_check_write+0x14/0x20 [ 136.999785][ T2572] ? pm_runtime_set_memalloc_noio+0x20d/0x260 [ 137.005868][ T2572] del_gendisk+0x85d/0xa10 [ 137.010305][ T2572] cleanup_mapped_device+0x16c/0x270 [ 137.015621][ T2572] dm_create+0xb03/0xdd0 [ 137.019887][ T2572] dev_create+0x12e/0x2c0 [ 137.024230][ T2572] ? list_devices+0x570/0x570 [ 137.028927][ T2572] ? __kasan_check_write+0x14/0x20 [ 137.034053][ T2572] ? _copy_from_user+0x95/0xd0 [ 137.038835][ T2572] dm_ctl_ioctl+0x8ee/0xca0 [ 137.043360][ T2572] ? list_devices+0x570/0x570 [ 137.048058][ T2572] ? dm_poll+0x120/0x120 [ 137.052460][ T2572] ? security_file_ioctl+0x84/0xa0 [ 137.057616][ T2572] ? dm_poll+0x120/0x120 [ 137.061879][ T2572] __se_sys_ioctl+0x121/0x1a0 [ 137.066582][ T2572] __x64_sys_ioctl+0x7b/0x90 [ 137.071188][ T2572] do_syscall_64+0x31/0x40 [ 137.076084][ T2572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 137.081992][ T2572] RIP: 0033:0x7f35983dab19 [ 137.086431][ T2572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.106462][ T2572] RSP: 002b:00007f3596e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.114921][ T2572] RAX: ffffffffffffffda RBX: 00007f3598660fa0 RCX: 00007f35983dab19 [ 137.122996][ T2572] RDX: 0000200000000bc0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 137.131385][ T2572] RBP: 00007f3598472af8 R08: 0000000000000000 R09: 0000000000000000 [ 137.139490][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.147482][ T2572] R13: 00007f3598661038 R14: 00007f3598660fa0 R15: 00007ffeb8e96368 [ 137.155891][ T2572] Modules linked in: [ 137.213116][ T2572] ---[ end trace d338e12723bf9bcf ]--- [ 137.218634][ T2572] RIP: 0010:device_del+0xe0/0xe60 [ 137.224551][ T24] audit: type=1400 audit(1793637668.139:383): avc: denied { read } for pid=2119 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.247968][ T2572] Code: 42 80 3c 30 00 74 08 4c 89 ef e8 5b f4 ef fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6 [ 137.267844][ T24] audit: type=1400 audit(1793637668.169:384): avc: denied { open } for pid=2119 comm="syz-executor" path="/49/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.290151][ T2572] RSP: 0018:ffffc90000e27980 EFLAGS: 00010202 [ 137.296251][ T2572] RAX: dffffc0000000000 RBX: ffff8881283f0108 RCX: ffffffff84823af2 [ 137.304310][ T2572] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000e27900 [ 137.312619][ T24] audit: type=1400 audit(1793637668.169:385): avc: denied { getattr } for pid=2119 comm="syz-executor" path="/49/mnt/uprobe_profile" dev="tracefs" ino=12715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 137.338492][ T2572] RBP: ffffc90000e27a78 R08: ffffc90000e27907 R09: 1ffff920001c4f20 [ 137.346739][ T2572] R10: dffffc0000000000 R11: fffff520001c4f21 R12: ffff8881283f0068 [ 137.356332][ T2572] R13: ffff8881283f00d0 R14: 000000000000001a R15: 00000000000000d0 [ 137.364422][ T24] audit: type=1400 audit(1793637668.169:386): avc: denied { write } for pid=2119 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.386273][ T2572] FS: 00007f3596e326c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 137.395496][ T2572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.402352][ T24] audit: type=1400 audit(1793637668.169:387): avc: denied { setattr } for pid=2119 comm="syz-executor" path="/49/mnt/uprobe_profile" dev="tracefs" ino=12715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 137.426587][ T2572] CR2: 00007ffd23537ec0 CR3: 000000010fdf7000 CR4: 00000000003526b0 [ 137.435308][ T2572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.446107][ T2572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.454389][ T2572] Kernel panic - not syncing: Fatal exception [ 137.461082][ T2572] Kernel Offset: disabled [ 137.465424][ T2572] Rebooting in 86400 seconds..