last executing test programs: 4.349444104s ago: executing program 2 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f00000000c0)='hfs\x00', 0x19a447f00d948b6e, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = syz_clone(0x1c2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x808011, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c000000000105000000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000a0101000800074000000000180006800c0003e000000100"/124], 0x7c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/sctp/assocs/file0\x00', 0x400, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000213991d65190b39ed222e2200f395d2d05c0e2dc06d7187102a876a69859206e480d4cb2210a10f42ed8b73ead42a2bd862"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000000000e20000000000c68f3b37e9c0aca01bfc11f9cfc959204704360e62f0d9a9ad9384b0697bd5cea027996e69c4ff7672657c335d4d2308a77244306e431ad3f0e37d5d046766246a32042f6c83a1d893bc691f3d515919858518900d38eda38c748fe3356df00b1414d55d08178758b5c06ce0a1172590098734aaf7ebe547c39635d04561e050c812b2a8df46a40ab6a73d82dacb989e805835c6a91685780855f597718b77398a0af30162329a0d2b31e4e02b7e657f171ebbc36930d6d524ea", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="219382ac3ac5000000000000", @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000003840)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x290, 0x3a8, 0x3a8, 0x290, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "83f0a574725c23587dcfbd695650fe91ad9f7783f34f23315a573f167f755eaff4d665d219fa653cdfd7ee1092b07e243bd3e81b17fa1a6a18d79ae45b76f817515ec14cdf53d785cfe1d638f578cf51801a954830bfb97c4595e7b07b7147a846d1a230f2e1053fd68b5c45f2847c271539bdbd0f149a701a72fc1f87ab788a", 0xff}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e24, 0xf, @empty, 0x1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(r8, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0xa0000000}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa44aaaaaaaaaadccbdd60000000001811fffe8000000000000000000000000000bbfe8000000000000000000000000000bb00030e2200189078484080003fd56ee1e3ecb712902e1600bb5d19"], 0x0) r9 = openat$cgroup_int(r6, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRES16=r3, @ANYRESOCT=r3], 0x27) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)) lseek(r2, 0xa1, 0x0) 3.803528108s ago: executing program 4 (id=125): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1404c080}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ptrace$setregset(0x4205, 0x0, 0x201, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 3.232927212s ago: executing program 2 (id=126): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x1800006, &(0x7f0000000b00)=ANY=[], 0x1, 0x10692, &(0x7f0000000140)="$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") 3.099659985s ago: executing program 1 (id=128): ppoll(0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) (async) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) (async) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2841, 0x0) 3.045070876s ago: executing program 4 (id=129): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.044816266s ago: executing program 1 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000ffffffff0008000000000000851000000600000018000000", @ANYRES32, @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40e40, 0x0) 2.865263511s ago: executing program 4 (id=131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 2.795973762s ago: executing program 4 (id=132): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@resgid}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 2.670239135s ago: executing program 4 (id=134): syz_mount_image$fuse(0x0, &(0x7f0000002300)='./file0\x00', 0x5008a, 0x0, 0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000023, 0x0, 0x7}]}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c756e616d653d6e6f8d5e7ba8166580d0"]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000001c40)={0x2020}, 0x2020) 2.631568526s ago: executing program 3 (id=135): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') lseek(r0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000880)={[{@test_dummy_encryption_v1}, {@errors_remount}, {@nodioread_nolock}, {@orlov}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket(0x1e, 0x802, 0x0) sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000000780)=@un=@abs={0x1e, 0x0, 0x4e24}, 0x80, 0x0}, 0x4042814) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'pim6reg1\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0xc, @ah_ip4_spec={@remote, @empty, 0x1ff, 0x97}, @esp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, 0x984, 0x8, 0xff, 0xb36, 0xfffffffffffffffe}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x100010, r3, 0x51e8e000) 2.47702732s ago: executing program 4 (id=136): writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000380)={0x8000141, 0xfffffffb, 0x20, 0x9, 0x18, "737b0500000047801cf3af00ada40ad7b76000"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xd) epoll_create1(0x80000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000480)={0x10201, 0x240, 0x40, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 2.47581206s ago: executing program 32 (id=136): writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000380)={0x8000141, 0xfffffffb, 0x20, 0x9, 0x18, "737b0500000047801cf3af00ada40ad7b76000"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xd) epoll_create1(0x80000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000480)={0x10201, 0x240, 0x40, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 2.429869431s ago: executing program 3 (id=137): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x1500, &(0x7f0000002ac0)="$eJzs3QnYjtX2MPC19t43L4knybzXXjdPMmySJEOSDEmSJEmmhCRJkpBMmZKQhMxJ5pBMIZnnKXOSHEmShIQk+7veOuc453T+/875zvl//t951++67uvZ69r32vfez+K5h+t9n/ebDoOr1KtasQ4zw78Ef33pDgApANAPALIAQAQAJbOWzJran0Fj93/tIOLf68FpV3oG4kqS+qdtUv+0Teqftkn90zapf9om9U/bpP5pm9RfiLRs2/Rc18iWdrd//fl/yq8v8vz//0Ny/k/bpP7/ac5k+Gf2lvr/J7kUQvjnMqT+aZvUP22T+qdtUv+0Teqftkn9hUjLrvTzZ9mu7Hal//0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEgbzofLDAD8qX2l5yWEEEIIIYQQQoh/n5D+Ss9ACCGEEEIIIYQQ//MQFGgwEEE6SA8pkAEywlWQCa6GzJAFEnANZIVrIRtcB9khB+SEXJAb8kBesEDggCGGfJAfknA9FIAboCAUgsJQBDwUhWJwIxSHm6AE3Awl4RYoBbdCaSgDZaEc3Abl4XaoAHdARbgTKkFlqAJV4S6oBndDdbgHasC9UBPug1pwP9SGB6AOPAh14SGoBw9DfXgEGkBDaASNocn/Vf4L0AVehK7QDbpDD+gJL0Ev6A19oC/0g5ehP7wCA+BVGAiDYDC8BkPgdRgKb8AwGA4j4E0YCaNgNIyBsTAOxsNbMAHehonwDkyCyTAFpsI0mA4z4F2YCbNgNrwHc+B9mAvzYD4sgIXwASyCxbAEPoSl8BEsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yDj2E77ICdsAt2wx7YC5/APvgU9sNncAA+/yfzz/1NfkcEBFSo0KDBdJgOUzAFM2JGzISZMDNmxgQmMCtmxWyYDbNjdsyJOTE35sa8mBcJCRkZ82E+TGISC2ABLIgFsTAWRo8ei2ExLI43YQksgSWxJJbCUlgay2AZLIflsDyWxwpYAStiRayElbAKVsG78C68G6tjdayBNbAm1sRaWAtrY22sg3WwLtbFelgP62N9bIANsBE2wibYBJtiU2yGzbAFtsCW2BJbYStsja2xDbbBttgW22E7bI/tsQN2wI7YCTvhC/gCvogvYjespHpgT+yJvbAX9sG+2Bdfxv74Cr6Cr+JAHISD8TV8DV/HoXgWh+FwHIEjsLwahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/A9nIPv4/s4D+fhAlyIC3ERLsYluASX4jlchstxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKH+PHuAN34C7chXtwD36Cn+Cn+CkOxAN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gCT+IpPI2n8AyewbN4Ds/jebyAF/AiXsRLeCn1P79KZZRR6VQ6laJSVEaVUWVSmVRmlVklVEJlVVlVNpVNZVfZVU6VU+VWuVVelVeRIsUqVvlUPpVUSVVAFVAFVUFVWBVWXnlVTBVTxVVxVUKVUCXVLaqUulWVVmVUc19OlVPlVQtfQd2hKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpe5XtVUP7IMPqtTK1FODsL4ajA1UQ9VINVav46OqqRqKzVRz1UI9robjMGylmvrW6inVRo3GtuoZNQafVe3VOOygnlcdVSfVWb2guqhmvqvqpiZhD9VTTcVeqrfqo/qqmVhZpVasinpVDVSD1GD1mlqAr6uh6g01TA1XI9SbaqQapUarMWqsGqfGq7fUBPW2mqjeUZPUZDVFTVXT1HQ1I/WjVc1Ss9V7ao56X81V89R8tUAtVB+oRWqxWqI+VEvVR2qZWq5WqJVqlVqt1qi1ap1arzaojWpTBGqL2qq2qY/VdrVD7VS71G61R+1Vn6h96lO1X32mDqjP1UH1B3VIfaEOqy/VEfWVOqq+VsfUN+q4+ladUN+pk+qUOq2+V2fUD+qsOqfOqx/VBfWTuqh+VpdUUKBRK6210ZFOp9PrFJ1BZ9RX6Uz6ap1ZZ9EJfY3Oqq/V2fR1OrvOoXPqXDq3zqPzaqtJO8061vl0fp3U1+sC+gZdUBfShXUR7XVRXUzfqIvrm3QJfbMuqW/RpfSturQuo8vqcvo2XV7frivoO3RFfaeupCvrKrqqvktX03fr6voeXUPfq2vq+3Qtfb+urR/QdfSDuq5+SNfTD+v6+hHdQDfUjXRj3UQ/qpvqx3Qz3Vy30I/rlvoJ3Uo/qVvrp3Qb/bRuq5/R7fSzur1+TnfQz+uOupPurH/Wl3TQXXU33V330D31S7qX7q376L66n35Z99ev6AH6VT1QD9KD9Wt6iH5dD9Vv6GF6uB6h39Qj9Sg9Wo/RY/U4PV6/pSfot/VE/Y6epCfrKXqqnqan6z5/HGn2P5D/9t/JH/DL0bfqbfpjvV3v0Dv1Lr1b79F79V69T+/T+/V+fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1cX1Cn9An9Sn9o/5en9E/6LP6nD6nf9QX9AV98Y/vARg0ymhjTGTSmfQmxWQwGc1VJpO52mQ2WUzCXGOymmtNNnOdyW5ymJwml8lt8pi8xhoyzrCJTT6T3yTN9aaAucEUNIVMYVPEeFPUFDM3/sv5vze/JqaJaWqammammWlhWpiWpqVpZVqZ1qa1aWPamLamrWln2pn2pr3pYDqYjqaj6Ww6my6miwkA0N10Nz3NS6aX6W36mL6mn3nZ9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDzAgzwow0I81oM9qMNWPNeDPeTDATzEQz0Uwyk8wUM8VMM9PMDDPDzDQzzWwz28wxc8xcM9fMN/PNQrPQLDKLzBKzxCw1S80ys9wsNyvNSrParDZrzVqz3qw3G81Gs9lsNsvMn35Ac6fZaXab3Wav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+akOWlOm9PmjDljzpqz5rw5by6YC+aiuWgumUupl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5oryRjShyEUdxlC/KHyWj66MC0Q1RwahQVDgqEvmoaFQsujEqHt0UlYhujkpGt0Sloluj0lGZqGxULrotKh/dHlWI7ogqRndGlaLKUZWoanRXVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgaRo2ixlGTf+v4IZzN8ZjvarvZ7raH7Wlfsr1sb9vH9rX97Mu2v33FDrCv2oF2kB1sX7ND7Ot2qH3DDrPD7Qj7ph1pR9nRdowda8fZ8fYtO8G+bSfad+wkO9lOsVPtNDvdzrDv2pl2lp1t37Nz7Pt2rp1n59sFdqH9wC6yi+0S+6Fdaj+yy+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8Vutdvsx3a73WF32l12t91j99pP7D77qd1vP7MH7Of2oP2DPWS/sIftl/aI/coetV/bY/Ybe9x+a0/Y7+xJe8qett/bM/YHe9aes+ftj/aC/cletD/bSzakXtynnt7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoK2WlbJSNslN2ykk5KTflpryUl1IxMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWUo9ad5Gt9PtdAfdQXfSnVSZKlNVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSAGlAjakRNqAk1pabUjJpRC2pBLakltaJW1JpaUxtqQ22pLbWjdtSe2lMH6kAdqSN1ps7UhbpQV+pK3ak79aSe1It6UR/qQ/2oH/Wn/jSABtBAGkiDaTANoSE0lIbSMBpOI+hNGkmjaDSNobE0jsbTeJpAE2giTaRJNImm0BSaRtNoBs2gmTSTZtNsmkNzaC7Npfk0nxbSQlpEi2gJLaGltJSW0TJaQStoFa2iNbSG1tE62kAbaBNtoi20hbbRNtpO22kn7aTdtJv20l7aR/toP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HacTdIJO0kk8TafpDJ2hs3SWztN5ukA/0UX6mS5RoBSXwWV0V7lM7mqX2WVxKS5DNwD4c5zT5XK5XR6X11mX3eX4q5iccwVdIVfYFXHeFXXF3I2/iUv3KOPKunLuNlfe3e4quNLur+Nq7m5X3d3jarh7XVV311/FNd19rpZ72NV2j7g6rqGr6xq7eu5hV9894hq4hq6Ra+xauidcK/eka+2ecm3c07+JF7nFbp1b7za4jW6f+9Sddz+6Y+4bd8H95Lq6bq6fe9n1d6+4Ae5VN9AN+k08wr3pRrpRbrQb48a6cb+Jp7ipbpqb7ma4d91MN+s38UL3gZvjlri5bp6b7xb8EqfOaYn70C11H7llbrlb4Va6VW61W+PW/nmuK91mt8VtdXvdJ2672+F2ul1ut9vzS5y6jv3uM3fAfe6Ouq/dIfeFO+yOuyPuq1/i1PUdd9+6E+47d9Kdcqfd9+6M+8Gdded+WX/q2r93P7tLLjhgZMWaDUecjtNzCmfgjHwVZ+KrOTNn4QRfw1n5Ws7G13F2zsE5ORfn5jycly0TO2aOOR/n5yRfzwX4Bi7IhbgwF2HPRbkY38jF+SYuwTdzSb6FS/GtXJrLcFkux7dxeb6dK/AdXJHv5EpcmatwVb6Lq/HdXJ3v4Rp8L9fk+7gW38+1+QGuww9yXX6I6/HDXJ8f4QbckBtxY27Cj3JTfoybcXNuwY9zS36CW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkl7gX9+Y+3Jf78cvcn1/hAfwqD+RBPJhf4yH8Og/lN3gYD+cR/CaP5FE8msfwWB7H4/ktnsBv80R+hyfxZJ7CU3kaT+cZ/C7P5Fk8m9/jOfw+z+V5PJ8X8EL+gBfxYl7CH/JS/oiX8XJewSt5Fa/mNbyW1/F63sAbeRNv5i28lbfxx7ydd/BO3sW7eQ/v5U94H3/K+/kzPsCf80H+Ax/iL/gwf8lH+Cs+yl/zMf6Gj/O3fIK/45N8ik/z93yGf+CzfI7P8498gX/ii/wzX+LAEGOsYh2bOIrTxenjlDhDnDG+Ks4UXx1njrPEifiaOGt8bZwtvi7OHueIc8a54txxnjhvbGOKXcxxHOeL88fJ+Pq4QHxDXDAuFBeOi8Q+LhoXi2+Mi8c3xSXim+OS8S1xqfjWuHRcJi4bl4tvi8vHt8cV4jviivGdcaW4clwlrhrfFVeL746rx/fENeJ74xLxfXGt+P64dvxAXCd+MK4bPxTXix+O68ePxA3ihnGjuHHcJH40bho/FjeLm8ct4sfjlvETcav4ybh1/FTcJn76d/u7xz3invFL8UtxCPfo+ckFyYXJD5KLkouTS5IfJpcmP0ouSy5PrkiuTK5Krk6uSa5NrkuuT25IbkxuSm5ObkluTYZQNT149Mprb3zk0/n0PsVn8Bn9VT6Tv9pn9ll8wl/js/prfTZ/nc/uc/icPpfP7fP4vN568s6zj30+n98n/fW+gL/BF/SFfGFfxHtf1BfzjX0T38Q39Y/5Zr65b+Ef94/7J/wT/kn/pH/Kt/FP+7b+Gd/OP+vb++f8c/5539F38p39C76Lf9F39d18d9/d9/Q9fS/fy/fxfXw/38/39/39AD/AD/QD/WA/2A/xQ/xQP9QP88P8CD/Cj/Qj/Wg/2o/1Y/14P95P8BP8RD/RT/KT/BQ/xU/z0/wMP8PP9DP9bD/bz/Fz/Fw/18/38/1Cv9Av8ov8Er/EL/VL/TK/zK/wK/wqv8qv8Wv8Or/Ob/Ab/Ca/yW/xW/w2v81v99v9Tr/T7/a7/V6/1+/z+/x+v98f8Af8QX/QH/KH/GH/pT/iv/JH/df+mP/GH/ff+hP+O3/Sn/Kn/ff+jP/Bn/Xn/Hn/o7/gf/IX/c/+kg9+fOKtxITE24mJiXcSkxKTE1MSUxPTEtMTMxLvJmYmZiVmJ95LzEm8n5ibmJeYn1iQWJj4ILEosTixJPFhYmnio8SyxPLEisTKxKrE6kQIebbHIV/IH5Lh+lAg3BAKhkKhcCgSfCgaioUbQ/FwUygRbg4lwy2hVLg1lA5lQtnwSGgQGoZGoXFoEh4NTcNjoVloHlqEx0PL8ERoFZ4MrcNToU14OrQNz4R24dnQPjwXOoTnQ8fQKXQOL4Qu4cXQNXQL3UOP0DO8FHqF3qFP6Bv6hZdD//BKGBBeDQPDoDA4vBaGhNfD0PBGGBaGhxHhzTAyjAqjw5gwNowL48NbYUJ4O0wM74RJYXKYEqaGaWF6mBHeDTPDrDA7vBfmhPfD3DAvzA8LwsLwQVgUFocl4cOwNHwUloXlYUVYGVaF1WFNWBvWhfVhQ9gYNoXNYUvYGraFj8P2sCPsDLvC7rAn7A2fhH3h07A/fBYOhM/DwfCHcCh8EQ6HL8OR8FU4Gr4Ox8I34Xj4NpwI34WT4VQ4Hb4PZ8IP4Ww4F86HH8OF8FO4GH4Ol+R31oQQQggh/iH6d/p7/Bc56o/tngBw9Y5cR/62f1P2X9u90+dumQCAp7p1ePBPW6VK3bt3/+O+yzRE+ecBQOJyfjq4HC+HFvAEtIbmUPzP/Sl/cazeqtMF/u/GB4iStwBc+ovvNUjNzwh/O/5Nf3f9vdWoOf/t+Bqi5DyAgvkv52SAy/Hl8Uv8F+PnaPo742f4YjxAs7/IyQSX48vjF4PH4Glo/Vd7CiGEEEIIIYQQv+qtyrb7vfvb1Pvz3OZyTnq4HP+9+3MhhBBCCCGEEEL87/Jsp85PPtq6dfN20vifaoQsv77V/1vmIw1p/AONK/3JJIQQQgghhPh3u3zRf6VnIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF3/L75O7E/H+r2/NSiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEL8p/o/AQAA//9EzkE1") (async) r0 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x1500, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) (async) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x23, &(0x7f0000000200)={0x36, 0x3ff, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x20006, 0xf, 0x1}}, 0x30) syz_open_pts(0xffffffffffffffff, 0x380c1) (async) r5 = syz_open_pts(0xffffffffffffffff, 0x380c1) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000040)=r2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x5393, &(0x7f0000000100)=0x3) r7 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x42, 0x8) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.133794869s ago: executing program 0 (id=138): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001900)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000540)=0xffffffffffffff1a) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000001840)={[{@nfs_export_off}, {@index_on}, {@verity_off}], [{@uid_gt={'uid>', r2}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7ff, 0x3a, 'd', 0x3a, '\x17', 0x3a, './file1', 0x3a, [0x46, 0x4f, 0x43, 0x43, 0x50]}, 0x2e) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000fbdbdf250100000030000180080003000100000008000100", @ANYRES32=r1, @ANYBLOB="080003000e6996dd3007140002006970366772653000"/33], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x400009, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) fcntl$setstatus(r5, 0x4, 0x76400) lseek(r5, 0x2, 0x4) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0x1, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) socket$inet6(0xa, 0x3, 0x9) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001900)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @remote}}}, {{@in=@initdev}}}, &(0x7f0000000540)=0xffffffffffffff1a) (async) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000001840)={[{@nfs_export_off}, {@index_on}, {@verity_off}], [{@uid_gt={'uid>', r2}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7ff, 0x3a, 'd', 0x3a, '\x17', 0x3a, './file1', 0x3a, [0x46, 0x4f, 0x43, 0x43, 0x50]}, 0x2e) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000fbdbdf250100000030000180080003000100000008000100", @ANYRES32=r1, @ANYBLOB="080003000e6996dd3007140002006970366772653000"/33], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) (async) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x400009, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) (async) fcntl$setstatus(r5, 0x4, 0x76400) (async) lseek(r5, 0x2, 0x4) (async) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0x1, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") (async) 2.133495629s ago: executing program 1 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x800) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x486}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000580)={{0x2000, 0x0, 0xc, 0xf4, 0x3, 0xe4, 0x42, 0x2, 0xa, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x54000, 0xfec00000, 0x8, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x7, 0xab, 0x5, 0x81}, {0x30000, 0x1000, 0x3, 0x5d, 0x4, 0x18, 0x9, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0x80a0000, 0xb000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x4}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xd, 0x1, 0xcf}, {0x26000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xff, 0x70}, {0x58000, 0xb000, 0xe, 0xd, 0x80, 0x46, 0x3, 0x3, 0x2, 0x3, 0x7, 0x8}, {0x50000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x14222c, 0x3, 0x9501, 0x60000, [0x6840000000000002, 0xa, 0x96c, 0x101]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x1, 0x4002) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x100000000000000) 2.045075711s ago: executing program 3 (id=140): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) inotify_rm_watch(r2, r1) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$eJzs3Au0j9XWMPA511oPm6R/klvWXPPhn1wWSZJLQi5JkiRJbgkJSZKQ3HJLQhJyT3IPyS12cr/fck+SI0mSkNyS9Q2d3s95T+d9O+93+j7fOHv+xljjv+Z+njn/a+25x36e5z/G3t91GFy5bpUKtZkZ/iX415fuAJACAP0A4DoAiACgeJbiWS4fz6Cx+7/2JuLP9ci0q70CcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62Wk3SGf/6dlcv3/N3K48Jiv1he+seP/IEX6n7ZJ/9M26X/aJv1P26T/aZv0/99f+f/mmPQ/bZP+C5GWXe3Pn2Vc3XG1f/6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQN58IVBgD+Y3611yWEEEIIIYQQQog/T0h/tVcghBBCCCGEEEKI//sQFGgwEEE6SA8pkAEywjWQCa6FzHAdJOB6yAI3QFa4EbJBdsgBOSEX3AS5wQKBA4YY8kBeSMLNkA9ugfxQAApCIfBQGIrArVAUboNicDsUhzugBNwJJaEUlIYycBeUhbuhHJSHCnAPVIRKUBmqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DevA41IcG0BAaQeP/o/yXoAu8DF2hG3SHHtATXoFe0Bv6QF/oB69Cf3gNBsDrMBAGwWB4A4bAmzAU3oJhMBxGwNswEkbBaBgDY2EcjId3YAK8CxPhPZgEk2EKTIVpMB1mwPswE2bBbPgA5sCHMBfmwXxYAAvhI1gEiyEVPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXvgc9sEXsB++/B/mn/27/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIW5MTcSEjIy5sE8mMQk5sN8mB/zY0EsiB49FsEiWBRvw2JYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2JlrIz34r14H1bDalgdq2MNrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYGltjG2yDbbEttsN22B7bYwfsgB2xE3bCl/AlfBlfxm5YUfXAntgTe2Ev7IN9sS++iv3xNXwNX8eBOAgH4xv4Br6JQ/EMDsPhOAJHYFk1CkfjGGQ1DsfjeJyAE3AiTsRJOBkn41SchtNxBs7AmTgLZ+EHOAc/xA9xHs7DBbgQF+IiXIypmIpL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/FT3I7bcSfuxN24Gz/Dz/Bz/BwH4n7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHF7AC3gRX8j1TZ3dBdYNBHWZUUalU+lUikpRGVVGlUllUplVZpVQCZVFZVHlACCbyqZyqBwql8qlcqvcihQpVrHKo/KkAIDKp/Kp/Cq/KqgKKq+8KqKKqKKqqCqmiqni6g5VQt2pSqpSqpkvo8qosqq5L6fKqwqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqqHVC3VA/vgI+pyZ+qqQVhPDcb6qoFqqBqpN/EJ1UQNxaaqmWqunlLDcRi2VE18a/WMaqNGY1v1nBqDz6v2ahx2UC+qjqqT6qxeUl1UU99VdVOTsIfqqaZiL9Vb9VF91UyspC53rLJ6XQ1Ug9Rg9YZagG+qoeotNUwNVyPU22qkGqVGqzFqrBqnxqt31AT1rpqo3lOT1GQ1RU1V09R0NUO9r2aqWWq2+kDNUR+quWqemq8WqIXqI7VILVap6mO1RH2ilqplarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9U2tV3tUDvVLrVb7VGfqb3qc7VPfaH2qy/VAfUXdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XP6gT6qQ6pX5Up9VP6ow6q86p8+qC+lldVL+oSyoo0KiV1troSKfT6XWKzqAz6mt0Jn2tzqyv0wl9vc6ib9BZ9Y06m86uc+icOpe+SefWVpN2mnWs8+i8Oqlv1vn0LTq/LqAL6kLa68K6iL5VF9W36WL6dl1c36FL6Dt1SV1Kl9Zl9F26rL5bl9PldQV9j66oK+nKuoq+V1fV9+lq+n5dXT+ga+gHdU39kK6lH9a19SO6jn5U19WP6Xr6cV1fN9ANdSPdWD+hm+gndVPdTDfXT+kW+mndUrfSrfUzuo1+VrfVz+l2+nndXr+gO+gXdUfdSXfWv+hLOuiuupvurnvonvoV3Uv31n10X91Pv6r769f0AP26HqgH6cH6DT1Ev6mH6rf0MD1cj9Bv65F6lB6tx+ixepwer9/RE/S7eqJ+T0/Sk/UUPVVP09N1n98qzf67/B6/XXX/Nv/df5A/4Nd336K36k/1Nr1d79A79S69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf00YAA+pg+ro/rE/qkPq9/1Kf1T/qMPqvP6vP6gr6gL/72PQCDRhltjIlMOpPepJgMJqO5xmQy15rM5jqTMNebLOYGk9XcaLKZ7CaHyWlymZtMbmMNGWfYxCaPyWuS5maTz9xi8psCpqApZLwpbIqYW//l/D9aX2PT2DQxTUxT09Q0N81NC9PCtDQtTWvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQ2nU0X08V0NV1Nd9Pd9DSvmF6mt+lj+pp+5lXT3/Q3A8wAM9AMNIPNYDPEDDFDzVAzzAwzI8wIM9KMNKPNaDPWjDXjzXgzwUwwE81EM8lMMlPMFDPNTDMzzAwz08w0s81sM8fMMXPNXDPfzDcLzUKzyCwyqSbVLDFLzFKzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyS81Ws9VsM9vMDrPD7DK7zB6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXOsx3Fz3JwwJ8wpc8qcNqfNGXPGnDPnzAVzwVw0F80lc+nybV+kIhWZyETponRRSpQSZYwyRpmiTFHmKHOUiBJRlihLlDW6McoWZY9yRDmjXNFNUe7IRhS5iKM4yhPljZLRzVG+6JYof1QgKhgVinxUOCoS3RoVjW6LikW3R8WjO6IS0Z1RyahUVDoqE90VlY3ujspF5aMK0T1RxahSVDmqEt0bVY3ui6pF90fVoweiGtGDUc3ooahW9HBUO3okqhM9GtWNHovqRY9H9aMGUcOoUdT4T60fwpnsT/qutpvtbnvYnvYV28v2tn1sX9vPvmr729fsAPu6HWgH2cH2DTvEvmmH2rfsMDvcjrBv25F2lB1tx9ixdpwdb9+xE+y7dqJ9z06yk+0UO9VOs9PtDPu+nWln2dn2AzvHfmjn2nl2vl1gF9qP7CK72Kbaj+0S+4ldapfZ5XaFXWlXnb8ewK616+x6u8FutJvsZrvFbrWf2m12u91hd9pddrfdYz+ze+3ndp/9wu63X9oD9i/2oP3KHrJf28P2G3vEfmuP2u/sMfu9PW5/sCfsSXvK/mhP25/sGXvWnrPn7QX7s71of7GXbLh8c3/58k6GDKWjdJRCKZSRMlImykSZKTMlKEFZKAtlpayUjbJRDspBuSgX5abcdBkTUx7KQ0lKUj7KR/kpPxWkguTJUxEqQkWpKBWjYlScilMJKkElqSSVptJ0F91Fd9PdVJ7K0z10D1WiSlSFqlBVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlJjakxNqAk1pabUnJpTC2pBLakltabW1IbaUFtqS+2oHbWn9tSBOlBH6kidqTN1oS7UlbpSd+pOPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jIbTCHqbRtIoGk1jaCyNo/E0nibQBJpIE2kSTaIpNIWm0TSaQTNoJs2k2TSb5tAcmktzaT7Np4W0kBbRIkqlVFpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2jC/QzXaRf6BIFSnEKMrprXCZ3rcvsrnMpLoP72ziHy+lyuZtcbmddNpf9P8XknMvvCriCrpDzrrAr4m79XVzSlXKlXRl3lyvr7nblfhdXdfe5au5+V9094Kq4e3+L0/8a13APupruMVfLPe5quwaujmvk6rrHXD33uKvvGriGrpFr4Z52LV0r19o949q4Z38XL3KL3Vq3zq13G9xe97k75867o+47d8H97Lq6bq6fe9X1d6+5Ae51N9AN+l08wr3tRrpRbrQb48a6cb+Lp7ipbpqb7ma4991MN+t38UL3kZvjUt1cN8/Ndwt+jS+vKdV97Ja4T9xSt8wtdyvcSrfKrXZr/vdaV7hNbrPb4va4z9w2t93tcDvdLrf71/jyPva5L9x+96U74r51B91X7pA75g67b36NL+/vmPveHXc/uBPupDvlfnSn3U/ujDv76/4v7/1H94u75IIDRlas2XDE6Tg9p3AGzsjXcCa+ljPzdZzg6zkL38BZ+UbOxtk5B+fkXHwT52bLxI6ZY87DeTnJN3M+voXzcwEuyIXYc2EuwrdyUb6Ni/HtXJzv4BJ8J5fkUlyay/BdXJbv5nJcnivwPVyRK3FlrsL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOvx41yfG3BDbsSN+Qluwk9yU27GzfkpbsFPc0tuxa35GW7Dz3Jbfo7b8fPcnl/gDvwid+RO3Jlf4i78Mnflbtyde3BPfoV7cW/uw325H7/K/fk1HsCv80AexIP5DR7Cb/JQfouH8XAewW/zSB7Fo3kMj+VxPJ7f4bMLW+W4fK83iSfzFJ7K03g6z+D3eSbP4tn8Ac/hD3kuz+P5vIAX8ke8iBdzKn/MS/gTXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/yNt7OO3gn7+LdvIc/4738Oe/jL3g/f8kH+C98kL/iQ/w1H+Zv+Ah/y0f5Oz7G3/Nx/oFP8Ek+xT/yaf6Jz/BZPsfn+QL/zBf5F77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxTfFuWMbU+xijuM4T5w3TsY3x/niW+L8cYG4YFwo9nHhuEh8a1w0vi0uFt8eF4/viEvEd8Yl41LxYw+Uie+Ky8Z3x+Xi8nGF+J64YlwprhxXie+Nq8b3xdXi++Pq8QNxsfjBuGb8UFwrfjiuHT8S14kfjevGj8X14sfj+nGDuGHcKG4cPxE3iZ+Mm8bN4ubxU3GL+Om4Zdwqbh0/E7eJn/3D493jHnHP+JX4lTiE+/X85ILkwuRHyUXJxcnU5MfJJclPkkuTy5LLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSIVRJDx698tobH/l0Pr1P8Rl8Rn+Nz+Sv9Zn9dT7hr/dZ/A0+q7/RZ/PZfQ6f0+fyN/nc3nryzrOPfR6f1yf9zT6fv8Xn9wV8QV/Ie1/YF/GNfGPf2DfxT/qmvplv7p/yT/mn/dO+lW/ln/Ft/LO+rX/Ot/PP+/b+Bf+Cf9F39J18Z/+S7+Jf9l19N9/dd/c9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz8s/xc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+1P+y/8Uf8t/6o/84f89/74/4Hf8Kf9Kf8j/60/8mf8Wf9OX/eX/A/+4v+F3/JBz8+8U5iQuLdxMTEe4lJicmJKYmpiWmJ6YkZifcTMxOzErMTHyTmJD5MzE3MS8xPLEgsTHyUWJRYnEhNfJxYkvgksTSxLLE8sSKxMrEqEcJN2+KQJ+QNyXBzyBduCflDgVAwFAo+FA5Fwq2haLgtFAu3h+LhjlAi3BlKhlKhdHg81A8NQsPQKDQOT4Qm4cnQNDQLzcNToUV4OrQMrULr8ExoE54NbcNzoV14PrQPL4QO4cXQMXQKncNLoUt4OXQN3UL30CP0DK+EXqF36BP6hn7h1dA/vBYGhNfDwDAoDA5vhCHhzTA0vBWGheFhRHg7jAyjwugwJowN48L48E6YEN4NE8N7YVKYHKaEqWFamB5mhPfDzDArzA4fhDnhwzA3zAvzw4KwMHwUFoXFITV8HJaET8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBp2Ba2hx1hZ9gVdoc94bOwN3we9oUvwv7wZTgQ/hIOhq/CofB1OBy+CUfCt+Fo+C4cC9+H4+GHcCKcDKfCj+F0+CmcCWfDuXA+XAg/h4vhl3BJ/mZNCCGEEOKfov/geI9/8DX127isJwBcuz3n4b+vuTHbX+e9Va4WCQB4pluHR/5jVKzYvXv3385dqiHKOw8AElfy08GVeBk0//W1GRT9h+vrrTpd4D+on7wDIOOVyr/KCFfqPw2toRnc9l/Uf+KpEYtKxOey/Df15wHkz3slJwNcia/UL/Zf1M/e5A/Wn+Gr8QBN/yYnE1yJr9QvAk/Cs9D6P50phBBCCCGEEEL8VW9Vut0fPT9ffj7PZa7kpIcr8ZXnz3/8fC6EEEIIIYQQQoir7/lOnVs90bp1s3b/5GSbBvinT04zk3L/fyxDJjL50yZX+zeTEEIIIYQQ4s925ab/aq9ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIu/5f/Duxq71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4mr7XwEAAP//7d019A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14000, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x14, 0x42, 0x201, 0x0, 0x25dfdbff, {0xe, 0x0, 0x300}}, 0x14}}, 0x40804) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) 1.690842399s ago: executing program 0 (id=141): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1404c080}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ptrace$setregset(0x4205, 0x0, 0x201, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x50010) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 1.528058343s ago: executing program 0 (id=142): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01051c001000140006004500001c0000000040119078ac14001400017e05178d000890780000"], 0x26) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r3, 0x40104d01, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, 0x0, 0x0, 0xd33) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') readv(r6, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) sendfile(r4, r4, 0x0, 0x2) ioctl$TIOCSETD(r6, 0x5423, 0x0) r7 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r7, 0x400455c8, &(0x7f0000000008)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x6020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1.456844865s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettaction={0x98, 0x32, 0x300, 0x70bd2a, 0x25dfcbfc, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe6e}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wake_lock', 0xc2481, 0x37) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x8, 0x5, 0x40000000, 0xf76}}, 0x118) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000540)='./bus\x00', 0x8810, &(0x7f0000000200), 0x1, 0x520, &(0x7f0000001440)="$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") r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x42, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xff, 0x8, 0x5, 0xa734, 0xfffffff8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f00000005c0)='GPL\x00', 0x1000, 0xb2, &(0x7f0000000600)=""/178, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xb, 0x5, 0xfffffff9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x1, 0x0, 0x8}, {0x5, 0x2, 0x4, 0x9}, {0x2, 0x4, 0xb, 0x6}, {0x1, 0x0, 0x6, 0x2}, {0x4, 0x2, 0x3, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, 0x0, 0x25, 0x4, @void}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0xa) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettaction={0x98, 0x32, 0x300, 0x70bd2a, 0x25dfcbfc, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe6e}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wake_lock', 0xc2481, 0x37) (async) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x8, 0x5, 0x40000000, 0xf76}}, 0x118) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000540)='./bus\x00', 0x8810, &(0x7f0000000200), 0x1, 0x520, &(0x7f0000001440)="$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") (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x42, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xff, 0x8, 0x5, 0xa734, 0xfffffff8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f00000005c0)='GPL\x00', 0x1000, 0xb2, &(0x7f0000000600)=""/178, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xb, 0x5, 0xfffffff9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x1, 0x0, 0x8}, {0x5, 0x2, 0x4, 0x9}, {0x2, 0x4, 0xb, 0x6}, {0x1, 0x0, 0x6, 0x2}, {0x4, 0x2, 0x3, 0x3}], 0x10, 0x4}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, 0x0, 0x25, 0x4, @void}, 0x10) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") (async) 1.456655105s ago: executing program 0 (id=144): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/87, 0x57}], 0x1, 0x110, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0x1703, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0xfff1, 0xffe0}, {0x0, 0xf}}}, 0x24}}, 0x44) close(r1) 1.456389655s ago: executing program 2 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000000, &(0x7f0000004640)=ANY=[@ANYBLOB='tots,allow_utime=00000000000000000000020,usefree,gid=', @ANYRESHEX, @ANYBLOB="2c7549643dbccd123ccf2561f8765a58f465f898861f9026411f518ad196e06415e130d4354a40c14775897840e5c3656f42d0dc4a4d96cbfca3596e9e9c481d943284c080fb67b1f4ecf3bd3af1b9c0b6c597addadf6c8e155783ab87f7ce27230f5da26c9f92d3b42c2b3ef4f82ce0231fbfa24e0d9028b6993725de67e1d94e90f414f5ae185d86de3025f8e0601f7d2f31ada601b137b8a33be090b5af44241ed4952a9444e1ed25050803c6e17206a93d4670d6ac9cdf9ef19fa54b61119db45c6842445ed46eae4a63470cbf6d60a85da309f231c4bf1765aafc1b3d55e6a4ac08f8ba41d461d66b59b78125c771e7819db412f9ec86", @ANYBLOB="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", @ANYRES32], 0x1, 0x249, &(0x7f0000000500)="$eJzs3cFqE0EYB/Avbdpue7Fn8bDgpaeivkGQCOKCENmDnlyoXloRUpDVUx6jz9BH8jFy6m3F7mJqGjzItpt0fz8I85E/A99cMjnM7H588uX05Ov55+rnRSRJGsOIWVxFHMZWbEdt0Ixb1/Vu3DQLAGDTTCbFqOseaNHg1jf7EVHsRMTerSi/vKeuAAAAAAAAAAAAaJnz/wDQP87/P3zT6ag4aP6//c35fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7V1X1qPrHp+v+AID22f8BoH/s/wDQP/Z/AOifd+8/vBll2XiSpknEfFbmZV6Pdf7qdTZ+ll47XMyal2W+09TZ+Hmdp8v5QTP/xcp8N46e1vnv7OXbbCnfi5O7XjwAAAAAAAAAAAAAAAAAAACsieP0jxv3+wcRsV3nx6vyebni+QBL9/eH8Xh4b8sAAAAAAAAAAAAAAAAAAACAjXb+/cdpcXb2abpxxeXRxbc1aONBFvvxH7OSWI/mFa0UXf8yAQAAAAAAAAAAAAAAAABA/ywu/XbdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0Z/H+/7srul4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A+/AgAA//+BxY58") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x58000, 0xdfd9, 0xff, 0x80000000, 0x0, [{0x9a, 0xd5, 0x4, '\x00', 0x7}, {0x3, 0x9, 0x3, '\x00', 0xc}, {0x16, 0x0, 0x6, '\x00', 0x3}, {0x7, 0x4, 0x5, '\x00', 0x1}, {0x87, 0xb, 0x5, '\x00', 0xfe}, {0x3, 0x8, 0x0, '\x00', 0x6}, {0x80, 0x8e, 0xf8, '\x00', 0xb5}, {0xff, 0x5, 0x1, '\x00', 0x40}, {0x0, 0x4, 0x0, '\x00', 0x8}, {0x0, 0x2, 0x3, '\x00', 0x4c}, {0x1, 0x4, 0xff, '\x00', 0x6}, {0x6, 0x0, 0x0, '\x00', 0xe7}, {0x80, 0x1, 0x4, '\x00', 0x3c}, {0x80, 0x40, 0x7, '\x00', 0x1}, {0x9, 0x3f, 0x3, '\x00', 0x8}, {0x82, 0x4, 0x9, '\x00', 0x3}, {0x0, 0x9, 0xd9, '\x00', 0xcf}, {0x2, 0x1, 0x9d, '\x00', 0x2}, {0x6b, 0x7, 0x6, '\x00', 0xf}, {0x9, 0x6, 0x8, '\x00', 0xae}, {0xfb, 0x5, 0x1, '\x00', 0x7}, {0x8, 0x4, 0x8, '\x00', 0x1}, {0x8d, 0x1, 0x4}, {0x7, 0xf9, 0x18, '\x00', 0xff}]}}) r4 = epoll_create1(0x80000) epoll_pwait(r4, 0x0, 0x0, 0xffffeed7, 0x0, 0x0) close(0x3) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r5, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000980)={{0x0, 0x70000, 0x10, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x18, 0x2}, {0xfec00000, 0xd5d25000, 0xe, 0x2, 0x5, 0x8, 0x0, 0x1, 0x6, 0x8, 0x5, 0xff}, {0x2, 0x0, 0xc, 0x7, 0x1, 0x2, 0x1, 0x3, 0x8, 0x60, 0x7f, 0x6}, {0x25000, 0x1, 0xe, 0x6, 0x7, 0x0, 0x25, 0x7, 0x9, 0xb5, 0x9, 0xa5}, {0xe000, 0x25000, 0xa, 0x5, 0x67, 0x5, 0x9, 0x2, 0x5, 0xfd, 0x66, 0xa}, {0xffffffff, 0x8000000, 0xc, 0x8, 0x5, 0x4, 0x4, 0x5, 0x8, 0x1, 0x4, 0x7}, {0x50000, 0x30000, 0x8, 0x0, 0x9, 0x8, 0x4, 0x81, 0x7, 0x7f, 0x7, 0xf}, {0xdddd1000, 0x26000, 0x9, 0x7, 0x1, 0x72, 0x81, 0x8, 0xc, 0x0, 0x2, 0x8}, {0x40000, 0xa}, {0x70000, 0x7ff}, 0x10, 0x0, 0x26000, 0x28, 0xb, 0x0, 0x260000, [0x6, 0x8, 0x8001, 0x100]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.182223811s ago: executing program 0 (id=147): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket(0x10, 0x3, 0xfffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0x1, 0x2a4, &(0x7f0000000500)="$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") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000140)='./file3\x00') truncate(&(0x7f0000000040)='./file3\x00', 0x2328) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0x8001}}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000140)='./file2\x00') setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000e00)={0x80000000, {{0x2, 0x4e21, @private=0xa010100}}, 0x1, 0x8, [{{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0xfff9, @loopback}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}]}, 0x490) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setuid(0xee01) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) mlockall(0x7) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x401, 0xfffffffe, 0x0, 0x2, 0x4, "d14aa8ffcc93ec5bb6e3fd448a35c33ab9766a"}) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) r3 = gettid() prlimit64(r3, 0xe, 0x0, 0x0) link(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x5309, 0x0) 1.158761752s ago: executing program 3 (id=148): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000240)={[{@test_dummy_encryption}, {@errors_continue}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xc, 0x5d8, &(0x7f0000000c00)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x4080000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0xa1ff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.024054995s ago: executing program 5 (id=146): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = inotify_init() r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000580)='./bus\x00', 0x2000800) inotify_rm_watch(r3, r4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)={[{@numtail}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_winnt}, {@utf8}, {@fat=@flush}, {@uni_xlate}, {@fat=@check_strict}, {@nonumtail}, {@fat=@flush}]}, 0x1, 0x229, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x18103, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {0x0, 0x0, 0x7}, {0x7a04}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 994.387176ms ago: executing program 1 (id=149): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e66732c646f733178666c6f7070792c756d61736b3d30313737373737373737373736303030303030303030302c756e695f786c6174653d302c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365743d63703836392c73686f72746e616d653d6d697865642c636f6465706167653d3835372c696f636861727365743d63703835302c696f636861727365743d69736f383835392d362c71756965742c636865636b3d7374726963742c00da1927b05b94a985908e5ef7811ae81f4cce15f72af9d0ce9965ee75231986f20019fe77af7eb1b96f3654120322d8a2bf5f41f9b715ac50e9693d9a1c2d39cf2fa0d0ab489e2044622795381d622533"], 0x1, 0x38c, &(0x7f0000000380)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0xbc85acc4692e54d0, 0x39, 0x30, 0x30, 0x30, 0x2e, 0x64, 0x38, 0x30, 0x30, 0x4, 0x30, 0x30, 0x34, 0x34]}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000640)) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x26004, &(0x7f0000000140)='%,\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c000180080001"], 0x68}}, 0xa040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 623.694795ms ago: executing program 3 (id=150): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa001eae42cf003c00000000000690780a210104ac1414aa4404360107100990ec742f779f8fcaa6a306fc7800000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000100)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000640)={{r4}, "8f77facbb287831e20a6cc16b03491578b2363e5618f353149564fcc7ce497b12b7fdc4dc2cf76e62251ef3daed826eebe75f485c3a4b2d9379bc5718aa8835fc318ed1fff26f6d9b5486841c301f190835afe27880191785a56868d3882734e303202782d250047eef8a5ac83b50edd64a7abc099295b9a5c547a5834d2bbde80db318a0f34c945a84ff18d5f96f4638300fa9485d7212a0fbcf481df22ef2293bd7b2448840244f9b8e95adf4164ccad46bdda0f549894d006a6f9d17a60a319aa4350c858382c46e8824713c104c04139e6ba82bf74deb8ed227f78f09b00c5b4e1ffd85a4961b7d070ca50a17f42ec8520f22a5769148bb76548d2849f35b6160b4fa5051731f08be28bb7475822772c0a0ec20c6e6e81d16b84b69dbddbe467580ebd121f8e940c8f1f23681e18493d49d713ee462c51f17b1f32aca25ca6f167cbc40a9f8c577cac767923575bc0ed7a54a13eee920394731fcd0215fe413666f43be0811879fc0b2f5b40c5a969ad29f78808bb9306edace1aebd437631e06f9c4997cb5ae01476b49f61702dfbddc4ce1a95a6a5b00c151d396e0636dc6e754a6b4544c8e8987a3e32f101da3acad625d0843b158f5ce29f251c1f46112fb821d9d0683ff1094a6996bc1db445594e5a1e0d6a9811b72bb72d3ae5b9aebd84b92f50e1d6c22e1a6adbd94829cf3f6d82b2c2b7705154d11bfeb3991e06ed521470ce7ea814b196c99d42c7bc569d9df5019be1c9da2f4f5fcafdb8cea8d23fecb1773083abd2d7aa3eef10b46c859cac197c06d0eaf51bcd5cc9c7b0e835f95b868a9efa6aa277e4d8db18db210bceea6699717f593256670c0e90e6d2bbb82ddb245c0f38d0aa23535e5aa122a51cc8837111ca6ec9c88713f3f2f12846fbecc6feefdde5f52a5bbad4ac02ec26663240fc7002f5a585005c23c03446e8fcc3f5116e5bee194ed81f2afe8a90da95fe4bfcbd9f1e6f25b2c1a53f310c3d43034bd1cc290d3509665433fa83eebcef514a346bc4946c627f3c529b9e8f76e35d8ee75212e702458a4d229e69b9a8510990507bf093b6aff98dcafcdce74b64b606b506b1293bafb15c637f4765c4c7626909634eaebbab6744fde6e0679aee664d3ac727b25d766220cfbefa088e8cc2ab2556e971cd52509bdaefd5684d84750762ddbea15ac06c6fdb0bb435092824b2f09e2ab2cfeb49697711cff12c5a73ef7dca620a3bbe0daf64310812ddca7b394a93dee1a35561c0113a3e097ab4d9dba2ffa5d7fde8ecf0320b3b2e721d0eda0d2b40ce61155d075c3152f354f12a3de088c87fa21cfe24b47e8121c03c9d01e3a372ef61381bdb342940c1f7cfd1decc14379b299e81f2864ea9de3534cb0c0664d216b917b72398aa2b645d5939e9168f4bd80a2102e1ac80977b5345fef2348d031efc207ef854587ad82ef3bc4fd51963890df4e1eb8ea436a7bd71343a41ca960d0cdad4ce7ca990761de5a132d1485458f925412462b12b3ab5f40c74b7d3d9dede14a49d05886db88d47bc138cfc18178b382e29e404bf15d6cf3737bed32f127376bf1f09f912a1881e98f23098b3db4899898c3033676d8f215c0ed047a5925a9b880b6733d9da52c97bf36ace3eb1b84e9350d0c5a6c3a527cd55e273e99bf2cb44b5b8e3f47127cda498790795e34645ed392038525dc23e57c3af60e2fad50a280cb59b503cdaed18c25ef3dc4299858c7a35d54be5ddc05242f097830064b1b274e57877efd921fbcafbe44ac74114d18ccf9a9652cb909a35591885f05d0b7d25a1e0c67f77173a0f61907c1c6cd540a8f7dfe9556d2d3fb90c7437d2afbfb5862abfb174eac1bc06066ad8cb17722f08c800984d666f30d59d95dcc1ba796194bf0041a11d1283f4c7c9bbdc236862c73c6f41150997d80d8e7d90cec685c5f825c0eb0a798cd6ec3e6ffc6bc124d2229f505fd669ea88a2557f476f86b0de8672119b015bf66f97d6f7f90209bdbb57ca623c68671574a149533f0b0309e96e40a62ef3481b2e3033a015445b5f3b20c06c19fe9a4c7f9437a3b965ce90ae654bf0297fb8362ed48e126b1db9e2b98d3dbdae2e07552762553cd47f97fb469db473dec699b69cf542966e81e850a1e58021a6e90ce7fc08f53bb3abdc9f1c2ebd228eeb44f5cd7abe2197270c5c3032a3220286bc15181eb3d37fde5588b174d137a0e0243f0b0bce4310607130b23cd5d39ee6a9b5cdc36bd88192e2ce96c7b2f464f5a69f584665e86ee7e2bc5a0d14577b94e71c05b882cae8b8fda261b61fb7477009c6e6ad26f1069dc3a870549d5c67a87caec618b7d47d084696f24ecc30c67cbc0a1d59eaaad84194c8d440389d4c50f6686a266bafd6d817ae5ac1df371ac9af2328009d616acb443132ce7200bb04c37f53ed0363b388ba1b7f451ad20ea21d333eb02deb7f02fe571cdf98b25db9a01545ff1c33a5c5b941ee21c0179801f78249913094ee8dce2b4c17635b3784ed670b7e692b31614d2d0659c87493ceb6b180750f8b1ef9f0cad93d660f8050299bb97ddaa01c6d313569e5cef45fdc74d5d777118f161963e103e74a1d1d7da17781fca35143751223a498b44cc37708a47fc9a7b5a0c3a7b45a656249462f8640d5b15fead9ccf360e2fceedbd6f3ab212c6748fee7558e3d4b5995090cb59d487ff2225dc4b55d792f9b144fd0526a38b4cc828fa0947b769eba4e647d2debece0baefc76b92bbf65d9441793f6a637a5c31f0268bfa4179759630214d24608731b67e2d3031500a2a578f5d0b34909a6c915d00ce74ac8c3d1e9579a9778da5d59330745b05b2dcde8ff134b4b9af10ad1bf71636ae827499b883fc7fff166c2392e470a0f196b8998dbd924e7fa01b973f1f7e6f8dc0894dc6c6e2732d1a3645b819c9f0ed899f2f242d908e39865870489045bed54febc2a7a37c2366329b382db4e50fae14aa7fb85b29e3b6333d6cc39212d32bc6b30924b95b36cf5f04ad75045b607c62c3e21788f0348a2553bb93d3f712e6282392851ff0629308c440df3bc8dc3ddd3fb21d9135ea31f4a9544d3632be35e510b5046fb236790738fb1fa404228263113d51afb35a23cc443346a35daf4e4f150372ebbd0e27866932defcd9de899da230954d789256ea473557a884cbf4dac15ec8b4f60687e257b22365da09150b9fdb094e5cf66582aaffc03d08b6efce871d172c3d84ab21193718cbcdee4d5cdd3678ef9dc62f233e6dc1f44f3be422c8860b8d799612fff3089ba2d20629a83fce6899d484906159e773a498cbef45a67ec8d78b492f4ecb578c7c350b77173d0c83be3c7d1ae97c2c68c1a272ddda60c1e21392aed11d3fbcd6efc3732059cc0dd1994d29ed80e07abd00235451473b01492708415e26dfd19533f064431b9109607a7fcdd668e03b516e51e1401ee027fc3aaeb38ba876a5f79f79a8d1598aa86a51322a3e1e8701a2d444c7c936bd76a09af5e3e064a1f592307d29a2ae3112f24dc2b0ba49b2d07bdde42e6dc6e8fcc69e5a2d309e6a3957b56d3a286d095c7217844970bf972334b3056f848ba9592a6dcc89e2526365ee87a99a71e52b1c5e906ca7e8257e4b273f56c82fc7d274679a3cc126b654f5ebef25818bee4d20156999ad27ac6b84659b7047b3b6e55e64e1424c113536ec17e7ff9e7dcc243570fc8b44f83ffce74ea2b2e38debb0f590803d3b94870d0e11d96193099673ed7e7562124eecb57edb545f5134aaa793d4b40c7b4424c6989486f011def076602ed9b541c8b6962861dbf1c6b42edd38addd9de60072a10def377e00f6ea9e9882261d65e7c9153a370a73a56e8462af62c588018943cbfc05fe34c1298d19d5ff90cf8009341f34c989426352c541b731e3af56b97f89920c43ba210bac78058dfb888c21d9f3b86f8a74a22039230ecc244dfe51a8bbb6c839d588d295c9fa09dec8f0562685a9094b36f7ea87e99d081c9f942e51585d47001ddf65d2f767c2df2d93ac6decab9e70ba195b4d4c15d40c6f21907f5e8fea40a485525292efadc0d7a8cfbc34f62a209eee6c05e93b62ad813765127615b21c9100406b2129e52e466c5ed3f4cf03611445b6d11c7f7bf70c741242f55020ae5b89f974780f2ca8389ddc9d0b393c2c51e057856f3f37b923e590940e23a496e668def23b61f7e95bb8cf7c9f09cf92aa5bda57ac81ac15d4ee832686eb29fb7d94fe3b923448afef75826abd88fd29538509658e62fc07d12ea6e905b568baee867ee4cea231b0b186bf9abbdb015d24fb40ecd4753f3caf1435987feb58e93245fcaae18d60fe4e8c1cd8a95e8a0d009fbf900c6995ffc1a854f71c18da8675d8a61b99dcebcbcd5adde122d33a2b2f8aa64dcebd051c0d5d3217a743610baae38765aabf2c5955e0e127a29343efb02811fbacbc5c794ab9fa3221237ed3ba0fd4982148cccf55695de35d9e5409e4c0c813df88c422f06d23b2c9e0be28e2a03403f232e915a533207ec65bec91f50f40dfd2dcf06ff54ad2128a23213ccbcfac7bbbdf3bc3fe1c248d7b5cc6577a74548fe8cbe13524ef3fdd8bb0e23025b3f14e452af60e2823db38a56140894cb23ea5ce66e8552a339a4902510eed3b32767fc5bc3cb2499ae43d1167905981a2b55c1c7b80cf97b2f960a7ab127f5d1be6de85579b5da196dd4ad2b7f5cb8fa1ca5e5a4452e800d8cfe7d5af5cbfcf2a2cd8650bfa657fcbdc732ce5a21ce9c79ee7d2cbbf9a2186d966732e17f54c3b371f525cb98ea82f3725d017cdd5aeca1caa7476e37a57a6899cdd6bcc197883bedaf6b69a2569a0df80dc2a6fb4cba597be3529646b6383bab541a59f72e94993c07aa168f1b59cdb0f5e675078413eed8018c63e593635b27f0db09c91174762d2ce809cc817c5060708b443bf2b38d496b61d8dbcfa632e9ba22d785758bbdf75b8cdf928a283c334ad8e11f776dc850ecec02202823a65d189c6109c134626b6b4fb0f21f206d1a5823f7e60cd92b7e5bffc765f97d92ef261b6fd77c25f94f0bd1465db87672e986a763dbdda3772925f316c704c25bd6336fcb3735f8edc5c92a3f3415e82428d70d2d9af45d88fbb3b6212cc9326b4e22894a090a367ab6d8a047c7121e1209442758c3cf08d270c94929869a2ddc7b7102901001baa75fe37d4743206737f33fa6878ccb83713ca438cb55ccdbe98fb98b6b0e48d71c0319a21f432c64065dd897bd0cefd8f97617d80bd754fe8b48253bf73fb5bc8a4973f451f943a175d551251a04cba28430f8f2bfae78212f8272a8788fecfffd0f5de82ece22657478c39f6365c1820cebffe7defea95c5358c146bb6f497aadf7740b7d6c836a3b82c2d765805ab5326f992a56a056bc5195cc8a47c492f7a0d72c5fac0747bbc66a94f280e78ec16ee7cbc9f4989cbc744ba484da76370cc86b7bd553f9494285d63c5778500259d33abc27bf81e75f9cc45de7fc014e1bc58557877155b667764c649b9ee213358c4c8e90ad313231a41c83f54f4e957d66bad6330f03aff7f28996e06f490a2e509d04289bd740bd55b54e3562848f7e51079d53df13427aa31c5e13bd39aac2c5893fc5abc16b89fa7d90ba0701d0935aeeabe370e66a4860e859a219522c67872180e23c0773bc3b43bc1df6a18d078033ac52a5064876292d452993b53a367be061f43ee5066e00d8831d86820a6abe14860666ea58670d594f365e4f832842bf83d7f100cfee923c6ddc9076f4d0d"}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r9, 0x25, 0x0, @val=@tcx}, 0x1c) 548.882707ms ago: executing program 2 (id=151): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0) (async) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x0, 0x1, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'U+', 0xad}, 0x16, 0x5) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi={0x9, 0x2, 0x1c95, 0x2bd5}}]}) (async) r4 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000001080)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b46e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998247856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f0b00f694c5bef739aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c425179b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c669485a2e714ec9bb31ae0f201ca2e5b9ece2b035fbe2ee8d90aa87a986a307fe4fe90b7b2a48217f79001e60692c", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$eJzs3EtvG1UUAOBrO30/iBALdh2pQiRSbdVpUsEuQCseIlXEY8GqOLZjubU9Uew4ISsELBEL/gkCiRUSG34DC9bsEAsQO6SgeaQQ0hYiO3HSfp80PjN3rs/cM7JaHU/kADy1pqM/fiuEy+FcCKEUQrhYCOl+Id9Si1l4PoRwJYRQ/MdWyMcfDJwOIZwPIVxOkofwfT+bk5z68trw6sKvb/3+3Y9npi589e1Pk6samLQXQgjdtWx/s5vFuJXFe/l4bdhOY3d+mMfsRPd+fhxncbO5kmbYrO3Oq6XxRiubH69t9JO42qnVk9hqr6bja73sgv1hazdP+oZ7tfX0uNFcSWO7H6extZ2ta2s7+/dyuz/I8jTyfB+l6cNgsBuz8eZWM6tn7X4a671BPp7ljRvNrSQO85hfLtTjTiNdx8ood/p4e7vd29iKhs31fjvuRQuV6kuV6s1ydT1uNAfN+XKt27g5H820Osm08ot3a93FVhy3Os1KPe7ORjOter1crUYzt5or7VovqlYrNyrXywuz+d616PU770edRjSTxFfbvY3T7U4/Wo3Xo+wds9Fc5cbLs9HVavTu0nK0/M7t20vL79299cGdV5befC2ftG9Z0czc9bm5cvV6ea46e4T1D5oPrz/5f/d/1j8Ypf7P8kUfoP7CaLcHHs8HDODA9vX/Ybz9fyno/4H9Tmz/v7Ozs5PXMLb+P2mpHtv/nx3lVh9rB+p/i4/ofw/Q/4/U/x7X/v8E1w8j0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy1fj719RvpznR2fCEfv5QPPZsfF0IIxRDCzkOUwuk9OUt5nlOPmH/qX2v4oRDSDMk1zuTb+RDCYr79+cxh3wUAAAB4cn3z8ZUvsm49e5me9II4StnXMMWLH44pXyHJOf3LmLIVk5fnxpQs/XxPha0xZUvv3NkxJcu+cpsKIXxyZlwp/0tpN3x66e/BtKBCFopHtRIAAODolPaEqYmuBQAAgMP0+aQXwGQUwoOHwLt/wJ8/gMwfbZ7bcw4AAAA4gQqTXgAAAABw6NL+3+//AQAAwJMt+/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Yud+btQGojgAPxsM5J+CotzTSm5QRkrIMUeggDRBCaSFNEAN5JZ7LhGssEdI3gVptYzXAn2fZJux0W9mgMsbCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06U+1mf9afPkZi+ty9ofr5JoPAAAA8NSu2szrF9Om/S6d/5BOfUrtIiLKiDhXuw9i1MocpJzqwvurR2P4HVEnHPsYp+1tRHxN2/+PXX8KAAAAcL+2q/Wsqdab3bTvAfGamkWb8v23THlFRFTTv5nSyuPuc6aw+vc9jB+Z0uoFrEmmsGbJbXj+2ihXJ22D1iHNZLKsv8S6VXbTLwAA0Kd2JXChCgEAAOAOfO97APSjOO1O9xnHzSHdEHzTagEAAAA3qOh7AAAAAEDn6vr/Fp7/98/fEgAAAODFmuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVdtZlvV+vZpevLZ+bsD9fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAf25x4FQBiMAein+LtJ739TByWiY1en96AQEkopAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM/wnhq/8DRHVU1pE+bUraqWTAlrpoQtc8KeC63zyHn9+SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnfvnbaMMAwD++Oxz/wAiBJQhgIrEAAtN3NLSEQZQxMBHQIpSp4S6FNoMNIpAWWBCmbsgGBFCAoWt36FzI3UpW4cMQWIG3fkuubYuNYXcueT3k16/j32Xe5/3fIny5D0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDSzjvxUlLE7exhahiXr93aXV/K+u37+syNzduzWcvi1qMG+vrt/z75yfZy9cmJmcqTL+tPBgAAgMOhXdb3EXEn3VrI+mQqr//Tcp+s5v/umWFc1vP31/3bu+tHi02zZf3/6y93X9gbaGo4TnbQ5ZVBf/7BVDoHNMWJ9+wj9+jkZz7/20s7f0OS9zee30nz89n65ubNd7t5eKSObAGAx3Gy7LPg6P7vQ1nfazg3AA6HTqXwLuv/9lSzOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYWcjnirjVkTMdvbjzPbu+tKo/sbm7dmynb1+fbN6zOwQaUQsrwz6aY1zmXRXr61dXBwM+ldGBhEP3fTvgxMRcTBHfkgQIzZ9OMaXR/z9PsXlGfXMYu3iYmf8nVv1nd6JDZLi/Sle6dZ71R1skF17x8b6Xv6nQUM/kAAA+N9Ki5bV9XfSrYXstdZ0xJ/f31v/v1aJY8z6/+5HZ29Vx6rW/73aZjj55lYvfTp39draGyuXFi/0L/Q/efNU763e6XNnzpyby87V/NxyJP35ptMEAADgCdYtWrX+T6YfXP8/XoljzPr/s297X1THaqv/R9pf9Gs6EwAAgMOouxc998ofv7dG7NHqduPzxdXVK73h497zU8PHWtN9TEeKVq3/29NNZwUAAADUYWejdc/6//lKHGOu/z/9w4s/VY/ZHn5O9nJE9E8uXR6cr286E62ODyrnA3WbnikAAABNOVa06vp/mt//n+zd8pBExOuvDuPy/6yNU/+33/vqx+pY1fv/T9c3xYmUzAzPR97PRHRmms4IAACAJ9G4S71Hi5YV+7+lWwsf/3z8g677/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9lcAAAD//+NqOL0=") (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xc00, r7, 0x0}]) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f00000002c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) syz_mount_image$f2fs(&(0x7f0000000340), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b706f6907003d64697361626c652c6a71666d743d7666736f6c642c7573c86be427c1d9726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5e88be9507ccd3e28e8b57ddee3b3e5d8d0f008c19753fb69dc580357ce5402421cdf43ebd58fe035a2c7200", @ANYRES8=r4, @ANYRESDEC, @ANYRES16=0x0], 0xfd, 0x5569, &(0x7f00000006c0)="$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") (async) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0xed089f0eef533528, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x4, 0x0, &(0x7f0000000100)) 326.796672ms ago: executing program 1 (id=152): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4410, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000002440)="$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") r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x49a301, 0x68) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) fallocate(r2, 0x0, 0xffd, 0x9) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0xc, 0x8, 0x20000, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r5}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r4}, 0xc) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0xa8) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) (async) r10 = open(&(0x7f0000000040)='./file1\x00', 0x808c00, 0x43) (async) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') (async) mkdirat(r10, &(0x7f0000000340)='./file0\x00', 0xf3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 326.521662ms ago: executing program 0 (id=153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x55b, &(0x7f0000000f40)="$eJzs3cFrJFkZAPCvOulMZiazyaoHHdh1cVdmFp3uycbdDR7WFURPC+J6H2PSE8J00kPS2Z2Exe38BYKICp704kXwDxBkwItHEQb0rLCiiM4q6GHdkuquTmKnOuloJz1Jfj+oqfdev+rve5lUparrUR3AhfVcRLweER+mafpiREzn7aV8iVZnyfq9//idxWxJIk3f/GsSSd6WdUvTNO2+59V8s8mI+NpXIr6Z7As4ma+3tu8t1Ou19bxaba7er25sbd9aWV1Yri3X1ubmZl+Zf3X+5fnbQxnntYh47Ut//N63f/Ll137x2bf/cOfPN7+VpTWVv94dxzG8m6/HD+vUGXr50uS+tmyD9WMGe5Jl4yl/kFcuD7bNzkkmBABAX9k5/kci4lMR8WJMx9jhp7MAAADAGZR+YSo+SDr37wpM9GkHAAAAzpBSew5sUqrkcwGmolSqVDpzeD8WV0r1xkbzM3cbm2tLnbmyM1Eu3V2p127nc4Vnopxk9dl2ea/+Uk99LiKejojvTl9u1yuLjfrSqD/8AAAAgAvias/1/z+mO9f/h0tOJzkAAABgeGZGnQAAAABw4lz/AwAAwLlWHnUCAAAAwIn76htvZEva/f7rpbe2Nu813rq1VNu4V1ndXKwsNtbvV5YbjeX2M/tWj3q/eqNx/3Oxtvmg2qxtNKvXtrbvrDY215p3VmLyVAYEAAAAHPD0Jx/+LomI1ucvt5fMxKiTAk7F+G6p+0zPgr3/90911u+dUlLAqRgboM97l4rbnSfA2Tbe29BnXwfOH/P/gaO+0aPv5J1fd1alIecDAAAM341PFN//P/p8vuWUH844OzFcXD33/9PpUSUCnLr2/f9BJ/I4WYBzpTzQDEDgPPt/7/8fLU2PlRAAADB0U+0lKVXyj/emolSqVCKutb8WsJzcXanXbkfEUxHx2+nypaw+294yOfKaAQAAAAAAAAAAAAAAAAAAAAAAAADoSNMkUgAAAOBciyj9Kfll51n+N6ZfmOr9fGAi+Vf7K4EnIuLtH775/QcLzeb6bNb+t9325g/y9pdG8QkGAAAA0Kt7nd5e/3PU2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw3rz/+J3F7jJA98vDivuXL0bETFH88ZhsryejHBFX/p7E+L7tkogYG0L81k5EfLwofpKltRuyKP4wfgitnaSVthXGj5n8p1AU/+oQ4sNF9jA7/rxetP+X4rn2unj/G4/4r/r/qv/xL3aPf2N99v9rA8a4/uhn1b7xr0/F9fHi4183ftIn/vMDRS/HN76+vd3v1fRHETe6f3/aR7z9EfZK1ebq/erG1vatldWF5dpybW1ubvaV+VfnX56/Xb27Uq/l/xbG+M4zP/+w7/h3Iq4U/v1L8mz6j/+FgvcbK8j/348ePP5ot9I6GP/m8wXxf/XjvMfB+KU8zqfzcvb6jW651Snv9+xPf/PsYeNf2ht/+Tj//zf7vWmvAzvKM4P96gAAJ2Jja/veQr1eWz9bhUsRMWDn7Cr9icj5+IWJGGiAT0KqZ7PwblZ4NGDnsTiiT5qmabZPFbz0MCIGSSyJIY+0VJzPXqHvEWDURyYAAGDY9k76R50JAAAAAAAAAAAAAAAAAAAAXFyn8ZS13ph7j0BOhvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAofhPAAAA//+8p9ku") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x143042, 0x100) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) pwritev2(r1, &(0x7f0000002880)=[{0x0}, {&(0x7f0000000100)="0d184941", 0x4}], 0x2, 0x0, 0x8, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8600, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5}) open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa) 326.355022ms ago: executing program 2 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 63.818159ms ago: executing program 2 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000340)="b9", 0x1}], 0x2}}], 0x1, 0x4040000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104) r5 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/sockcreate\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x40d, &(0x7f0000000480)={[{@jqfmt_vfsv1}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@data_journal}, {@quota}, {@resgid}, {@jqfmt_vfsv1}, {@nolazytime}, {@grpjquota}, {@resgid}]}, 0x3, 0x464, &(0x7f0000001040)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0x21be, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r9, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '([!@'}, {0x20, '{-'}, {0x20, ']@#.'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "16bbf48e2849fa582dd8e76c4a30b2d9759869054ae201f0839872ac22ac5c8fea91718f16a77f8587fc1f7560ff15ab21f8ac3c81b6c808681f093c1570114ecb4a7de3c95e6aa11c528a6497e6c6552c369aed23cd5004fad4daa3552597ee3f2c283744dbe835b922f78d11f8be3c090911980a8f352f4ff5b5e3c14b24644726b74facdd183f2350ee5ba03c856ff3dc1afea98db73415fc2fea48fd4ff2e52389bdcafd53dca7477d68f5b2542b5dda923263"}, 0xf5) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000400)={0x74, 0xf, 0x8000139, 0x0, 0x0, [{{r2}, 0x9}, {{r5}, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000003c0)={0x2710, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 56.839419ms ago: executing program 1 (id=156): r0 = syz_usb_connect(0x0, 0x1bd, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2e, 0x64, 0x2, 0x40, 0x403, 0xf9e9, 0xe7e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ab, 0x2, 0x0, 0x4, 0xb0, 0x4, "", [{{0x9, 0x4, 0x35, 0x9, 0x5, 0xa1, 0x8e, 0xd0, 0x1b, [@hid_hid={0x9, 0x21, 0x1, 0xda, 0x1, {0x22, 0x6b9}}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0xe, 0x8, 0x12, [@generic={0x2e, 0x4, "5c9224fa035d47f99d7f8df284df57ef6fad7d4bbd6489ecc290907e2ec44f6ded7f7f7ce1a2874702224f65"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0xc, 0x1c, 0x40, 0x6, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x9, 0x0, 0x8, [@generic={0xf0, 0x6, "b3c80cd136fe161762e161c3cf9dddfa5c0d2c4a4d0bcc8882216d5b75506e81024639a994a6c667bec1cbb0fd2463dc418480d4bc8d7034f69ecd5c55b34aff47a2700cc9f1fa6d7534956f68b9d3f49e643820c74b61fbb04f4e965bf782847d60c2ed13df9204ccf6301a03af881651e34f950b2299cebd80cf566d5aab9cab873ac40679807d9773ae54d463606753303001e99b235e953e0cdab14ba34a40017cbb4e8633cc95df03f33d2ab64be30148f71da884102968fdbd74e63b72758b599f3624447e2f43fcde86e37f0f5337741b5614050717b5dd87df7bf2feab82495b47851c4c062d3851d22b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xea, 0x7c2}]}}]}}, {{0x9, 0x4, 0x64, 0x1, 0x1, 0x2, 0x6, 0x0, 0x31, [@hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xf2}}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x90, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x101}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x6, 0x6, 0xb, 0x20, 0x5}, 0xef, &(0x7f0000000200)={0x5, 0xf, 0xef, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xac657f68468df46, 0x22, 0x3, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3a, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x8, 0xf00, 0x8001, [0xc0, 0xc000]}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0xd3c8, 0xf, 0x400, [0x0]}, @generic={0xaa, 0x10, 0xb, "379e8718f7dcc7dade1e5673253654096ffcdd1bbe5591ac1a9420a6d14b3e4558464baa7e3dd48aec7a682b0adc10db5c38339510c6c5702cae2f3d50c73d4d705f23211e98987eef033ac130a779fff750d4bb26e325b6b4da7115089983e7d6a3bfa62a20f92d720f1a2098c91cd91881047f3340cb2bd51547814281167fc465079bd8a8d6f8f08fabbeb7163c4906615d5d19cf97ffe513ef7eeb756f04408d212650b4d4"}]}, 0x2, [{0xda, &(0x7f0000000300)=@string={0xda, 0x3, "e09b39e27833faeced7bc900486d6ce7387f907dd870207c423925cff3ed8ad1f6c87612c9bcc878e880ddd0730fff49b91e6605066c815063977a833c927f3babe757b7be74199ce91473e82d342f288f580d4f968180bb70475e243905a5c8d4c848560b54ea8e452f2e9a05cb8f0fece884f8cd69adb0d54dd0346e3acabfd617af1489c11f0e3c11bbd867187fbafea4d4f96983fef8ac1f3155a3a96b80598ff5fddaf36455ccf1675217c489065684239529bd656333565a37f4da891affb62fcf684394cacf46f8488ae951eb5f3e283df64bb068"}}, {0x82, &(0x7f0000000400)=@string={0x82, 0x3, "60b658e27441e5a91a636232d8e2476bb2b079198e2167c6b603c675d2d25f0d94b896092d16bda28fef1974c428739a37422ad310f1c2c0798233a648af960b532b4bb5ddeff79489c3f97abcdf3132f73343dd212cef456b5adf68f5e5b767a9a0182523b23c5a586e3c67ce11a603618fece0b187e60a3412eee61116f981"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x118, &(0x7f0000000500)={[{0xb8, 0x4e00, "24965b127c85ad058fefa863cafaf183980bd153ee5d6777d778874e6b83667ed5466c69f464476ce4a32741345a597857b1deaff76737a39e5b71f93c7063abf72650720d3f69d0f0dd44fcbffbeb6e69152c9b620c5b3294cc46716e37af3caa8d929107d824b8c50274cb14805a663efb8715b3ed1307a4d0e4c2f2145cc7701984752ae0c02e4746fb4a90f4a8a9b18e56093e8480ca7060366eec71aac107205e168bbfec58f88913e806cd9ea3b0fe94464f964495"}, {0x56, 0x4e00, "e6a95163c39d2ccadb427d0267e714db6c219bad8d36f46fbcfa915ed22292d722c1a2f2faf35d75f5a7c9b8f9378ce49c7a991f039a93b67de87a958d1ca32d1037dc8fcd7bea6a5e3d2ffedb61da1641ef5aaa74fd"}]}) syz_emit_ethernet(0x678, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @void, {@mpls_uc={0x8847, {[{0xffffb, 0x0, 0x1}, {0x6, 0x0, 0x1}], @ipv6=@esp={0x0, 0x6, "cf0e6f", 0x63a, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, {[@hopopts={0x2, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xa8, 0x5, [0x10001, 0xff, 0x7fff, 0x8, 0x1, 0x8000]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4d4, 0x4, @cc={0x1, 0x0, 0x8, 0xb, 0x560, 0x2, 0x80000001, [@ipv4=@generic={{0xe, 0x4, 0x0, 0x1, 0x11e, 0x67, 0x0, 0xcb, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x7, [@private=0xa010101, @multicast1, @multicast2, @local, @multicast1, @multicast2, @empty, @remote]}]}}, "696c3a108764f5de2c32c5adb5a7185d5616d8ccbd1ea83f152e6d845c2b9fbc518caf73d8f0c23f33bb155213d985e9c96fa7a1218d27d9438240afa5674598744ce2a61d2553145a3957a1ce3fa0d778e144920b68bf881310dfed682903e97d3d9568fbf9de2e0c4f6086239214b13ba509f04cae23f4027daf6d64c9813476756ea6580a27ecdc9047ddf37ebca498aaa1a17eb64dcb4acb55c9c6e63e7834e632a72f71bc782e52f5a0a7b84527fb926ecc860b5059951ac5ee20095b72c8d2e55704321b4ae0eb07b214cb82b2facb172326d35c72a7c8a4dc8ea715a06c7744e67e87"}, @runt="b95a978355a9828022b046fd18ec7c95024784160c76e7b6b5264dcc891aed61e3d8bc5b6664070519c7477cd4b1d8bd9198d0487f3b1ff9", @runt="939ee6dfe666bbe90f3c37eaabb30d6ba63f28ad50a36eb6069521a5", @ipv6=@dccp_packet={0x4, 0x6, "7f7d87", 0x18d, 0x21, 0xff, @empty, @mcast2, {[@hopopts={0x1, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x66}, @ra={0x5, 0x2, 0x8}, @pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x81}]}, @hopopts={0xff, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x63, "1152e4becf58f78e2293d3ed3a32715535766e4cd0bca7542714108a36645640f11517736d09a31131b2b6d69266c53f9c5dd6a2cbdbf013e48694700a7ff858a19c9e53540e959274676d57b0dc645bc582c6bc155cf54fc06a8e9a646a0b14632488"}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xf}]}], {{0x4e23, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x3, 0x1, "95631a", 0x4, "46090e"}, "88f01b3fc098541d713252848991488df8ce65a1ecac2b9ca958fef36be883559e325bb7db668848c8a70966e7f3c1df7dbc9a45f3f5a63be8c7a057f59945333b53f44428c284b4d4507579227b303ecac3af2007e71d4ba601eaf3c362129c379c58f50015877ab7680014c556bd45f894b626ac1d157027362ef90cb531cc3dda15be897e2bbd24d05810924d1f9e60501f1f2266d4f42d3526e2ed5be082b37362906053523840b99418fd09dfb0d8027f8d78"}}}, @ipv6=@udp={0x4, 0x6, "1ba890", 0x221, 0x11, 0xfe, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x2, 0x68}, @srh={0x32, 0x2, 0x4, 0x1, 0x4, 0x38, 0x10, [@loopback]}, @fragment={0xc, 0x0, 0x4, 0x0, 0x0, 0x3, 0x68}, @routing={0x32, 0x4, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x27}]}, @hopopts={0xc, 0x1b, '\x00', [@generic={0x4, 0xdd, "0d7296a48b36e5879c944c15ea5f5c79063a5135f921d5b2657333661842eca8d5b9f65193e1a247915d3ff38b41244b271afafb5a372f194ee972efb3ce30f5d72b6553f3bc099ff39be44e14ea54634c488791c023a723063a496aa7919117dd9d4eba334bf09ec3d5d9244d8b92e84fc0e46f6a7f18984841cdcb00c4582c15dd757959b3f9c2f4ef3e23929848e2b16c44de24d099047db54903006e92b893d6836b61cfdaf17418eb5d569834b6ac321efe4bfea75c93fbaaa3fdec736616752f174432dd51babe1516d2b6a206b78384b175782fb0f5f06f491e"}]}, @routing={0x2, 0xc, 0x2, 0x8, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x4e22, 0x4e22, 0x81, 0x0, @opaque="ca4baba66eba0d87156a596dcaa1095bc4c2c29b0ab73b622c324565a1fc442bf27c6086a98b0bc4310b5ea61cbbf3d1cff5b1e1dce3ca10018161b8afc8ef1cb3d837078644bc4f1b96095b728a8b5b82ebe37339746cabb54f23b411a5906106f429c3803f6354b87f6716b532edcbf6ccd3a016261226c0"}}}, @ipv6=@dccp_packet={0x7, 0x6, "7607a5", 0x37, 0x21, 0x0, @rand_addr=' \x01\x00', @remote, {[@srh={0x89, 0x2, 0x4, 0x1, 0x5, 0x18, 0x3, [@mcast2]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x6, "1f2cd2", 0x5, "1f7c2e"}, "a7be48f2f6f16f169a03f6d84ae672"}}}]}, ',', 0x1}}}}}}}, &(0x7f0000000cc0)={0x1, 0x4, [0x586, 0xbd8, 0x15b, 0x221]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x98, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) r3 = socket(0xb, 0x800, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10040}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40004) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_usb_ep_read(r0, 0x6, 0x6b, &(0x7f00000012c0)=""/107) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000001340)={0x6, 0x0, 0x8, 0x80000001}, 0x10) syz_open_dev$evdev(&(0x7f0000001380), 0xfa, 0x800) getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f00000013c0)=""/188, 0xbc) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000015c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x64, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x10}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xfa}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000017c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400f0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x1) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r8) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000001c80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a40)={0x1ec, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4840}, 0x4c844) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d00), r4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x40, r12, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x40001) 0s ago: executing program 5 (id=146): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = inotify_init() r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000580)='./bus\x00', 0x2000800) inotify_rm_watch(r3, r4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)={[{@numtail}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_winnt}, {@utf8}, {@fat=@flush}, {@uni_xlate}, {@fat=@check_strict}, {@nonumtail}, {@fat=@flush}]}, 0x1, 0x229, &(0x7f0000001100)="$eJzs3UFLFGEYB/BndS0RYjwEUgRNdOm0qNHdiIJAKIg9dEtSKRwTEgQ9aJ36EvUV6tg1CIqufYEIwoIuefMQTNiYpu26azWO1O932YfZ9z/v+y7Lvuxhn711anZmcm5+em1tNfr7a1Efi7FYr8Vg9ERvFB4EAPAvWc/z+JIXql4LAHAwnP8A8P/p8vy/foBLAgBK1vX3/55fL71KylsXAFCeGzfzWlGl/RGzjxaaC83isbh6cTruRhZTMRxJfI3ItxT1lavjl4fTDR8Hozm7splfWWj27syPRBKDrfMjaWFnvi8GNvPvBmIqRiOJ463zoy3zR+Lc2Z/mb0QSb2/HXGQxGRvZ7fzySJpeuja+K3/0+zgAAAAAAAAAAAAAAAAAAAAAAChDI93Ssn9Po9Hu+SJf9NepR+f+QLv789TjZL3avQMAAAAAAAAAAAAAAAAAAMBhMb+4NDORZVP39yruvXn6stOYLova5rx/ep/fKeoRsVHkeUSWHTvz4XH7wQ/38/r83eLF6Qom3W/xevXOifPzQxcOy3oWl2b69nprfU4iSpr9WaV7/7HrjoOHnoxNPF9+/6nbO7f/zNC2AwAAAAAAAAAAAAAAAAAAyrH9o9+qVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1dn+///yiqr3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3wIAAP//Q5+enQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x18103, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {0x0, 0x0, 0x7}, {0x7a04}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) kernel console output (not intermixed with test programs): cess permissive=1 [ 12.235369][ T24] audit: type=1400 audit(1786667400.319:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 19.135027][ T24] audit: type=1400 audit(1786667407.229:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.136019][ T271] cgroup: Unknown subsys name 'net' [ 19.157767][ T24] audit: type=1400 audit(1786667407.229:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.185193][ T24] audit: type=1400 audit(1786667407.259:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.185380][ T271] cgroup: Unknown subsys name 'devices' [ 19.331116][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.336716][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.443264][ T24] audit: type=1400 audit(1786667407.539:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.457552][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.466474][ T24] audit: type=1400 audit(1786667407.539:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.499683][ T24] audit: type=1400 audit(1786667407.539:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.522887][ T24] audit: type=1400 audit(1786667407.579:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.548267][ T24] audit: type=1400 audit(1786667407.579:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.575178][ T24] audit: type=1400 audit(1786667407.679:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.600685][ T24] audit: type=1400 audit(1786667407.679:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.600711][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.127253][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.134342][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.141723][ T279] device bridge_slave_0 entered promiscuous mode [ 20.149291][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.156444][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.163738][ T279] device bridge_slave_1 entered promiscuous mode [ 20.241702][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.248743][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.256115][ T280] device bridge_slave_0 entered promiscuous mode [ 20.264084][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.271135][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.278450][ T280] device bridge_slave_1 entered promiscuous mode [ 20.291629][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.298651][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.306127][ T283] device bridge_slave_0 entered promiscuous mode [ 20.330117][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.337155][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.344477][ T283] device bridge_slave_1 entered promiscuous mode [ 20.360708][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.367738][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.375098][ T281] device bridge_slave_0 entered promiscuous mode [ 20.381859][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.388880][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.396285][ T281] device bridge_slave_1 entered promiscuous mode [ 20.420488][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.427528][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.435031][ T282] device bridge_slave_0 entered promiscuous mode [ 20.441863][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.448880][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.456224][ T282] device bridge_slave_1 entered promiscuous mode [ 20.522279][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.529318][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.536594][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.543609][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.604500][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.611546][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.618772][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.625808][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.634069][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.641109][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.648368][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.655391][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.673340][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.680621][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.687860][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.695397][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.702804][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.710094][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.717902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.725417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.751820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.760012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.767029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.781667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.789219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.797573][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.804598][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.812181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.841125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.848785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.856957][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.863994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.871599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.880646][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.887649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.895047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.902911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.910924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.918774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.940062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.948805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.956966][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.963984][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.971863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.980272][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.987292][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.994706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.002850][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.009883][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.017178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.041082][ T280] device veth0_vlan entered promiscuous mode [ 21.052842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.061325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.069153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.077078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.084828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.093233][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.100267][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.108379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.116517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.124481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.132413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.144771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.152212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.159981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.168160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.176805][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.183840][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.191155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.199376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.207686][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.214712][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.223230][ T279] device veth0_vlan entered promiscuous mode [ 21.232095][ T280] device veth1_macvtap entered promiscuous mode [ 21.248409][ T283] device veth0_vlan entered promiscuous mode [ 21.254627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.262331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.270947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.278827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.287269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.295596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.303203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.311155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.318962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.327085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.335045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.343477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.351891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.359949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.367819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.375308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.382781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.390134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.399962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.408158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.420905][ T279] device veth1_macvtap entered promiscuous mode [ 21.433397][ T283] device veth1_macvtap entered promiscuous mode [ 21.440840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.448415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.456866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.465254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.473799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.482100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.490403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.498451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.519388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.527702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.536034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.544771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.553178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.561509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.569776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.577982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.586348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.594233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.602349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.609974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.626417][ T282] device veth0_vlan entered promiscuous mode [ 21.632593][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 21.640446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.649222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.658635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.666924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.675943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.683945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.697644][ T281] device veth0_vlan entered promiscuous mode [ 21.698423][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.714457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.722432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.734032][ T304] ====================================================== [ 21.734032][ T304] WARNING: the mand mount option is being deprecated and [ 21.734032][ T304] will be removed in v5.15! [ 21.734032][ T304] ====================================================== [ 21.741035][ T282] device veth1_macvtap entered promiscuous mode [ 21.767489][ T304] EXT4-fs (loop3): Test dummy encryption mode enabled [ 21.775223][ T281] device veth1_macvtap entered promiscuous mode [ 21.784083][ T304] EXT4-fs (loop3): Ignoring removed orlov option [ 21.799767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.805390][ T304] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 21.811852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.821305][ T304] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 21.831918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.846837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.870944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.879131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.897275][ T308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 21.925043][ T308] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x000000000000000a,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 21.939674][ T304] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 21.962439][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.970780][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.979298][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.987931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.995303][ T304] overlayfs: missing 'lowerdir' [ 22.332878][ T326] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 22.875983][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.887714][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.896832][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.905573][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.947171][ T319] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 22.962372][ T329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.020407][ T337] EXT4-fs (loop1): Ignoring removed bh option [ 23.031610][ T337] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000003,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc, [ 23.070339][ T335] EXT4-fs (loop4): Test dummy encryption mode enabled [ 23.102299][ T335] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 23.120972][ T345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.204130][ T352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.212246][ T335] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 23.240177][ T350] EXT4-fs (loop2): Test dummy encryption mode enabled [ 23.249707][ T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.260616][ T350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.280115][ T350] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 23.329894][ T350] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.10: bad orphan inode 131083 [ 23.389293][ T350] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue [ 23.420876][ T350] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 13: comm syz.2.10: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 23.499790][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 23.614294][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 23.629681][ T301] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 23.637981][ T301] usb 1-1: config 0 has no interface number 0 [ 23.644147][ T301] usb 1-1: config 0 interface 184 has no altsetting 0 [ 23.809696][ T301] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 23.818832][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.827083][ T301] usb 1-1: Product: syz [ 23.831427][ T301] usb 1-1: Manufacturer: syz [ 23.836015][ T301] usb 1-1: SerialNumber: syz [ 23.842210][ T301] usb 1-1: config 0 descriptor?? [ 23.849791][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 23.879941][ T301] smsc75xx v1.0.0 [ 23.890392][ T365] EXT4-fs (loop1): Test dummy encryption mode enabled [ 23.903327][ T368] xt_hashlimit: size too large, truncated to 1048576 [ 23.908401][ T365] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 24.083240][ T331] udc-core: couldn't find an available UDC or it's busy [ 24.094884][ T331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 24.151431][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 24.151439][ T24] audit: type=1400 audit(1786667412.239:171): avc: denied { prog_run } for pid=371 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 24.186805][ T24] audit: type=1400 audit(1786667412.278:172): avc: denied { create } for pid=374 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 24.207108][ T24] audit: type=1400 audit(1786667412.278:173): avc: denied { setopt } for pid=374 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 24.213055][ T377] device bridge_slave_0 left promiscuous mode [ 24.226861][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 24.233023][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.243859][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.254969][ T375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 24.274085][ T375] EXT4-fs (loop2): Ignoring removed orlov option [ 24.276561][ T379] input: syz1 as /devices/virtual/input/input4 [ 24.280616][ T24] audit: type=1400 audit(1786667412.288:174): avc: denied { ioctl } for pid=374 comm="syz.3.18" path="socket:[15305]" dev="sockfs" ino=15305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.295169][ T382] FAULT_INJECTION: forcing a failure. [ 24.295169][ T382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 24.312279][ T375] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 24.334166][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.347366][ T375] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.347394][ T24] audit: type=1400 audit(1786667412.288:175): avc: denied { bind } for pid=374 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 24.372517][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 24.376339][ T24] audit: type=1400 audit(1786667412.367:176): avc: denied { ioctl } for pid=374 comm="syz.3.18" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.402183][ T382] CPU: 1 PID: 382 Comm: syz.1.19 Not tainted syzkaller #0 [ 24.420990][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.421334][ T375] overlayfs: missing 'lowerdir' [ 24.431054][ T382] Call Trace: [ 24.431082][ T382] __dump_stack+0x21/0x24 [ 24.431091][ T382] dump_stack_lvl+0x1a7/0x208 [ 24.431100][ T382] ? show_regs_print_info+0x18/0x18 [ 24.431109][ T382] dump_stack+0x15/0x1c [ 24.431117][ T382] should_fail+0x3ab/0x500 [ 24.431124][ T382] should_fail_usercopy+0x1a/0x20 [ 24.431132][ T382] _copy_from_iter_full+0x1ac/0x750 [ 24.431143][ T382] ? __check_object_size+0x2dd/0x3b0 [ 24.431151][ T382] netlink_sendmsg+0x798/0xb70 [ 24.431160][ T382] ? netlink_getsockopt+0x530/0x530 [ 24.431169][ T382] ? kasan_set_track+0x5b/0x70 [ 24.431176][ T382] ? slab_free_freelist_hook+0xc5/0x190 [ 24.431185][ T382] ? security_socket_sendmsg+0x82/0xa0 [ 24.431192][ T382] ? netlink_getsockopt+0x530/0x530 [ 24.431200][ T382] ____sys_sendmsg+0x5be/0x8f0 [ 24.431216][ T382] ? __sys_sendmsg_sock+0x40/0x40 [ 24.517807][ T382] ? import_iovec+0x7c/0xb0 [ 24.522288][ T382] ___sys_sendmsg+0x236/0x2e0 [ 24.526945][ T382] ? __sys_sendmsg+0x280/0x280 [ 24.531684][ T382] ? rw_verify_area+0x1c0/0x360 [ 24.536512][ T382] ? __fdget+0x1a1/0x230 [ 24.540730][ T382] __x64_sys_sendmsg+0x201/0x2d0 [ 24.545643][ T382] ? fput+0x1a/0x20 [ 24.549426][ T382] ? ___sys_sendmsg+0x2e0/0x2e0 [ 24.554252][ T382] ? debug_smp_processor_id+0x17/0x20 [ 24.559607][ T382] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 24.565652][ T382] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 24.571259][ T382] do_syscall_64+0x31/0x40 [ 24.575738][ T382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.581605][ T382] RIP: 0033:0x7fe3b7d9b0d9 [ 24.585997][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.605579][ T382] RSP: 002b:00007fe3b67f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.613967][ T382] RAX: ffffffffffffffda RBX: 00007fe3b8022fa0 RCX: 00007fe3b7d9b0d9 [ 24.621914][ T382] RDX: 0000000000044014 RSI: 0000200000000140 RDI: 0000000000000003 [ 24.629868][ T382] RBP: 00007fe3b67f4090 R08: 0000000000000000 R09: 0000000000000000 [ 24.637815][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 24.645767][ T382] R13: 00007fe3b8023038 R14: 00007fe3b8022fa0 R15: 00007fff6a49e2f8 [ 24.655310][ T25] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 24.675743][ T301] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 24.686948][ T301] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.704890][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.713492][ T25] usb 5-1: config 0 descriptor?? [ 24.719134][ T377] device bridge_slave_1 left promiscuous mode [ 24.725268][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.890103][ T24] audit: type=1400 audit(1786667412.933:177): avc: denied { create } for pid=386 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.909672][ T24] audit: type=1400 audit(1786667412.943:178): avc: denied { connect } for pid=386 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.952110][ T391] EXT4-fs (loop2): Test dummy encryption mode enabled [ 24.972045][ T391] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 25.008409][ T301] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 25.019278][ T301] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 25.028859][ T301] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 25.038356][ T301] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 25.045731][ T396] EXT4-fs (loop3): Test dummy encryption mode enabled [ 25.064424][ T301] usb 1-1: USB disconnect, device number 2 [ 25.067249][ T396] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 25.164735][ T402] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 25.172834][ T402] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 25.180975][ T402] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.24: bad orphan inode 15 [ 25.191173][ T402] EXT4-fs (loop3): Remounting filesystem read-only [ 25.197710][ T402] ext4_test_bit(bit=14, block=4) = 1 [ 25.203102][ T402] is_bad_inode(inode)=0 [ 25.207277][ T402] NEXT_ORPHAN(inode)=0 [ 25.211610][ T402] max_ino=32 [ 25.214910][ T402] i_nlink=1 [ 25.218069][ T402] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,usrjquota="errors=continue,noload,errors=remount-ro,grpjquota="prjquota,quota,jqfmt=vfsv1, [ 25.230985][ T25] holtek_kbd 0003:04D9:A055.0001: item fetching failed at offset 5/7 [ 25.280070][ T24] audit: type=1400 audit(1786667413.360:179): avc: denied { write } for pid=399 comm="syz.2.23" name="mcfilter" dev="proc" ino=4026532596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 25.312368][ T25] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22 [ 25.353878][ T407] Zero length message leads to an empty skb [ 25.361270][ T402] netem: incorrect gi model size [ 25.366247][ T402] netem: change failed [ 25.372918][ T24] audit: type=1400 audit(1786667413.459:180): avc: denied { bind } for pid=401 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.376076][ T402] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #2: block 4: comm syz.3.24: lblock 0 mapped to illegal pblock 4 (length 1) [ 25.407370][ T402] EXT4-fs (loop3): Remounting filesystem read-only [ 25.554067][ T361] capability: warning: `syz.4.13' uses deprecated v2 capabilities in a way that may be insecure [ 25.567071][ T361] udc-core: couldn't find an available UDC or it's busy [ 25.592776][ T361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.594675][ T412] FAULT_INJECTION: forcing a failure. [ 25.594675][ T412] name failslab, interval 1, probability 0, space 0, times 1 [ 25.609649][ T324] usb 5-1: USB disconnect, device number 2 [ 25.614334][ T412] CPU: 0 PID: 412 Comm: syz.3.25 Not tainted syzkaller #0 [ 25.625734][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.635783][ T412] Call Trace: [ 25.639068][ T412] __dump_stack+0x21/0x24 [ 25.643392][ T412] dump_stack_lvl+0x1a7/0x208 [ 25.648067][ T412] ? show_regs_print_info+0x18/0x18 [ 25.653261][ T412] ? __gfn_to_pfn_memslot+0x493/0xdd0 [ 25.658623][ T412] dump_stack+0x15/0x1c [ 25.662769][ T412] should_fail+0x3ab/0x500 [ 25.667172][ T412] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 25.672950][ T412] __should_failslab+0xa4/0xe0 [ 25.677690][ T412] should_failslab+0x9/0x20 [ 25.682173][ T412] kmem_cache_alloc+0x3d/0x2d0 [ 25.686913][ T412] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 25.692527][ T412] kvm_mmu_load+0x70/0x1600 [ 25.697013][ T412] vcpu_enter_guest+0x481c/0x70e0 [ 25.702016][ T412] ? local_bh_enable+0x30/0x30 [ 25.706852][ T412] ? 0xffffffffa0028424 [ 25.710987][ T412] ? is_bpf_text_address+0x177/0x190 [ 25.716246][ T412] ? __kernel_text_address+0xa0/0x100 [ 25.721593][ T412] ? unwind_get_return_address+0x4d/0x90 [ 25.727200][ T412] ? stack_trace_save+0xf0/0xf0 [ 25.732025][ T412] ? arch_stack_walk+0xee/0x140 [ 25.736852][ T412] ? stack_trace_save+0xa6/0xf0 [ 25.741675][ T412] ? stack_trace_snprint+0xe0/0xe0 [ 25.746769][ T412] ? kasan_set_track+0x5b/0x70 [ 25.751504][ T412] ? kasan_set_track+0x4a/0x70 [ 25.756246][ T412] ? kasan_set_free_info+0x23/0x40 [ 25.761333][ T412] ? ____kasan_slab_free+0x125/0x160 [ 25.766591][ T412] ? __kasan_slab_free+0x11/0x20 [ 25.771521][ T412] ? slab_free_freelist_hook+0xc5/0x190 [ 25.777043][ T412] ? kmem_cache_free+0x100/0x2d0 [ 25.781956][ T412] ? putname+0xfe/0x150 [ 25.786085][ T412] ? do_sys_openat2+0x68e/0x750 [ 25.790914][ T412] ? __x64_sys_openat+0x136/0x160 [ 25.795911][ T412] ? do_syscall_64+0x31/0x40 [ 25.800479][ T412] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.806523][ T412] ? _kstrtoull+0x3bb/0x4c0 [ 25.811001][ T412] ? kstrtouint_from_user+0x1c4/0x220 [ 25.816350][ T412] ? __kasan_check_read+0x11/0x20 [ 25.821349][ T412] ? vmx_vcpu_pi_load+0xac/0x3f0 [ 25.826275][ T412] ? __local_bh_enable_ip+0x53/0x80 [ 25.831455][ T412] ? kvm_load_guest_fpu+0x159/0x290 [ 25.836634][ T412] kvm_arch_vcpu_ioctl_run+0xaf5/0x18f0 [ 25.842158][ T412] kvm_vcpu_ioctl+0x7ea/0xbd0 [ 25.846810][ T412] ? kernel_write+0x3c0/0x3c0 [ 25.851464][ T412] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 25.857105][ T412] ? selinux_file_ioctl+0x3ad/0x4c0 [ 25.862282][ T412] ? mutex_trylock+0xb0/0xb0 [ 25.866849][ T412] ? __fget_files+0x2e1/0x340 [ 25.871501][ T412] ? selinux_file_alloc_security+0x120/0x120 [ 25.877458][ T412] ? __fget_files+0x2e1/0x340 [ 25.882113][ T412] ? security_file_ioctl+0x84/0xa0 [ 25.887200][ T412] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 25.892807][ T412] __se_sys_ioctl+0x121/0x1a0 [ 25.897462][ T412] __x64_sys_ioctl+0x7b/0x90 [ 25.902027][ T412] do_syscall_64+0x31/0x40 [ 25.906420][ T412] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.912286][ T412] RIP: 0033:0x7f64644e80d9 [ 25.916677][ T412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.936258][ T412] RSP: 002b:00007f6462f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.944663][ T412] RAX: ffffffffffffffda RBX: 00007f646476ffa0 RCX: 00007f64644e80d9 [ 25.952613][ T412] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 25.960563][ T412] RBP: 00007f6462f41090 R08: 0000000000000000 R09: 0000000000000000 [ 25.968512][ T412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.976458][ T412] R13: 00007f6464770038 R14: 00007f646476ffa0 R15: 00007fff7271c4b8 [ 26.136944][ T301] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.142193][ T427] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.151277][ T427] EXT4-fs (loop0): Ignoring removed orlov option [ 26.152246][ T427] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 26.171820][ T427] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.215637][ T427] FAULT_INJECTION: forcing a failure. [ 26.215637][ T427] name failslab, interval 1, probability 0, space 0, times 0 [ 26.228408][ T427] CPU: 0 PID: 427 Comm: syz.0.29 Not tainted syzkaller #0 [ 26.235498][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.245523][ T427] Call Trace: [ 26.248790][ T427] __dump_stack+0x21/0x24 [ 26.253087][ T427] dump_stack_lvl+0x1a7/0x208 [ 26.257756][ T427] ? thaw_kernel_threads+0x220/0x220 [ 26.263021][ T427] ? __ext4fs_dirhash+0x6b7/0xf00 [ 26.268017][ T427] ? show_regs_print_info+0x18/0x18 [ 26.273201][ T427] ? __ext4fs_dirhash+0xf00/0xf00 [ 26.273211][ T427] dump_stack+0x15/0x1c [ 26.273226][ T427] should_fail+0x3ab/0x500 [ 26.286752][ T427] ? ext4_htree_store_dirent+0x8d/0x5c0 [ 26.292275][ T427] __should_failslab+0xa4/0xe0 [ 26.297027][ T427] should_failslab+0x9/0x20 [ 26.301500][ T427] __kmalloc+0x60/0x330 [ 26.305628][ T427] ext4_htree_store_dirent+0x8d/0x5c0 [ 26.310981][ T427] htree_dirblock_to_tree+0x93d/0xe10 [ 26.316330][ T427] ? ext4_htree_fill_tree+0x10e0/0x10e0 [ 26.321849][ T427] ? ext4_readdir+0x4b5/0x3a80 [ 26.326581][ T427] ? __kasan_kmalloc+0xe6/0x100 [ 26.331401][ T427] ? ext4_readdir+0x4b5/0x3a80 [ 26.336143][ T427] ? iterate_dir+0x25c/0x560 [ 26.340712][ T427] ext4_htree_fill_tree+0x60f/0x10e0 [ 26.345972][ T427] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 26.351844][ T427] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 26.357363][ T427] ? ext4_readdir+0x4b5/0x3a80 [ 26.362102][ T427] ext4_readdir+0x2bcf/0x3a80 [ 26.366759][ T427] ? selinux_file_receive+0x130/0x130 [ 26.372101][ T427] ? ext4_dir_llseek+0x480/0x480 [ 26.377011][ T427] ? avc_policy_seqno+0x1b/0x70 [ 26.381838][ T427] ? fsnotify_perm+0x311/0x4a0 [ 26.386572][ T427] ? __kasan_check_write+0x14/0x20 [ 26.391664][ T427] iterate_dir+0x25c/0x560 [ 26.396066][ T427] ? ext4_dir_llseek+0x480/0x480 [ 26.400977][ T427] ovl_dir_read+0xe8/0x530 [ 26.405373][ T427] ovl_dir_read_merged+0x162/0x340 [ 26.410464][ T427] ? ovl_check_empty_dir+0x480/0x480 [ 26.415721][ T427] ? ovl_indexdir_cleanup+0x750/0x750 [ 26.421064][ T427] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 26.426585][ T427] ? ovl_iterate+0xede/0x1e50 [ 26.431234][ T427] ovl_iterate+0xfa7/0x1e50 [ 26.435711][ T427] ? ovl_dir_llseek+0x510/0x510 [ 26.440536][ T427] ? memset+0x35/0x40 [ 26.444519][ T427] ? fsnotify+0x19ce/0x1a90 [ 26.448994][ T427] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 26.455556][ T427] ? proc_fail_nth_read+0x220/0x220 [ 26.460740][ T427] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 26.466952][ T427] ? rw_verify_area+0x1c0/0x360 [ 26.471774][ T427] ? vfs_write+0xae4/0xd70 [ 26.476163][ T427] ? __kasan_check_write+0x14/0x20 [ 26.481247][ T427] ? down_write_killable+0xb2/0x130 [ 26.486415][ T427] ? down_write+0x120/0x120 [ 26.490893][ T427] ? security_file_permission+0x83/0xa0 [ 26.496410][ T427] iterate_dir+0x25c/0x560 [ 26.500799][ T427] __se_sys_getdents64+0xf2/0x250 [ 26.505793][ T427] ? __x64_sys_getdents64+0x90/0x90 [ 26.510967][ T427] ? ksys_write+0x1fa/0x260 [ 26.515443][ T427] ? filldir+0x660/0x660 [ 26.519671][ T427] ? __ia32_sys_read+0x90/0x90 [ 26.524421][ T427] ? __se_sys_chdir+0x180/0x220 [ 26.529260][ T427] ? debug_smp_processor_id+0x17/0x20 [ 26.534601][ T427] __x64_sys_getdents64+0x7b/0x90 [ 26.539595][ T427] do_syscall_64+0x31/0x40 [ 26.543988][ T427] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.549858][ T427] RIP: 0033:0x7f15099250d9 [ 26.554250][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.573831][ T427] RSP: 002b:00007f150837e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 26.582219][ T427] RAX: ffffffffffffffda RBX: 00007f1509bacfa0 RCX: 00007f15099250d9 [ 26.590169][ T427] RDX: 0000000000000ff9 RSI: 0000200000001280 RDI: 0000000000000004 [ 26.598113][ T427] RBP: 00007f150837e090 R08: 0000000000000000 R09: 0000000000000000 [ 26.606061][ T427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.614011][ T427] R13: 00007f1509bad038 R14: 00007f1509bacfa0 R15: 00007ffdca57efc8 [ 26.622037][ T25] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 26.638654][ T281] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 6144 [ 26.653652][ T281] EXT4-fs (loop0): Remounting filesystem read-only [ 26.803420][ T439] F2FS-fs (loop4): invalid crc value [ 26.810155][ T439] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.936242][ T439] F2FS-fs (loop4): Start checkpoint disabled! [ 26.947346][ T439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 26.994018][ T25] usb 4-1: too many configurations: 235, using maximum allowed: 8 [ 27.078810][ T446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 27.087061][ T446] System zones: 0-2, 18-18, 34-34 [ 27.097016][ T446] EXT4-fs (loop0): 1 orphan inode deleted [ 27.102777][ T446] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue [ 27.116366][ T446] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.336571][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 27.398114][ T25] usb 4-1: can't read configurations, error -61 [ 27.618111][ T25] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 27.684086][ T301] usb 2-1: not running at top speed; connect to a high speed hub [ 27.790560][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.800965][ T301] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.810045][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.961204][ T25] usb 4-1: too many configurations: 235, using maximum allowed: 8 [ 28.514741][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.524432][ T25] usb 4-1: can't read configurations, error -61 [ 28.539124][ T25] usb usb4-port1: attempt power cycle [ 28.654257][ T301] uvcvideo: Found UVC 1.00 device (046d:0825) [ 28.655833][ T7] attempt to access beyond end of device [ 28.655833][ T7] loop4: rw=2049, want=40976, limit=40427 [ 28.661511][ T301] uvcvideo: No streaming interface found for terminal 2. [ 28.688183][ T301] usb 2-1: USB disconnect, device number 2 [ 28.782251][ T457] F2FS-fs (loop2): Unrecognized mount option "`ê" or missing value [ 28.848782][ T470] FAULT_INJECTION: forcing a failure. [ 28.848782][ T470] name failslab, interval 1, probability 0, space 0, times 0 [ 28.861613][ T470] CPU: 0 PID: 470 Comm: syz.2.41 Not tainted syzkaller #0 [ 28.868719][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.878774][ T470] Call Trace: [ 28.882298][ T470] __dump_stack+0x21/0x24 [ 28.886627][ T470] dump_stack_lvl+0x1a7/0x208 [ 28.891306][ T470] ? show_regs_print_info+0x18/0x18 [ 28.896504][ T470] dump_stack+0x15/0x1c [ 28.900654][ T470] should_fail+0x3ab/0x500 [ 28.905061][ T470] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 28.910864][ T470] __should_failslab+0xa4/0xe0 [ 28.915633][ T470] should_failslab+0x9/0x20 [ 28.920126][ T470] kmem_cache_alloc+0x3d/0x2d0 [ 28.924883][ T470] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 28.930684][ T470] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 28.936306][ T470] kvm_mmu_load+0x70/0x1600 [ 28.940888][ T470] vcpu_enter_guest+0x481c/0x70e0 [ 28.945911][ T470] ? local_bh_enable+0x30/0x30 [ 28.950672][ T470] ? 0xffffffffa0002d94 [ 28.954818][ T470] ? is_bpf_text_address+0x177/0x190 [ 28.957937][ T25] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 28.960090][ T470] ? __kernel_text_address+0xa0/0x100 [ 28.960107][ T470] ? unwind_get_return_address+0x4d/0x90 [ 28.978414][ T470] ? stack_trace_save+0xf0/0xf0 [ 28.983254][ T470] ? arch_stack_walk+0xee/0x140 [ 28.988098][ T470] ? stack_trace_save+0xa6/0xf0 [ 28.992930][ T470] ? stack_trace_snprint+0xe0/0xe0 [ 28.998019][ T470] ? kasan_set_track+0x5b/0x70 [ 29.002757][ T470] ? kasan_set_track+0x4a/0x70 [ 29.007497][ T470] ? kasan_set_free_info+0x23/0x40 [ 29.012584][ T470] ? ____kasan_slab_free+0x125/0x160 [ 29.017846][ T470] ? __kasan_slab_free+0x11/0x20 [ 29.022759][ T470] ? slab_free_freelist_hook+0xc5/0x190 [ 29.028283][ T470] ? kmem_cache_free+0x100/0x2d0 [ 29.033199][ T470] ? putname+0xfe/0x150 [ 29.037331][ T470] ? do_sys_openat2+0x68e/0x750 [ 29.042161][ T470] ? __x64_sys_openat+0x136/0x160 [ 29.047161][ T470] ? do_syscall_64+0x31/0x40 [ 29.051726][ T470] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.057768][ T470] ? _kstrtoull+0x3bb/0x4c0 [ 29.062248][ T470] ? kstrtouint_from_user+0x1c4/0x220 [ 29.067600][ T470] ? __kasan_check_read+0x11/0x20 [ 29.072600][ T470] ? vmx_vcpu_pi_load+0xac/0x3f0 [ 29.077514][ T470] ? __local_bh_enable_ip+0x53/0x80 [ 29.082785][ T470] ? kvm_load_guest_fpu+0x159/0x290 [ 29.087961][ T470] kvm_arch_vcpu_ioctl_run+0xaf5/0x18f0 [ 29.093482][ T470] kvm_vcpu_ioctl+0x7ea/0xbd0 [ 29.098134][ T470] ? kernel_write+0x3c0/0x3c0 [ 29.102790][ T470] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 29.108400][ T470] ? selinux_file_ioctl+0x3ad/0x4c0 [ 29.113575][ T470] ? mutex_trylock+0xb0/0xb0 [ 29.118138][ T470] ? __fget_files+0x2e1/0x340 [ 29.122789][ T470] ? selinux_file_alloc_security+0x120/0x120 [ 29.128741][ T470] ? __fget_files+0x2e1/0x340 [ 29.133398][ T470] ? security_file_ioctl+0x84/0xa0 [ 29.138485][ T470] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 29.144093][ T470] __se_sys_ioctl+0x121/0x1a0 [ 29.148747][ T470] __x64_sys_ioctl+0x7b/0x90 [ 29.153326][ T470] do_syscall_64+0x31/0x40 [ 29.157729][ T470] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.163601][ T470] RIP: 0033:0x7f3a4348b0d9 [ 29.167996][ T470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.187672][ T470] RSP: 002b:00007f3a41ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.196065][ T470] RAX: ffffffffffffffda RBX: 00007f3a43712fa0 RCX: 00007f3a4348b0d9 [ 29.204032][ T470] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 29.211979][ T470] RBP: 00007f3a41ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 29.220023][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.227984][ T470] R13: 00007f3a43713038 R14: 00007f3a43712fa0 R15: 00007fff7f997348 [ 29.243322][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 29.243331][ T24] audit: type=1400 audit(1786667417.300:201): avc: denied { watch } for pid=472 comm="syz.4.42" path="/8" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.287453][ T24] audit: type=1400 audit(1786667417.330:202): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.290332][ T25] usb 4-1: device descriptor read/8, error -71 [ 29.318591][ T476] EXT4-fs (loop3): Test dummy encryption mode enabled [ 29.325502][ T476] EXT4-fs (loop3): Ignoring removed orlov option [ 29.364873][ T476] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 29.364997][ T476] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.365247][ T24] audit: type=1400 audit(1786667417.419:203): avc: denied { mount } for pid=475 comm="syz.3.43" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.367626][ T482] xt_hashlimit: size too large, truncated to 1048576 [ 29.412944][ T24] audit: type=1400 audit(1786667417.439:204): avc: denied { read } for pid=478 comm="syz.1.44" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.443822][ T24] audit: type=1400 audit(1786667417.439:205): avc: denied { open } for pid=478 comm="syz.1.44" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.467030][ T24] audit: type=1400 audit(1786667417.439:206): avc: denied { ioctl } for pid=478 comm="syz.1.44" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.494856][ T479] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 29.502551][ T479] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.521991][ T280] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /9/mnt/lost+found: directory fails checksum at offset 6144 [ 29.536702][ T25] usb 4-1: device descriptor read/8, error -71 [ 29.545633][ T473] loop4: p1 < > p3 < > p4 [ 29.550554][ T473] loop4: partition table partially beyond EOD, truncated [ 29.558936][ T280] EXT4-fs (loop3): Remounting filesystem read-only [ 29.567041][ T479] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock, [ 29.585649][ T473] loop4: p4 start 1426063360 is beyond EOD, truncated [ 29.595912][ T479] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.727501][ T479] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.44: Freeing blocks not in datazone - block = 0, count = 16 [ 29.729336][ T302] udevd[302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 29.751107][ T479] EXT4-fs (loop1): Remounting filesystem read-only [ 29.766867][ T306] udevd[306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 29.779154][ T479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.44: bg 0: block 112: padding at end of block bitmap is not set [ 29.781221][ T489] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.793874][ T479] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 29.839266][ T24] audit: type=1400 audit(1786667417.896:207): avc: denied { create } for pid=497 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.847945][ T489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.874882][ T489] attempt to access beyond end of device [ 29.874882][ T489] loop3: rw=2049, want=45104, limit=40427 [ 29.892562][ T24] audit: type=1400 audit(1786667417.896:208): avc: denied { write } for pid=497 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.895005][ T280] attempt to access beyond end of device [ 29.895005][ T280] loop3: rw=2049, want=45120, limit=40427 [ 29.924142][ T24] audit: type=1400 audit(1786667417.896:209): avc: denied { ioctl } for pid=497 comm="syz.0.49" path="socket:[15801]" dev="sockfs" ino=15801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.950146][ T24] audit: type=1400 audit(1786667417.896:210): avc: denied { read } for pid=497 comm="syz.0.49" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.005492][ T299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.052558][ T520] FAT-fs (loop1): bogus number of FAT structure [ 30.061786][ T520] FAT-fs (loop1): Can't find a valid FAT filesystem [ 30.205769][ T523] EXT4-fs (loop3): Test dummy encryption mode enabled [ 30.212727][ T523] EXT4-fs (loop3): Ignoring removed orlov option [ 30.219862][ T523] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 30.233244][ T523] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.244131][ T531] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.250959][ T531] EXT4-fs (loop1): Ignoring removed orlov option [ 30.258222][ T531] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 30.271493][ T324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.271557][ T531] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.286142][ T534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.304279][ T531] overlayfs: failed to resolve './mnt': -2 [ 30.319108][ T534] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 30.356539][ T280] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /11/mnt/lost+found: directory fails checksum at offset 6144 [ 30.371548][ T280] EXT4-fs (loop3): Remounting filesystem read-only [ 30.388259][ T299] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.00 [ 30.397506][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.405977][ T299] usb 3-1: config 0 descriptor?? [ 30.449277][ T299] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 30.457068][ T299] usb 3-1: Detected SIO [ 30.461697][ T299] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.543901][ T541] EXT4-fs (loop3): Ignoring removed oldalloc option [ 30.559956][ T541] EXT4-fs (loop3): Ignoring removed oldalloc option [ 30.566628][ T541] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.580630][ T541] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 30.609751][ T324] usb 1-1: device descriptor read/64, error -71 [ 30.664648][ T321] usb 3-1: USB disconnect, device number 2 [ 30.671539][ T321] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.685875][ T321] ftdi_sio 3-1:0.0: device disconnected [ 30.758621][ T548] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.781008][ T299] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 30.781820][ T548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.803590][ T548] attempt to access beyond end of device [ 30.803590][ T548] loop4: rw=2049, want=45104, limit=40427 [ 30.819222][ T283] attempt to access beyond end of device [ 30.819222][ T283] loop4: rw=2049, want=45120, limit=40427 [ 31.022790][ T324] usb 1-1: device descriptor read/64, error -71 [ 31.093192][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.183854][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.194013][ T299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.204655][ T559] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.63: invalid indirect mapped block 10 (level 1) [ 31.217997][ T559] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.63: invalid indirect mapped block 8 (level 1) [ 31.231283][ T559] EXT4-fs (loop2): 1 truncate cleaned up [ 31.237000][ T559] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 31.274498][ T299] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 31.294723][ T324] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.395690][ T563] EXT4-fs (loop2): Test dummy encryption mode enabled [ 31.402502][ T563] EXT4-fs (loop2): Ignoring removed orlov option [ 31.409670][ T563] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 31.422975][ T563] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.437517][ T563] FAULT_INJECTION: forcing a failure. [ 31.437517][ T563] name failslab, interval 1, probability 0, space 0, times 0 [ 31.450222][ T563] CPU: 1 PID: 563 Comm: syz.2.64 Not tainted syzkaller #0 [ 31.457317][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.467341][ T563] Call Trace: [ 31.470602][ T563] __dump_stack+0x21/0x24 [ 31.474912][ T563] dump_stack_lvl+0x1a7/0x208 [ 31.479565][ T563] ? show_regs_print_info+0x18/0x18 [ 31.484730][ T563] dump_stack+0x15/0x1c [ 31.488858][ T563] should_fail+0x3ab/0x500 [ 31.493264][ T563] ? __alloc_file+0x28/0x320 [ 31.497843][ T563] __should_failslab+0xa4/0xe0 [ 31.502579][ T563] should_failslab+0x9/0x20 [ 31.507057][ T563] kmem_cache_alloc+0x3d/0x2d0 [ 31.511792][ T563] __alloc_file+0x28/0x320 [ 31.516180][ T563] alloc_empty_file+0x97/0x180 [ 31.520910][ T563] dentry_open+0x4e/0x100 [ 31.525219][ T563] ovl_path_open+0x128/0x150 [ 31.526274][ T299] usb 2-1: string descriptor 0 read error: -22 [ 31.529790][ T563] ovl_dir_read+0x29/0x530 [ 31.529800][ T563] ? ovl_path_next+0x17c/0x280 [ 31.529815][ T563] ovl_dir_read_merged+0x250/0x340 [ 31.535985][ T299] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 31.540341][ T563] ? ovl_check_empty_dir+0x480/0x480 [ 31.540349][ T563] ? ovl_indexdir_cleanup+0x750/0x750 [ 31.540361][ T563] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 31.540367][ T563] ? ovl_iterate+0xede/0x1e50 [ 31.540375][ T563] ovl_iterate+0xfa7/0x1e50 [ 31.540384][ T563] ? ovl_dir_llseek+0x510/0x510 [ 31.540400][ T563] ? memset+0x35/0x40 [ 31.545175][ T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.550232][ T563] ? fsnotify+0x19ce/0x1a90 [ 31.550242][ T563] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 31.550251][ T563] ? proc_fail_nth_read+0x220/0x220 [ 31.550266][ T563] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 31.623611][ T563] ? rw_verify_area+0x1c0/0x360 [ 31.628433][ T563] ? vfs_write+0xae4/0xd70 [ 31.632823][ T563] ? __kasan_check_write+0x14/0x20 [ 31.637908][ T563] ? down_write_killable+0xb2/0x130 [ 31.643163][ T563] ? down_write+0x120/0x120 [ 31.647640][ T563] ? security_file_permission+0x83/0xa0 [ 31.653157][ T563] iterate_dir+0x25c/0x560 [ 31.657545][ T563] __se_sys_getdents64+0xf2/0x250 [ 31.662553][ T563] ? __x64_sys_getdents64+0x90/0x90 [ 31.667735][ T563] ? ksys_write+0x1fa/0x260 [ 31.672211][ T563] ? filldir+0x660/0x660 [ 31.676422][ T563] ? __ia32_sys_read+0x90/0x90 [ 31.681158][ T563] ? __se_sys_chdir+0x180/0x220 [ 31.685994][ T563] ? debug_smp_processor_id+0x17/0x20 [ 31.691356][ T563] __x64_sys_getdents64+0x7b/0x90 [ 31.696350][ T563] do_syscall_64+0x31/0x40 [ 31.700735][ T563] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.706606][ T563] RIP: 0033:0x7f3a4348b0d9 [ 31.711014][ T563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.730618][ T563] RSP: 002b:00007f3a41ee4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 31.739004][ T563] RAX: ffffffffffffffda RBX: 00007f3a43712fa0 RCX: 00007f3a4348b0d9 [ 31.746947][ T563] RDX: 0000000000000ff9 RSI: 0000200000001280 RDI: 0000000000000004 [ 31.754902][ T563] RBP: 00007f3a41ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 31.762849][ T563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.770803][ T563] R13: 00007f3a43713038 R14: 00007f3a43712fa0 R15: 00007fff7f997348 [ 31.783601][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /15/mnt/lost+found: directory fails checksum at offset 6144 [ 31.798450][ T25] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.806689][ T25] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 31.815819][ T25] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 31.820666][ T299] usb 2-1: USB disconnect, device number 3 [ 31.824835][ T282] EXT4-fs (loop2): Remounting filesystem read-only [ 31.837561][ T25] usb 4-1: config 220 has an invalid descriptor of length 237, skipping remainder of the config [ 31.849355][ T324] usb 1-1: device descriptor read/64, error -71 [ 31.855675][ T25] usb 4-1: config 220 has no interface number 2 [ 31.862010][ T25] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.875146][ T25] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.881919][ T25] usb 4-1: config 220 interface 76 has no altsetting 0 [ 31.888823][ T56] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 31.896880][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.907784][ T25] usb 4-1: config 220 interface 1 has no altsetting 0 [ 31.914662][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.924392][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.937329][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.946358][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.955276][ T56] usb 5-1: config 0 descriptor?? [ 32.070081][ T25] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 32.079222][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.087230][ T25] usb 4-1: Product: syz [ 32.091574][ T25] usb 4-1: Manufacturer: syz [ 32.096147][ T25] usb 4-1: SerialNumber: syz [ 32.241207][ T324] usb 1-1: device descriptor read/64, error -71 [ 32.271398][ T321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.362148][ T324] usb usb1-port1: attempt power cycle [ 32.443255][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 32.451352][ T56] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 32.460395][ T56] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 32.472909][ T25] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 32.479313][ T25] uvcvideo: No valid video chain found. [ 32.487708][ T25] usb 4-1: selecting invalid altsetting 0 [ 32.543260][ T321] usb 3-1: Using ep0 maxpacket: 16 [ 32.577579][ T25] usb 4-1: USB disconnect, device number 6 [ 32.664148][ T321] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 32.672309][ T321] usb 3-1: config 0 has no interface number 0 [ 32.678412][ T321] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 32.687377][ T557] EXT4-fs (loop4): Ignoring removed orlov option [ 32.688471][ T321] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 32.705439][ T557] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 32.730030][ T299] usb 5-1: USB disconnect, device number 3 [ 32.774904][ T324] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.885665][ T321] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 32.894759][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.902832][ T321] usb 3-1: Product: syz [ 32.907108][ T321] usb 3-1: Manufacturer: syz [ 32.911689][ T321] usb 3-1: SerialNumber: syz [ 32.916823][ T321] usb 3-1: config 0 descriptor?? [ 32.946266][ T568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 32.953375][ T324] usb 1-1: device descriptor read/8, error -71 [ 32.955385][ T568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 32.960516][ T577] netlink: 'syz.3.67': attribute type 19 has an invalid length. [ 33.031676][ T579] device syzkaller0 entered promiscuous mode [ 33.107928][ T581] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.114795][ T581] EXT4-fs (loop0): Ignoring removed orlov option [ 33.121955][ T581] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 33.135295][ T581] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.159648][ T281] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /8/mnt/lost+found: directory fails checksum at offset 6144 [ 33.174325][ T324] usb 1-1: device descriptor read/8, error -71 [ 33.174477][ T281] EXT4-fs (loop0): Remounting filesystem read-only [ 33.199703][ T568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 33.206645][ T568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 33.248016][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.249627][ T585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.264643][ T585] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.432460][ T592] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.438106][ T321] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 33.457699][ T592] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.473593][ T592] attempt to access beyond end of device [ 33.473593][ T592] loop4: rw=2049, want=45104, limit=40427 [ 33.482974][ T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.493859][ T596] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.494037][ T283] attempt to access beyond end of device [ 33.494037][ T283] loop4: rw=2049, want=45120, limit=40427 [ 33.515580][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 33.518317][ T596] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 33.520730][ T56] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 33.648144][ T321] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: 00 [ 33.678081][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.688432][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.700731][ T25] usb 4-1: config 1 has no interface number 0 [ 33.858104][ T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 33.867157][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.875225][ T25] usb 4-1: Product: syz [ 33.879392][ T25] usb 4-1: Manufacturer: syz [ 33.883957][ T25] usb 4-1: SerialNumber: syz [ 33.889685][ T568] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.899914][ T568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 33.909016][ T568] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.915618][ T568] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.65: attempt to clear invalid blocks 1024 len 1 [ 33.928546][ T566] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 33.928911][ T568] EXT4-fs (loop2): Remounting filesystem read-only [ 33.936104][ T56] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.942961][ T568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.65: bg 0: block 361: padding at end of block bitmap is not set [ 33.954369][ T56] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 33.968239][ T568] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 33.978504][ T56] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.987276][ T568] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.65: invalid indirect mapped block 1811939328 (level 0) [ 33.999767][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.999785][ T56] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 34.014787][ T568] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.65: invalid indirect mapped block 2185560079 (level 1) [ 34.020057][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.023600][ T56] usb 2-1: config 0 descriptor?? [ 34.051149][ T568] EXT4-fs (loop2): 1 truncate cleaned up [ 34.061442][ T568] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,usrjquota= [ 34.074787][ T587] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.098060][ T321] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.128057][ T321] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 34.138597][ T321] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 34.178122][ T321] asix: probe of 3-1:0.34 failed with error -71 [ 34.185767][ T321] usb 3-1: USB disconnect, device number 3 [ 34.208037][ T324] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.215541][ T566] usb 5-1: Using ep0 maxpacket: 16 [ 34.268119][ T25] usb 4-1: Unsupported UAC3 BADD profile [ 34.273816][ T25] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 34.282778][ T25] usb 4-1: USB disconnect, device number 7 [ 34.318143][ T324] usb 1-1: Using ep0 maxpacket: 32 [ 34.358114][ T566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.369087][ T566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.378825][ T566] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.391680][ T566] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.400728][ T566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.409330][ T566] usb 5-1: config 0 descriptor?? [ 34.448106][ T324] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.456299][ T324] usb 1-1: config 0 has no interface number 0 [ 34.462969][ T324] usb 1-1: config 0 interface 184 has no altsetting 0 [ 34.538651][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.545374][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.552918][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.559681][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.566349][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.573124][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.579836][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.586510][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.593437][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.600157][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.606972][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.613886][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.620587][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.627254][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.633987][ T324] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.643236][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.650099][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.658343][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.665041][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.671752][ T324] usb 1-1: Product: syz [ 34.678611][ T616] udc-core: couldn't find an available UDC or it's busy [ 34.681047][ T324] usb 1-1: Manufacturer: syz [ 34.685558][ T616] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.690202][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.704239][ T324] usb 1-1: SerialNumber: syz [ 34.709174][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.715992][ T324] usb 1-1: config 0 descriptor?? [ 34.721004][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.727677][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.731452][ T615] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.734700][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.748026][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.749888][ T615] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 34.754809][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.754825][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.793966][ T324] smsc75xx v1.0.0 [ 34.797677][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.804417][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.811341][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.822682][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.829541][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.836228][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.842944][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.849676][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.856335][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.863674][ T566] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 34.871194][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.877855][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.886087][ T566] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 34.895187][ T566] microsoft 0003:045E:07DA.0004: implement() called with n (152) > 32! (kworker/1:5) [ 34.904969][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.911778][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.918732][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.925467][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.929204][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 34.929213][ T24] audit: type=1400 audit(1786667678.953:232): avc: denied { create } for pid=620 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.932512][ T56] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 34.964401][ T321] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.972225][ T56] lua 0003:1E7D:2C2E.0003: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 34.988096][ T56] usb 2-1: USB disconnect, device number 4 [ 35.020437][ T609] FAT-fs (loop0): Directory bread(block 64) failed [ 35.027081][ T609] FAT-fs (loop0): Directory bread(block 65) failed [ 35.033843][ T609] FAT-fs (loop0): Directory bread(block 66) failed [ 35.034777][ T628] fido_id[628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 35.040847][ T609] FAT-fs (loop0): Directory bread(block 67) failed [ 35.061222][ T609] FAT-fs (loop0): Directory bread(block 68) failed [ 35.068095][ T609] FAT-fs (loop0): Directory bread(block 69) failed [ 35.076116][ T609] FAT-fs (loop0): Directory bread(block 70) failed [ 35.082861][ T609] FAT-fs (loop0): Directory bread(block 71) failed [ 35.083241][ T566] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 35.089435][ T609] FAT-fs (loop0): Directory bread(block 72) failed [ 35.103881][ T609] FAT-fs (loop0): Directory bread(block 73) failed [ 35.111674][ T566] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 35.125751][ T566] microsoft 0003:045E:07DA.0004: no inputs found [ 35.132890][ T566] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 35.137499][ T630] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.151995][ T566] usb 5-1: USB disconnect, device number 4 [ 35.157586][ T630] EXT4-fs (loop2): Ignoring removed orlov option [ 35.166993][ T630] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 35.170389][ T632] fido_id[632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 35.187326][ T630] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.219913][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /19/mnt/lost+found: directory fails checksum at offset 6144 [ 35.234825][ T282] EXT4-fs (loop2): Remounting filesystem read-only [ 35.278063][ T321] usb 4-1: device descriptor read/64, error -71 [ 35.333333][ T638] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 35.678015][ T388] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.685597][ T321] usb 4-1: device descriptor read/64, error -71 [ 35.698670][ T647] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 35.791859][ T24] audit: type=1400 audit(1786667679.823:233): avc: denied { ioctl } for pid=646 comm="syz.4.85" path="/18/file0/file1" dev="loop4" ino=15 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.791983][ T647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 35.825168][ T647] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 35.968031][ T321] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.018549][ T653] tipc: Started in network mode [ 36.023447][ T653] tipc: Own node identity 10101, cluster identity 4711 [ 36.034088][ T653] tipc: 32-bit node address hash set to 10101 [ 36.041341][ T653] tipc: Enabled bearer , priority 0 [ 36.139813][ T658] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.148445][ T658] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 36.156874][ T658] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.87: bad orphan inode 15 [ 36.167197][ T658] ext4_test_bit(bit=14, block=4) = 1 [ 36.173212][ T658] is_bad_inode(inode)=0 [ 36.177372][ T658] NEXT_ORPHAN(inode)=0 [ 36.181565][ T388] usb 2-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 36.191985][ T388] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 36.200946][ T658] max_ino=32 [ 36.204139][ T658] i_nlink=1 [ 36.207306][ T658] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,usrjquota="errors=continue,noload,journal_ioprio=0x0000000000000004,grpjquota="errors=continue,inode_readahead_blks=0x0000000000004000,jqfmt=vfsv1,,errors=continue [ 36.258069][ T321] usb 4-1: device descriptor read/64, error -71 [ 36.286728][ T24] audit: type=1400 audit(1786667680.313:234): avc: denied { nlmsg_write } for pid=663 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.298187][ T669] xt_hashlimit: size too large, truncated to 1048576 [ 36.325892][ T664] overlayfs: missing 'lowerdir' [ 36.331645][ T24] audit: type=1400 audit(1786667680.363:235): avc: denied { remount } for pid=663 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.411523][ T674] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.424831][ T674] EXT4-fs (loop4): Ignoring removed orlov option [ 36.432349][ T674] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 36.438077][ T388] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 36.446120][ T674] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.462214][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.482781][ T388] usb 2-1: Product: syz [ 36.493139][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /22/mnt/lost+found: directory fails checksum at offset 6144 [ 36.494537][ T388] usb 2-1: Manufacturer: syz [ 36.510996][ T283] EXT4-fs (loop4): Remounting filesystem read-only [ 36.512665][ T388] usb 2-1: SerialNumber: syz [ 36.613778][ T678] EXT4-fs (loop2): Ignoring removed oldalloc option [ 36.622794][ T678] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 36.640361][ T24] audit: type=1400 audit(1786667680.673:236): avc: denied { write } for pid=677 comm="syz.2.92" path="/23/bus/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.641094][ T678] netlink: 'syz.2.92': attribute type 12 has an invalid length. [ 36.674055][ T678] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 36.681811][ T678] netlink: 148 bytes leftover after parsing attributes in process `syz.2.92'. [ 36.690670][ T678] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 36.698006][ T321] usb 4-1: device descriptor read/64, error -71 [ 36.698648][ T678] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 36.718035][ T324] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 36.729113][ T324] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 36.738932][ T324] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 36.749304][ T324] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 36.758806][ T324] usb 1-1: USB disconnect, device number 6 [ 36.768007][ T24] audit: type=1400 audit(1786667680.793:237): avc: denied { mount } for pid=686 comm="syz.0.95" name="/" dev="ramfs" ino=16016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.771902][ T643] 9pnet: Could not find request transport: %« [ 36.824115][ T695] cgroup: syz.2.97 (695) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 36.840387][ T695] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 36.843019][ T321] usb usb4-port1: attempt power cycle [ 36.855747][ T388] usb 2-1: USB disconnect, device number 5 [ 36.938053][ T566] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.128016][ T299] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 37.168037][ T324] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.178016][ T566] usb 5-1: Using ep0 maxpacket: 8 [ 37.268017][ T321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.339011][ T566] usb 5-1: unable to get BOS descriptor or descriptor too short [ 37.356771][ T705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.100'. [ 37.391674][ T705] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 8: comm syz.1.100: lblock 0 mapped to illegal pblock 8 (length 1) [ 37.405877][ T705] EXT4-fs (loop1): Remounting filesystem read-only [ 37.408031][ T299] usb 3-1: device descriptor read/64, error -71 [ 37.412590][ T705] EXT4-fs warning (device loop1): dx_probe:796: inode #2: lblock 0: comm syz.1.100: error -117 reading directory block [ 37.431151][ T566] usb 5-1: config 94 has an invalid descriptor of length 177, skipping remainder of the config [ 37.438247][ T705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 37.441546][ T566] usb 5-1: config 94 has 0 interfaces, different from the descriptor's value: 1 [ 37.450056][ T705] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 8: comm syz.1.100: lblock 0 mapped to illegal pblock 8 (length 1) [ 37.472823][ T705] EXT4-fs warning (device loop1): dx_probe:796: inode #2: lblock 0: comm syz.1.100: error -117 reading directory block [ 37.485511][ T705] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 37.493791][ T321] usb 4-1: device descriptor read/8, error -71 [ 37.493837][ T705] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,max_dir_size_kb=0x0000000000000080,grpjquota=.min_batch_time=0x0000000000000005,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,usrjquota=.,nolazytime,jqfmt=vfsv1,, [ 37.558187][ T324] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 37.569562][ T324] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 64 [ 37.577032][ T24] audit: type=1400 audit(1786667681.603:238): avc: denied { getopt } for pid=708 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.585454][ T324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 37.658102][ T566] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.658825][ T709] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.667211][ T566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.675432][ T709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.683403][ T566] usb 5-1: Product: syz [ 37.695468][ T566] usb 5-1: Manufacturer: syz [ 37.700205][ T566] usb 5-1: SerialNumber: syz [ 37.704869][ T709] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.711307][ T709] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.716379][ T714] xt_hashlimit: size too large, truncated to 1048576 [ 37.717790][ T709] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 37.733892][ T709] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.748482][ T321] usb 4-1: device descriptor read/8, error -71 [ 37.754660][ T709] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 37.761426][ T709] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.101: bad orphan inode 16 [ 37.768068][ T324] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.771609][ T709] ext4_test_bit(bit=15, block=18) = 1 [ 37.785733][ T709] is_bad_inode(inode)=0 [ 37.787997][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.790023][ T709] NEXT_ORPHAN(inode)=0 [ 37.802055][ T709] max_ino=32 [ 37.805245][ T709] i_nlink=2 [ 37.807993][ T324] usb 1-1: Product: syz [ 37.808416][ T709] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue [ 37.812845][ T324] usb 1-1: Manufacturer: syz [ 37.833719][ T324] usb 1-1: SerialNumber: syz [ 37.858017][ T299] usb 3-1: device descriptor read/64, error -71 [ 37.972010][ T722] process 'syz.3.105' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 37.988660][ T24] audit: type=1400 audit(1786667682.023:239): avc: denied { bind } for pid=721 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.009285][ T24] audit: type=1400 audit(1786667682.043:240): avc: denied { getopt } for pid=721 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.037863][ T717] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 38.052858][ T717] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 38.062297][ T717] F2FS-fs (loop1): invalid crc value [ 38.079304][ T687] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 38.093951][ T566] usb 5-1: USB disconnect, device number 5 [ 38.104261][ T717] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.138073][ T299] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 38.145623][ T717] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 38.152867][ T717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.166294][ T737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 38.230903][ T717] attempt to access beyond end of device [ 38.230903][ T717] loop1: rw=2049, want=77960, limit=40427 [ 38.248338][ T717] attempt to access beyond end of device [ 38.248338][ T717] loop1: rw=2049, want=77960, limit=40427 [ 38.269096][ T279] attempt to access beyond end of device [ 38.269096][ T279] loop1: rw=2049, want=45104, limit=40427 [ 38.448009][ T299] usb 3-1: device descriptor read/64, error -71 [ 38.558006][ T321] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.628067][ T687] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 38.658223][ T566] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.690288][ T751] F2FS-fs (loop1): Allow to mount readonly mode only [ 38.808066][ T324] cdc_ncm 1-1:1.0: bind() failure [ 38.814151][ T324] cdc_ncm 1-1:1.1: bind() failure [ 38.828042][ T321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.848260][ T299] usb 3-1: device descriptor read/64, error -71 [ 38.888696][ T757] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 38.896059][ T757] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.918092][ T321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.919187][ T757] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock, [ 38.928564][ T321] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.946648][ T757] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.955516][ T321] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.979004][ T757] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.113: Freeing blocks not in datazone - block = 0, count = 16 [ 38.979812][ T299] usb usb3-port1: attempt power cycle [ 38.992353][ T757] EXT4-fs (loop1): Remounting filesystem read-only [ 39.004172][ T757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.113: bg 0: block 112: padding at end of block bitmap is not set [ 39.018647][ T757] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 39.058050][ T566] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 39.066053][ T566] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.076257][ T566] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 39.085271][ T566] usb 5-1: config 1 has no interface number 1 [ 39.091408][ T566] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 39.104274][ T566] usb 5-1: config 1 interface 0 has no altsetting 0 [ 39.158039][ T321] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 39.167152][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.175142][ T321] usb 4-1: Product: syz [ 39.179355][ T321] usb 4-1: Manufacturer: syz [ 39.183923][ T321] usb 4-1: SerialNumber: syz [ 39.308066][ T566] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 39.317157][ T566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.325186][ T566] usb 5-1: Product: syz [ 39.329383][ T566] usb 5-1: Manufacturer: syz [ 39.333976][ T566] usb 5-1: SerialNumber: syz [ 39.358017][ T388] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.398522][ T566] usb-storage 5-1:1.4: USB Mass Storage device detected [ 39.406138][ T566] usb-storage 5-1:1.4: Quirks match for vid 174c pid 55aa: 400000 [ 39.408019][ T299] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 39.414216][ T566] scsi host1: usb-storage 5-1:1.4 [ 39.427609][ T566] usb-storage 5-1:1.0: USB Mass Storage device detected [ 39.429037][ T746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.109'. [ 39.435225][ T566] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 39.488520][ T321] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 39.496445][ T321] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 39.502557][ T321] usb 4-1: 1:1 : invalid channels 0 [ 39.521489][ T321] usb 4-1: USB disconnect, device number 11 [ 39.588037][ T299] usb 3-1: device descriptor read/8, error -71 [ 39.603551][ T507] usb 5-1: USB disconnect, device number 6 [ 39.728559][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.758074][ T388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.777127][ T321] usb 1-1: USB disconnect, device number 7 [ 39.803063][ T773] udc-core: couldn't find an available UDC or it's busy [ 39.810061][ T773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.838038][ T388] usb 2-1: config 129 has an invalid interface number: 172 but max is 0 [ 39.846398][ T388] usb 2-1: config 129 has no interface number 0 [ 39.852909][ T388] usb 2-1: config 129 interface 172 has no altsetting 0 getty: ttyS0: re[ 39.878024][ T299] usb 3-1: device descriptor read/8, error -71 [ 39.949004][ T773] F2FS-fs (loop0): invalid crc value [ 39.954916][ T776] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 39.974799][ T776] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 39.975217][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 39.975227][ T24] audit: type=1400 audit(1786667684.003:246): avc: denied { create } for pid=781 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.986155][ T773] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 9 [ 39.989747][ T24] audit: type=1400 audit(1786667684.013:247): avc: denied { bind } for pid=781 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.009174][ T773] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 40.015229][ T24] audit: type=1400 audit(1786667684.013:248): avc: denied { listen } for pid=781 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.061677][ T388] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=2f.45 [ 40.071209][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.079348][ T388] usb 2-1: Product: syz [ 40.083726][ T388] usb 2-1: Manufacturer: ꔏ甲뙙騰ṩ᙮〕葜돾䡈沧䩂隢ﵕ摛刭䴸৲称ڏ妕๭攵돈༾썦岍₮⍩梸ꯑ [ 40.083744][ T24] audit: type=1400 audit(1786667684.013:249): avc: denied { connect } for pid=781 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.097304][ T388] usb 2-1: SerialNumber: syz [ 40.118429][ T24] audit: type=1400 audit(1786667684.013:250): avc: denied { write } for pid=781 comm="syz.3.118" path="socket:[16196]" dev="sockfs" ino=16196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.144363][ T24] audit: type=1400 audit(1786667684.063:251): avc: denied { mount } for pid=781 comm="syz.3.118" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 40.210943][ T786] FAULT_INJECTION: forcing a failure. [ 40.210943][ T786] name failslab, interval 1, probability 0, space 0, times 0 [ 40.218036][ T321] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.223566][ T786] CPU: 1 PID: 786 Comm: syz.3.119 Not tainted syzkaller #0 [ 40.238131][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.248169][ T786] Call Trace: [ 40.251437][ T786] __dump_stack+0x21/0x24 [ 40.255742][ T786] dump_stack_lvl+0x1a7/0x208 [ 40.260390][ T786] ? show_regs_print_info+0x18/0x18 [ 40.265562][ T786] ? fib6_nh_init+0x16b1/0x1cf0 [ 40.270387][ T786] dump_stack+0x15/0x1c [ 40.274518][ T786] should_fail+0x3ab/0x500 [ 40.278910][ T786] ? fib6_add+0x85f/0x3c60 [ 40.283303][ T786] __should_failslab+0xa4/0xe0 [ 40.288045][ T786] should_failslab+0x9/0x20 [ 40.292537][ T786] kmem_cache_alloc+0x3d/0x2d0 [ 40.297275][ T786] fib6_add+0x85f/0x3c60 [ 40.301490][ T786] ? ipv6_addr_prefix+0x42/0x170 [ 40.306399][ T786] ? fib6_update_sernum_stub+0x190/0x190 [ 40.312007][ T786] ? __kasan_check_write+0x14/0x20 [ 40.317103][ T786] ? _raw_spin_lock_bh+0x94/0xf0 [ 40.322011][ T786] ? _raw_spin_lock_irq+0xf0/0xf0 [ 40.327011][ T786] ip6_route_add+0x89/0x130 [ 40.331488][ T786] inet6_addr_modify+0x107d/0x1730 [ 40.336575][ T786] ? inet6_set_link_af+0xa10/0xa10 [ 40.341664][ T786] ? ipv6_dev_find+0x40/0x40 [ 40.346236][ T786] ? __local_bh_enable_ip+0x53/0x80 [ 40.351414][ T786] ? ipv6_mc_up+0x217/0x2a0 [ 40.355890][ T786] inet6_rtm_newaddr+0x69f/0x9c0 [ 40.360813][ T786] ? inet6_dump_ifinfo+0x730/0x730 [ 40.365916][ T786] ? ns_capable+0x8c/0xf0 [ 40.370232][ T786] ? netlink_net_capable+0x125/0x160 [ 40.375499][ T786] ? inet6_dump_ifinfo+0x730/0x730 [ 40.380595][ T786] rtnetlink_rcv_msg+0x9e9/0xca0 [ 40.385518][ T786] ? unwind_get_return_address+0x4d/0x90 [ 40.391130][ T786] ? rtnetlink_bind+0x80/0x80 [ 40.395786][ T786] ? stack_trace_save+0xa6/0xf0 [ 40.400621][ T786] ? stack_trace_snprint+0xe0/0xe0 [ 40.405708][ T786] ? avc_has_perm+0x168/0x3d0 [ 40.410362][ T786] ? memcpy+0x56/0x70 [ 40.414316][ T786] ? avc_has_perm+0x27f/0x3d0 [ 40.418967][ T786] ? __kasan_slab_alloc+0xc9/0xe0 [ 40.423964][ T786] ? avc_has_perm_noaudit+0x260/0x260 [ 40.429309][ T786] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.435350][ T786] ? selinux_nlmsg_lookup+0x37e/0x430 [ 40.440694][ T786] netlink_rcv_skb+0x1e9/0x430 [ 40.445432][ T786] ? rtnetlink_bind+0x80/0x80 [ 40.450084][ T786] ? netlink_ack+0xb30/0xb30 [ 40.454652][ T786] ? __netlink_lookup+0x387/0x3b0 [ 40.459652][ T786] rtnetlink_rcv+0x1c/0x20 [ 40.464040][ T786] netlink_unicast+0x86c/0xa30 [ 40.468780][ T786] netlink_sendmsg+0x949/0xb70 [ 40.473516][ T786] ? netlink_getsockopt+0x530/0x530 [ 40.478687][ T786] ? kasan_set_track+0x5b/0x70 [ 40.483425][ T786] ? slab_free_freelist_hook+0xc5/0x190 [ 40.488943][ T786] ? security_socket_sendmsg+0x82/0xa0 [ 40.494373][ T786] ? netlink_getsockopt+0x530/0x530 [ 40.499543][ T786] ____sys_sendmsg+0x5be/0x8f0 [ 40.504279][ T786] ? __sys_sendmsg_sock+0x40/0x40 [ 40.509277][ T786] ? import_iovec+0x7c/0xb0 [ 40.513759][ T786] ___sys_sendmsg+0x236/0x2e0 [ 40.518412][ T786] ? __sys_sendmsg+0x280/0x280 [ 40.523150][ T786] ? rw_verify_area+0x1c0/0x360 [ 40.527981][ T786] ? __fdget+0x1a1/0x230 [ 40.532197][ T786] __x64_sys_sendmsg+0x201/0x2d0 [ 40.537104][ T786] ? fput+0x1a/0x20 [ 40.540884][ T786] ? ___sys_sendmsg+0x2e0/0x2e0 [ 40.545717][ T786] ? debug_smp_processor_id+0x17/0x20 [ 40.551067][ T786] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 40.557106][ T786] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 40.562712][ T786] do_syscall_64+0x31/0x40 [ 40.567102][ T786] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.572967][ T786] RIP: 0033:0x7f64644e80d9 [ 40.577361][ T786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.596936][ T786] RSP: 002b:00007f6462f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.605323][ T786] RAX: ffffffffffffffda RBX: 00007f646476ffa0 RCX: 00007f64644e80d9 [ 40.613269][ T786] RDX: 0000000000044014 RSI: 0000200000000140 RDI: 0000000000000003 [ 40.621216][ T786] RBP: 00007f6462f41090 R08: 0000000000000000 R09: 0000000000000000 [ 40.629339][ T786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.637283][ T786] R13: 00007f6464770038 R14: 00007f646476ffa0 R15: 00007fff7271c4b8 [ 40.653501][ T762] usb usb8: usbfs: process 762 (syz.1.114) did not claim interface 0 before use [ 40.683136][ T24] audit: type=1400 audit(1786667684.713:252): avc: denied { mount } for pid=761 comm="syz.1.114" name="/" dev="ramfs" ino=17201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.706698][ T40] Bluetooth: hci0: setting up ROME/QCA6390 [ 40.712830][ T321] usb 1-1: device descriptor read/64, error -71 Hü[ 40.719414][ T24] audit: type=1400 audit(1786667684.743:253): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.724541][ T789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 40.788444][ T24] audit: type=1400 audit(1786667684.823:254): avc: denied { mounton } for pid=761 comm="syz.1.114" path="/file0" dev="ramfs" ino=17202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 40.813076][ T762] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.836346][ T796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=796 comm=syz.2.122 [ 40.838376][ T24] audit: type=1400 audit(1786667684.853:255): avc: denied { create } for pid=788 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.990270][ T800] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.001460][ T388] usb 2-1: USB disconnect, device number 6 [ 41.017985][ T800] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 41.035904][ T800] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) ü[ 41.065738][ T805] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 41.078084][ T805] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.117996][ T321] usb 1-1: device descriptor read/64, error -71 [ 41.135529][ T805] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock, [ 41.160350][ T805] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.199027][ T805] EXT4-fs error (device loop4): ext4_free_blocks:5690: comm syz.4.124: Freeing blocks not in datazone - block = 0, count = 16 [ 41.213583][ T805] EXT4-fs (loop4): Remounting filesystem read-only [ 41.228049][ T805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.124: bg 0: block 112: padding at end of block bitmap is not set [ 41.242869][ T805] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 41.329784][ T811] FAULT_INJECTION: forcing a failure. [ 41.329784][ T811] name failslab, interval 1, probability 0, space 0, times 0 [ 41.342412][ T811] CPU: 0 PID: 811 Comm: syz.4.125 Not tainted syzkaller #0 [ 41.349582][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.359616][ T811] Call Trace: [ 41.362910][ T811] __dump_stack+0x21/0x24 [ 41.367215][ T811] dump_stack_lvl+0x1a7/0x208 [ 41.371869][ T811] ? show_regs_print_info+0x18/0x18 [ 41.377080][ T811] dump_stack+0x15/0x1c [ 41.381214][ T811] should_fail+0x3ab/0x500 [ 41.385608][ T811] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 41.391493][ T811] __should_failslab+0xa4/0xe0 [ 41.396239][ T811] should_failslab+0x9/0x20 [ 41.400721][ T811] kmem_cache_alloc+0x3d/0x2d0 [ 41.405467][ T811] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 41.411248][ T811] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 41.416892][ T811] kvm_mmu_load+0x70/0x1600 [ 41.421370][ T811] vcpu_enter_guest+0x481c/0x70e0 [ 41.426372][ T811] ? local_bh_enable+0x30/0x30 [ 41.431132][ T811] ? 0xffffffffa0028e90 [ 41.435277][ T811] ? is_bpf_text_address+0x177/0x190 [ 41.440632][ T811] ? __kernel_text_address+0xa0/0x100 [ 41.445990][ T811] ? unwind_get_return_address+0x4d/0x90 [ 41.451596][ T811] ? stack_trace_save+0xf0/0xf0 [ 41.456421][ T811] ? arch_stack_walk+0xee/0x140 [ 41.461253][ T811] ? stack_trace_save+0xa6/0xf0 [ 41.466074][ T811] ? stack_trace_snprint+0xe0/0xe0 [ 41.471159][ T811] ? kasan_set_track+0x5b/0x70 [ 41.475895][ T811] ? kasan_set_track+0x4a/0x70 [ 41.480645][ T811] ? kasan_set_free_info+0x23/0x40 [ 41.485735][ T811] ? ____kasan_slab_free+0x125/0x160 [ 41.491013][ T811] ? __kasan_slab_free+0x11/0x20 [ 41.495923][ T811] ? slab_free_freelist_hook+0xc5/0x190 [ 41.501460][ T811] ? kmem_cache_free+0x100/0x2d0 [ 41.506378][ T811] ? putname+0xfe/0x150 [ 41.510515][ T811] ? do_sys_openat2+0x68e/0x750 [ 41.515343][ T811] ? __x64_sys_openat+0x136/0x160 [ 41.520341][ T811] ? do_syscall_64+0x31/0x40 [ 41.524912][ T811] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.530953][ T811] ? _kstrtoull+0x3bb/0x4c0 [ 41.535428][ T811] ? kstrtouint_from_user+0x1c4/0x220 [ 41.540860][ T811] ? __kasan_check_read+0x11/0x20 [ 41.545860][ T811] ? vmx_vcpu_pi_load+0xac/0x3f0 [ 41.550773][ T811] ? __local_bh_enable_ip+0x53/0x80 [ 41.555945][ T811] ? kvm_load_guest_fpu+0x159/0x290 [ 41.561119][ T811] kvm_arch_vcpu_ioctl_run+0xaf5/0x18f0 [ 41.566639][ T811] kvm_vcpu_ioctl+0x7ea/0xbd0 [ 41.571289][ T811] ? kernel_write+0x3c0/0x3c0 [ 41.575948][ T811] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 41.581554][ T811] ? selinux_file_ioctl+0x3ad/0x4c0 [ 41.586734][ T811] ? mutex_trylock+0xb0/0xb0 [ 41.591315][ T811] ? __fget_files+0x2e1/0x340 [ 41.595986][ T811] ? selinux_file_alloc_security+0x120/0x120 [ 41.601950][ T811] ? __fget_files+0x2e1/0x340 [ 41.606616][ T811] ? security_file_ioctl+0x84/0xa0 [ 41.611717][ T811] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 41.617343][ T811] __se_sys_ioctl+0x121/0x1a0 [ 41.622001][ T811] __x64_sys_ioctl+0x7b/0x90 [ 41.626637][ T811] do_syscall_64+0x31/0x40 [ 41.631026][ T811] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.636888][ T811] RIP: 0033:0x7f74d9c690d9 [ 41.641283][ T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.660875][ T811] RSP: 002b:00007f74d86c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.669527][ T811] RAX: ffffffffffffffda RBX: 00007f74d9ef0fa0 RCX: 00007f74d9c690d9 [ 41.677484][ T811] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 41.685523][ T811] RBP: 00007f74d86c2090 R08: 0000000000000000 R09: 0000000000000000 [ 41.693475][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.701429][ T811] R13: 00007f74d9ef1038 R14: 00007f74d9ef0fa0 R15: 00007ffc6a665658 [ 42.295812][ T835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.299978][ T321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.323953][ T835] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.337245][ T835] EXT4-fs (loop4): 1 truncate cleaned up [ 42.343178][ T835] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,resgid=0x0000000000000000, [ 42.398744][ T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /32/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.450646][ T283] EXT4-fs (loop4): Remounting filesystem read-only [ 42.458443][ T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.489624][ T283] tipc: Resetting bearer [ 42.496893][ T283] tipc: Disabling bearer [ 42.512149][ T842] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.519433][ T842] EXT4-fs (loop3): Ignoring removed orlov option [ 42.539235][ T7] tipc: Left network mode [ 42.552899][ T842] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov, [ 42.566697][ T842] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.598004][ T321] usb 1-1: device descriptor read/64, error -71 [ 42.634156][ T280] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /26/mnt/lost+found: directory fails checksum at offset 6144 [ 42.653437][ T280] EXT4-fs (loop3): Remounting filesystem read-only [ 42.670791][ T846] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.677881][ T846] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.691166][ T846] device bridge_slave_0 entered promiscuous mode [ 42.866587][ T846] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.882162][ T846] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.897379][ T846] device bridge_slave_1 entered promiscuous mode [ 42.993668][ T846] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.000748][ T846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.008026][ T846] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.015042][ T846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.044993][ T833] F2FS-fs (loop2): Zoned block device path is missing [ 43.058730][ T858] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 43.072624][ T856] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 271). There's a risk of filesystem corruption in case of system crash. [ 43.095435][ T860] overlayfs: unrecognized mount option "verity=off" or missing value [ 43.113476][ T833] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.145769][ T860] binfmt_misc: register: failed to install interpreter file ./file1 [ 43.154400][ T833] F2FS-fs (loop2): invalid crc value [ 43.172755][ T833] F2FS-fs (loop2): invalid crc value [ 43.191036][ T833] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 43.204485][ T25] Bluetooth: hci0: command 0xfc00 tx timeout [ 43.231611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.239383][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.246699][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.262651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.271132][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.278189][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.285682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.298781][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.305833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.323148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.336478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.345306][ T860] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.374369][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.382833][ T862] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 43.458702][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.498797][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.526166][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.543360][ T846] device veth0_vlan entered promiscuous mode [ 43.579919][ T7] device bridge_slave_1 left promiscuous mode [ 43.586062][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.594300][ T7] device bridge_slave_0 left promiscuous mode [ 43.615066][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.623261][ T7] device veth1_macvtap left promiscuous mode [ 43.631092][ T7] device veth0_vlan left promiscuous mode [ 43.686158][ T880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.740431][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.748808][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.759441][ T880] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 43.773746][ T880] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.774711][ T846] device veth1_macvtap entered promiscuous mode [ 43.786215][ T880] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.786215][ T880] [ 43.802326][ T880] EXT4-fs (loop0): Total free blocks count 0 [ 43.808337][ T880] EXT4-fs (loop0): Free/Dirty block details [ 43.814374][ T880] EXT4-fs (loop0): free_blocks=4096 [ 43.819667][ T880] EXT4-fs (loop0): dirty_blocks=64 [ 43.819912][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.824844][ T880] EXT4-fs (loop0): Block reservation details [ 43.838306][ T889] FAT-fs (loop2): Unrecognized mount option "tots" or missing value [ 43.843135][ T880] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 43.848224][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.880367][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 43.893160][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.893160][ T9] [ 43.912039][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.922205][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.932892][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.946030][ T846] EXT4-fs error (device sda1): __ext4_new_inode:1079: comm syz-executor: reserved inode found cleared - inode=1 [ 43.961719][ T846] EXT4-fs error (device sda1): __ext4_new_inode:1286: comm syz-executor: failed to insert inode 8193: doubly allocated? [ 44.073136][ T894] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.083473][ T897] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 129). There's a risk of filesystem corruption in case of system crash. [ 44.086949][ T894] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 44.097514][ T897] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 224). There's a risk of filesystem corruption in case of system crash. [ 44.181686][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.188924][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.196300][ T907] device bridge_slave_0 entered promiscuous mode [ 44.203579][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.210714][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.218116][ T907] device bridge_slave_1 entered promiscuous mode [ 44.253304][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.260368][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.267595][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.274616][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.291948][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.299415][ T859] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.311630][ T899] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 202) [ 44.322984][ T902] FAT-fs (loop1): Directory bread(block 64) failed [ 44.323271][ T885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 44.343853][ T899] FAT-fs (loop0): Filesystem has been set read-only [ 44.351125][ T859] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.354634][ T902] FAT-fs (loop1): Directory bread(block 65) failed [ 44.369054][ T902] FAT-fs (loop1): Directory bread(block 66) failed [ 44.375578][ T902] FAT-fs (loop1): Directory bread(block 67) failed [ 44.389047][ T902] FAT-fs (loop1): Directory bread(block 68) failed [ 44.408774][ T902] FAT-fs (loop1): Directory bread(block 69) failed [ 44.415323][ T902] FAT-fs (loop1): Directory bread(block 70) failed [ 44.422477][ T902] FAT-fs (loop1): Directory bread(block 71) failed [ 44.429252][ T902] FAT-fs (loop1): Directory bread(block 72) failed [ 44.436623][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.444858][ T902] FAT-fs (loop1): Directory bread(block 73) failed [ 44.451737][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.458785][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.466841][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.475345][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.482386][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.490054][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.497898][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.559660][ T907] device veth0_vlan entered promiscuous mode [ 44.571356][ T907] device veth1_macvtap entered promiscuous mode [ 44.578949][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.587774][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.596575][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.604284][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.611820][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.899864][ T925] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.915650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.917368][ T921] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.924381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.941084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.947398][ T937] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 44.949747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.986316][ T925] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.153: bad orphan inode 13 [ 45.002865][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 45.002878][ T24] audit: type=1400 audit(1786667689.033:331): avc: denied { mounton } for pid=907 comm="syz-executor" path="/root/syzkaller.hfoqWT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.009895][ T925] ext4_test_bit(bit=12, block=18) = 1 [ 45.042237][ T9] ------------[ cut here ]------------ [ 45.042792][ T925] is_bad_inode(inode)=0 [ 45.047875][ T9] kernel BUG at fs/ext4/inode.c:2780! [ 45.052203][ T925] NEXT_ORPHAN(inode)=0 [ 45.070136][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.076223][ T9] CPU: 1 PID: 9 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 45.083498][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.093558][ T9] Workqueue: writeback wb_workfn (flush-7:1) [ 45.099555][ T9] RIP: 0010:ext4_writepages+0x2edb/0x2f00 [ 45.105267][ T9] Code: ff 49 bd 00 00 00 00 00 fc ff df 4c 8b a4 24 98 00 00 00 48 8b 5c 24 38 4c 8b b4 24 c0 00 00 00 e9 fe f7 ff ff e8 c5 ec 92 ff <0f> 0b e8 be ec 92 ff e8 95 a8 2e ff eb 92 e8 b2 ec 92 ff e8 89 a8 [ 45.124863][ T9] RSP: 0018:ffffc90000097180 EFLAGS: 00010293 [ 45.126235][ T947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.146'. [ 45.130921][ T9] RAX: ffffffff81d1c4fb RBX: 0000008410000000 RCX: ffff888100248000 [ 45.130927][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 45.130934][ T9] RBP: ffffc900000974f0 R08: ffff88811a474d1f R09: 1ffff1102348e9a3 [ 45.130940][ T9] R10: dffffc0000000000 R11: ffffed102348e9a4 R12: ffff888115843000 [ 45.130947][ T9] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88811a474d18 [ 45.130955][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.130962][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.130977][ T9] CR2: 00007f3a434d87c0 CR3: 000000010d6f7000 CR4: 00000000003526a0 [ 45.159481][ T925] max_ino=32 [ 45.163573][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.163580][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.163583][ T9] Call Trace: [ 45.163611][ T9] ? update_load_avg+0xe4a/0x1540 [ 45.171640][ T925] i_nlink=1 [ 45.179502][ T9] ? ext4_readpage+0x220/0x220 [ 45.179513][ T9] ? enqueue_task_fair+0xabb/0x2250 [ 45.179529][ T9] ? sched_group_set_shares+0x480/0x480 [ 45.188881][ T925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.194997][ T9] ? ext4_readpage+0x220/0x220 [ 45.262298][ T9] do_writepages+0x12e/0x280 [ 45.266868][ T9] ? sched_clock+0x3a/0x40 [ 45.271258][ T9] ? __writepage+0x130/0x130 [ 45.275826][ T9] ? __kasan_check_write+0x14/0x20 [ 45.281096][ T9] ? __kasan_check_write+0x14/0x20 [ 45.286182][ T9] ? _raw_spin_lock+0x94/0xf0 [ 45.290836][ T9] __writeback_single_inode+0xd9/0xa30 [ 45.296452][ T9] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 45.302406][ T9] writeback_sb_inodes+0x96d/0x1680 [ 45.307583][ T9] ? queue_io+0x4b0/0x4b0 [ 45.311919][ T9] ? __kasan_check_read+0x11/0x20 [ 45.316925][ T9] ? queue_io+0x37a/0x4b0 [ 45.321240][ T9] wb_writeback+0x40f/0xb80 [ 45.325720][ T9] ? wb_io_lists_depopulated+0x180/0x180 [ 45.331333][ T9] ? set_worker_desc+0x1ba/0x1f0 [ 45.336252][ T9] ? _raw_spin_trylock_bh+0x150/0x150 [ 45.341614][ T9] ? __kasan_check_write+0x14/0x20 [ 45.346719][ T9] wb_workfn+0x3ac/0xf30 [ 45.350950][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 45.356651][ T9] ? __update_idle_core+0x280/0x280 [ 45.361872][ T9] ? _raw_spin_unlock_irq+0x4e/0x70 [ 45.367063][ T9] ? finish_task_switch+0x12e/0x5a0 [ 45.372243][ T9] ? __switch_to_asm+0x3a/0x60 [ 45.377076][ T9] ? __kasan_check_read+0x11/0x20 [ 45.382078][ T9] ? read_word_at_a_time+0x12/0x20 [ 45.387177][ T9] ? strscpy+0x9b/0x290 [ 45.391308][ T9] process_one_work+0x6fd/0xbc0 [ 45.396160][ T9] worker_thread+0xa8e/0x13c0 [ 45.400822][ T9] kthread+0x324/0x3b0 [ 45.404865][ T9] ? worker_clr_flags+0x190/0x190 [ 45.409878][ T9] ? kthread_blkcg+0xd0/0xd0 [ 45.414453][ T9] ret_from_fork+0x1f/0x30 [ 45.418855][ T9] Modules linked in: [ 45.429870][ T9] ---[ end trace 91b4b3c0438d7567 ]--- [ 45.435506][ T9] RIP: 0010:ext4_writepages+0x2edb/0x2f00 [ 45.441965][ T9] Code: ff 49 bd 00 00 00 00 00 fc ff df 4c 8b a4 24 98 00 00 00 48 8b 5c 24 38 4c 8b b4 24 c0 00 00 00 e9 fe f7 ff ff e8 c5 ec 92 ff <0f> 0b e8 be ec 92 ff e8 95 a8 2e ff eb 92 e8 b2 ec 92 ff e8 89 a8 [ 45.462319][ T9] RSP: 0018:ffffc90000097180 EFLAGS: 00010293 [ 45.474396][ T946] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 45.483214][ T9] RAX: ffffffff81d1c4fb RBX: 0000008410000000 RCX: ffff888100248000 [ 45.491526][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 45.499789][ T9] RBP: ffffc900000974f0 R08: ffff88811a474d1f R09: 1ffff1102348e9a3 [ 45.517151][ T9] R10: dffffc0000000000 R11: ffffed102348e9a4 R12: ffff888115843000 [ 45.529499][ T9] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88811a474d18 [ 45.537847][ T925] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.552265][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.561408][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.562752][ T925] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.153: bg 0: block 248: padding at end of block bitmap is not set [ 45.568080][ T9] CR2: 0000001b2e41fff8 CR3: 0000000125c5b000 CR4: 00000000003526b0 [ 45.590469][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.598474][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.606538][ T9] Kernel panic - not syncing: Fatal exception [ 45.612780][ T9] Kernel Offset: disabled [ 45.617090][ T9] Rebooting in 86400 seconds..