last executing test programs: 20m55.265544374s ago: executing program 32 (id=75): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = getpid() creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada04006b11710000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40c4) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) 19m45.129592747s ago: executing program 5 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) accept(r3, 0x0, 0x0) 19m43.062776857s ago: executing program 5 (id=217): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78"], 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 19m40.706142764s ago: executing program 5 (id=220): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x1e]}}, &(0x7f0000000900)=""/4096, 0x2c, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX=r4, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x62040200) 19m39.194996571s ago: executing program 5 (id=222): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 19m34.016778336s ago: executing program 5 (id=231): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f0000000180)}, 0x10) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x1, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x6, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x94, 0x42, 0x3], [0x82, 0x2, 0x7, 0x5, 0xfffffffe, 0x9, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xcd, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0x3, 0x2, 0x5, 0x1, 0x7ff, 0x800, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x8, 0xffff3441, 0xfff]}, 0x45c) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 19m31.581816925s ago: executing program 5 (id=237): syz_emit_ethernet(0x36, &(0x7f00000003c0)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640000000000019078ac1e4001ac1414aa0b009078032c00004200000000000000008900"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="9ddb", 0x2}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) flock(r2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x44054) 19m30.062860371s ago: executing program 33 (id=237): syz_emit_ethernet(0x36, &(0x7f00000003c0)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640000000000019078ac1e4001ac1414aa0b009078032c00004200000000000000008900"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="9ddb", 0x2}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) flock(r2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x44054) 15m51.678678527s ago: executing program 2 (id=586): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000ce1) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') sendmsg$kcm(r4, 0x0, 0x4040040) syz_clone(0x81091800, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) 15m48.249403188s ago: executing program 2 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a30"], 0x248}}, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="18000000010003", 0x7) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0xf6}, @val={0x0, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x66, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}}}, 0x22) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) r6 = syz_open_pts(r2, 0x20800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa00000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x44) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 15m44.86306135s ago: executing program 2 (id=600): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x4000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {}, {0x4, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x1ad, 0xd5}}, @TCA_U32_ACT={0x4c, 0x7, [@m_skbmod={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x800) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYRES32=r7], 0x3c}}, 0x0) close(r7) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x4040070) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r9, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 15m40.04215483s ago: executing program 2 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) userfaultfd(0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x30, {0xa, 0x8000000000000003}, 0xb}, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000040)=""/19) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) 15m37.95570578s ago: executing program 2 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) ftruncate(0xffffffffffffffff, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m36.525226465s ago: executing program 2 (id=614): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(r4, 0x0) 15m19.749727202s ago: executing program 34 (id=614): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(r4, 0x0) 13m30.889438805s ago: executing program 4 (id=818): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) unshare(0x2a020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000002294eb6300", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xc, 0xffffffff, 0x4, @mcast2, @remote, 0x40, 0x1e, 0x4, 0x2512}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x8800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x28) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x2}, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000040)) setsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f00000001c0)=0x7, 0x4) 13m28.25916146s ago: executing program 4 (id=820): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) socket(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 13m26.681745448s ago: executing program 4 (id=823): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e00000020000"], 0x3c}}, 0x0) 13m25.726179671s ago: executing program 4 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x44080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000031c0)={0x2020}, 0xb7) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) 13m24.819877583s ago: executing program 4 (id=825): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$eJzs3D1oG2cYB/DnTlL9JYrbLoXSDyiltAbjsdDFXVowlGJKKbQFl1KyJNgBxyGblSlLhmROgqcsJmSLkzF4MVkCWZ3Eg7NkiMkQkyEZFKSTjSLLJEG2Lvh+Pzjfex+vn/ek+7/ScgqgsEYjYjIiShExFhGViEjaT/gqW0Zbm0tDazMR9frvT5Pmedl2ZqffSETUIuKHiFhNkzhejji98vfm8/Vfvj2/UPnm6spfQ329yJatzY1ft6/8du7G1MetPZNRbbXar+MgJXt3DR5GnfdJUs57BLyN6TPX7zdy/0lEfN3MfyXSyN68C/MfrFbi+8v79b345N5n/RwrcPDq9UrjM7BWBwonjYhqJOl4RGTtNB0fz77DPygNpyfm5k+NHZtbmP0/75kKOCjViI2fbw3cHOnI/+NSln/g6Grk/4/p5YeN9nYp79EAffF5tmrkf+zfxe9C/qFw5B+KS/6huOQfikv+objkH4pL/uEIq+w0al0Pyz8Ul/xDcck/FFd7/gGAYqkP5P0EMpCXvOcfAAAAAAAAAAAAAAAAAABgr6WhtZmdZXdnerg171yK2PopIsrd6pda5Qebf4efJY3TdiVZt57882WP/6BH13J++vrDR/nWv/tFvvUXZyNqZyNiolzee/8lPd/+H73heOW/Hgu8o6Rj+8c/+1u/08vlfOtPrUfcbsw/E93mnzQ+ba67zz/V9p9Yfk3nq7y/ky96GT0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD99CoAAP//qntqTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$loop(0x0, 0xf, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x700, 0xfdef) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x0, 0x0) tgkill(r6, r6, 0xc) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) mkdirat$cgroup(r0, &(0x7f0000001000)='syz0\x00', 0x1ff) 13m22.149023758s ago: executing program 4 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept(r3, 0x0, 0x0) 13m6.332667412s ago: executing program 35 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept(r3, 0x0, 0x0) 3m53.794771157s ago: executing program 0 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) acct(&(0x7f0000000180)='./trace\x00') 3m52.769253252s ago: executing program 0 (id=2920): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000200)={0x17c04, 0xffffffffffffffff, 0x0, 0x973f, 0x83, 0x3}) 3m52.312952213s ago: executing program 0 (id=2924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 3m52.130268078s ago: executing program 0 (id=2925): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@utf8}, {@utf8no}, {@utf8}, {@shortname_win95}, {@rodir}, {@utf8}, {@utf8}, {@utf8}, {@rodir}, {@utf8}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '874'}}]}, 0x1, 0x292, &(0x7f0000000340)="$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") socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) tgkill(r0, r0, 0x11) 3m51.833675215s ago: executing program 0 (id=2927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 3m51.143004652s ago: executing program 0 (id=2930): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) 3m50.737147222s ago: executing program 36 (id=2930): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) 2m12.181643s ago: executing program 6 (id=3482): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_ublk_setup_io_uring(0x45, &(0x7f00000000c0)={0x0, 0xc146, 0x2, 0x1, 0x146}, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x5, 0xbd0) 2m11.423841648s ago: executing program 6 (id=3483): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)) 2m11.225613313s ago: executing program 6 (id=3488): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x4, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 2m10.694029906s ago: executing program 6 (id=3490): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000002a00)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 2m10.14064676s ago: executing program 6 (id=3495): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x80000001], [0xffffffff, 0xfffffffd, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./proc\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16], 0x1, 0x195, &(0x7f0000000440)="$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") ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 2m9.674434882s ago: executing program 6 (id=3500): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') 2m8.653822887s ago: executing program 37 (id=3500): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') 8.653972016s ago: executing program 7 (id=4077): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x20, 0x17, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.097216945s ago: executing program 3 (id=4093): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[], 0x21, 0x554e, &(0x7f0000000240)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000080)='./file0/file2\x00', 0x0, 0x10000, 0x0) 5.609750401s ago: executing program 3 (id=4102): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1, 0x2) 5.401461816s ago: executing program 7 (id=4103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.897643229s ago: executing program 7 (id=4106): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x5b) read$watch_queue(r1, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) 4.231977655s ago: executing program 7 (id=4108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) 3.686232479s ago: executing program 8 (id=4112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x890) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.409712535s ago: executing program 3 (id=4113): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = dup(r1) write$input_event(r2, &(0x7f0000000440)={{}, 0x12, 0x6, 0x8001}, 0x18) 3.409389755s ago: executing program 7 (id=4114): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xa3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket(0x15, 0x6, 0x80000001) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.338737257s ago: executing program 3 (id=4116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="3c5c2a3ecd45036a2762bb626c65640a", 0x10) 3.338386437s ago: executing program 8 (id=4117): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000308000000", @ANYRES32=0x0, @ANYBLOB="d447c8ed4c66000cea0069d9e341b2846df9b89836c7b143b2385ed5aec69e13a4d26028c49f175c6747c16d68145da295985113df81ed9483f12ac366db87a065cd416881ccef8540eabaf5780c3919161354d20f5193bc5c3d8bf1907434cf81f26bc862d95e"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.256052499s ago: executing program 9 (id=4118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd43, &(0x7f0000001240)=ANY=[], 0x0) 3.193488441s ago: executing program 8 (id=4119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) setns(r1, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) 3.143855462s ago: executing program 9 (id=4120): setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2.341762991s ago: executing program 3 (id=4122): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100004) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.519679142s ago: executing program 1 (id=4123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000300)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.013071274s ago: executing program 1 (id=4124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000) 725.775621ms ago: executing program 1 (id=4125): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x9, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c2, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0x11154005, 0x514}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 703.216142ms ago: executing program 8 (id=4126): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x100000000000000, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 597.721595ms ago: executing program 9 (id=4127): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x6) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000140)=0x52800000) 525.657626ms ago: executing program 1 (id=4128): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) getdents(r0, &(0x7f0000000100)=""/201, 0xc9) 413.41463ms ago: executing program 1 (id=4129): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="04004100000010"]) 402.989799ms ago: executing program 9 (id=4130): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xfe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) 197.735794ms ago: executing program 1 (id=4131): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 197.388904ms ago: executing program 8 (id=4132): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xd2, &(0x7f0000000ac0)=ANY=[], 0x0) 195.755024ms ago: executing program 7 (id=4133): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0xe, 0xe0, 0x1c, 0x95, 0xf, 0x2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019380)='/proc/keys\x00', 0x0, 0x0) lseek(r2, 0x4000000007, 0x1) 125.728346ms ago: executing program 9 (id=4134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) timerfd_create(0x0, 0x80800) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x3dc}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000740)) 88.882667ms ago: executing program 3 (id=4135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.142039ms ago: executing program 8 (id=4136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xf2ff, 0x8001}, {0xfff4, 0x300}}}, 0x24}}, 0x0) 0s ago: executing program 9 (id=4137): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) setns(r1, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r10 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) kernel console output (not intermixed with test programs): 24732][T18416] loop9: detected capacity change from 0 to 32768 [ 1215.536931][T18437] lo speed is unknown, defaulting to 1000 [ 1215.597683][T18416] JBD2: Ignoring recovery information on journal [ 1215.681668][T18436] syz.6.3316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1215.702794][T18416] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1215.736697][T18436] CPU: 1 PID: 18436 Comm: syz.6.3316 Not tainted syzkaller #0 [ 1215.744235][T18436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1215.754306][T18436] Call Trace: [ 1215.757598][T18436] [ 1215.760541][T18436] dump_stack_lvl+0x188/0x24e [ 1215.765242][T18436] ? ___ratelimit+0x14e/0x610 [ 1215.769941][T18436] ? show_regs_print_info+0x12/0x12 [ 1215.775154][T18436] ? load_image+0x410/0x410 [ 1215.779676][T18436] ? ___ratelimit+0x474/0x610 [ 1215.784374][T18436] ? radix_tree_cpu_dead+0x160/0x160 [ 1215.789682][T18436] dump_header+0xd8/0x820 [ 1215.794045][T18436] oom_kill_process+0x361/0x550 [ 1215.798924][T18436] out_of_memory+0xe25/0x1220 [ 1215.803637][T18436] ? print_unlock_imbalance_bug+0x160/0x160 [ 1215.809559][T18436] ? mutex_lock_nested+0x10/0x10 [ 1215.814518][T18436] ? unregister_oom_notifier+0x20/0x20 [ 1215.820012][T18436] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1215.825594][T18436] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1215.831175][T18436] ? do_raw_spin_unlock+0x11d/0x230 [ 1215.836391][T18436] try_charge_memcg+0xc9d/0x17c0 [ 1215.841365][T18436] ? percpu_ref_put+0x180/0x180 [ 1215.846244][T18436] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1215.851993][T18436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1215.857999][T18436] ? percpu_ref_tryget+0x15/0x180 [ 1215.863049][T18436] ? percpu_ref_tryget+0x15/0x180 [ 1215.868101][T18436] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1215.873849][T18436] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1215.879594][T18436] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1215.885438][T18436] obj_cgroup_charge+0x36a/0x620 [ 1215.890414][T18436] ? obj_cgroup_charge+0xe9/0x620 [ 1215.895466][T18436] ? mod_objcg_mlstate+0x320/0x320 [ 1215.900608][T18436] ? percpu_ref_tryget+0x15/0x180 [ 1215.905666][T18436] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1215.911584][T18436] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1215.917506][T18436] slab_pre_alloc_hook+0x2e2/0x300 [ 1215.922646][T18436] ? __split_vma+0x4f0/0x4f0 [ 1215.927262][T18436] ? vma_merge+0x883/0xa50 [ 1215.931704][T18436] kmem_cache_alloc+0x56/0x2f0 [ 1215.936493][T18436] ? vm_area_dup+0x23/0x1a0 [ 1215.941020][T18436] vm_area_dup+0x23/0x1a0 [ 1215.945371][T18436] __split_vma+0xb9/0x4f0 [ 1215.949724][T18436] ? split_vma+0x70/0xf0 [ 1215.954037][T18436] mprotect_fixup+0x52d/0x840 [ 1215.958754][T18436] ? change_protection+0x3980/0x3980 [ 1215.964064][T18436] ? mas_walk+0x15f/0x180 [ 1215.968420][T18436] ? apparmor_file_mprotect+0xf4/0x110 [ 1215.973918][T18436] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1215.979145][T18436] ? security_file_mprotect+0x7e/0xb0 [ 1215.984543][T18436] do_mprotect_pkey+0x7ff/0xba0 [ 1215.989428][T18436] ? prot_none_test+0x10/0x10 [ 1215.994128][T18436] ? __up_read+0x2b4/0x6b0 [ 1215.998578][T18436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1216.004622][T18436] __x64_sys_mprotect+0x7c/0x90 [ 1216.009502][T18436] do_syscall_64+0x4c/0xa0 [ 1216.013938][T18436] ? clear_bhb_loop+0x60/0xb0 [ 1216.018647][T18436] ? clear_bhb_loop+0x60/0xb0 [ 1216.023349][T18436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.029261][T18436] RIP: 0033:0x7f2a6cb9df97 [ 1216.033696][T18436] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.053322][T18436] RSP: 002b:00007ffd6adff9c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1216.061741][T18436] RAX: ffffffffffffffda RBX: 00007f2a6adf66c0 RCX: 00007f2a6cb9df97 [ 1216.069706][T18436] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2a6add7000 [ 1216.077675][T18436] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1216.085644][T18436] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd6adffb20 [ 1216.093615][T18436] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1216.101592][T18436] [ 1216.367670][T18436] memory: usage 192kB, limit 192kB, failcnt 1806 [ 1216.376787][T18436] memory+swap: usage 196kB, limit 9007199254740988kB, failcnt 0 [ 1216.451671][T18436] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1216.716793][T18436] Memory cgroup stats for /syz6/test: [ 1216.740186][T16997] (syz-executor,16997,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 1216.766013][T18436] anon 0 [ 1216.766013][T18436] file 0 [ 1216.766013][T18436] kernel 196608 [ 1216.766013][T18436] kernel_stack 0 [ 1216.766013][T18436] pagetables 0 [ 1216.766013][T18436] sec_pagetables 0 [ 1216.766013][T18436] percpu 1184 [ 1216.766013][T18436] sock 0 [ 1216.766013][T18436] vmalloc 0 [ 1216.766013][T18436] shmem 0 [ 1216.766013][T18436] zswap 0 [ 1216.766013][T18436] zswapped 0 [ 1216.766013][T18436] file_mapped 0 [ 1216.766013][T18436] file_dirty 0 [ 1216.766013][T18436] file_writeback 0 [ 1216.766013][T18436] swapcached 65536 [ 1216.766013][T18436] anon_thp 0 [ 1216.766013][T18436] file_thp 0 [ 1216.766013][T18436] shmem_thp 0 [ 1216.766013][T18436] inactive_anon 0 [ 1216.766013][T18436] active_anon 0 [ 1216.766013][T18436] inactive_file 0 [ 1216.766013][T18436] active_file 0 [ 1216.766013][T18436] unevictable 0 [ 1216.766013][T18436] slab_reclaimable 27792 [ 1216.766013][T18436] slab_unreclaimable 165632 [ 1216.766013][T18436] slab 193424 [ 1216.873878][T18436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.3316,pid=18436,uid=0 [ 1216.899185][T16997] ocfs2: Unmounting device (7,9) on (node local) [ 1216.983023][T18436] Memory cgroup out of memory: Killed process 18436 (syz.6.3316) total-vm:102788kB, anon-rss:1424kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1217.813996][T18486] overlayfs: failed to clone upperpath [ 1218.415601][T18493] binder: 18491:18493 unknown command 0 [ 1218.421399][T18493] binder: 18491:18493 ioctl c0306201 2000000001c0 returned -22 [ 1219.228955][T18507] lo speed is unknown, defaulting to 1000 [ 1219.978064][T18518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 1219.986405][T18516] loop7: detected capacity change from 0 to 4096 [ 1219.998241][T18516] EXT4-fs: Ignoring removed nobh option [ 1220.008433][T18516] EXT4-fs: Ignoring removed bh option [ 1220.113487][T18516] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1220.126486][T18525] loop9: detected capacity change from 0 to 1024 [ 1220.134237][T18525] EXT4-fs: Ignoring removed oldalloc option [ 1220.140203][T18525] EXT4-fs: Ignoring removed orlov option [ 1220.183588][T18525] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1220.217391][T18516] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1220.408591][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1220.555360][T18516] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1221.093902][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1221.396690][T18552] gadgetfs: bound to dummy_udc driver [ 1221.635567][T18557] loop7: detected capacity change from 0 to 2048 [ 1221.647700][T18562] overlayfs: failed to clone upperpath [ 1221.683378][T18557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.142995][T18557] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1222.390594][T18557] EXT4-fs (loop7): shut down requested (2) [ 1222.412960][T18570] loop6: detected capacity change from 0 to 4096 [ 1222.507920][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1222.513608][T18570] ntfs3: loop6: Failed to load $Extend. [ 1222.538903][T18576] fuse: Bad value for 'fd' [ 1222.559107][T18576] overlayfs: failed to clone upperpath [ 1222.782093][T18579] ntfs3: loop6: ino=22, "file1" attr_set_size [ 1222.920989][ T5631] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 1222.961405][ T5631] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1223.078840][T18588] lo speed is unknown, defaulting to 1000 [ 1223.500707][T18585] syz.9.3357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1223.707347][T18585] CPU: 0 PID: 18585 Comm: syz.9.3357 Not tainted syzkaller #0 [ 1223.714879][T18585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1223.724961][T18585] Call Trace: [ 1223.728260][T18585] [ 1223.731210][T18585] dump_stack_lvl+0x188/0x24e [ 1223.735914][T18585] ? ___ratelimit+0x14e/0x610 [ 1223.740621][T18585] ? show_regs_print_info+0x12/0x12 [ 1223.745843][T18585] ? load_image+0x410/0x410 [ 1223.750372][T18585] ? ___ratelimit+0x474/0x610 [ 1223.755087][T18585] ? radix_tree_cpu_dead+0x160/0x160 [ 1223.760410][T18585] dump_header+0xd8/0x820 [ 1223.764769][T18585] oom_kill_process+0x361/0x550 [ 1223.769650][T18585] out_of_memory+0xe25/0x1220 [ 1223.774356][T18585] ? print_unlock_imbalance_bug+0x160/0x160 [ 1223.780289][T18585] ? mutex_lock_nested+0x10/0x10 [ 1223.785258][T18585] ? unregister_oom_notifier+0x20/0x20 [ 1223.790754][T18585] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1223.796334][T18585] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1223.801924][T18585] ? do_raw_spin_unlock+0x11d/0x230 [ 1223.807150][T18585] try_charge_memcg+0xc9d/0x17c0 [ 1223.812137][T18585] ? percpu_ref_put+0x180/0x180 [ 1223.817044][T18585] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1223.822772][T18585] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1223.828759][T18585] ? percpu_ref_tryget+0x15/0x180 [ 1223.833782][T18585] ? percpu_ref_tryget+0x15/0x180 [ 1223.838801][T18585] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1223.844522][T18585] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1223.850237][T18585] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1223.856057][T18585] obj_cgroup_charge+0x36a/0x620 [ 1223.860994][T18585] ? obj_cgroup_charge+0xe9/0x620 [ 1223.866023][T18585] ? mod_objcg_mlstate+0x320/0x320 [ 1223.871130][T18585] ? percpu_ref_tryget+0x15/0x180 [ 1223.876165][T18585] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1223.882050][T18585] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1223.887942][T18585] slab_pre_alloc_hook+0x2e2/0x300 [ 1223.893065][T18585] ? __split_vma+0x4f0/0x4f0 [ 1223.897651][T18585] ? vma_merge+0x883/0xa50 [ 1223.902068][T18585] kmem_cache_alloc+0x56/0x2f0 [ 1223.906840][T18585] ? vm_area_dup+0x23/0x1a0 [ 1223.911339][T18585] vm_area_dup+0x23/0x1a0 [ 1223.915668][T18585] __split_vma+0xb9/0x4f0 [ 1223.919991][T18585] ? split_vma+0x70/0xf0 [ 1223.924232][T18585] mprotect_fixup+0x52d/0x840 [ 1223.928912][T18585] ? change_protection+0x3980/0x3980 [ 1223.934194][T18585] ? mas_walk+0x15f/0x180 [ 1223.938512][T18585] ? apparmor_file_mprotect+0xf4/0x110 [ 1223.943973][T18585] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1223.949168][T18585] ? security_file_mprotect+0x7e/0xb0 [ 1223.954536][T18585] do_mprotect_pkey+0x7ff/0xba0 [ 1223.959398][T18585] ? prot_none_test+0x10/0x10 [ 1223.964072][T18585] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1223.970057][T18585] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1223.975701][T18585] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.980922][T18585] __x64_sys_mprotect+0x7c/0x90 [ 1223.985782][T18585] do_syscall_64+0x4c/0xa0 [ 1223.990198][T18585] ? clear_bhb_loop+0x60/0xb0 [ 1223.994891][T18585] ? clear_bhb_loop+0x60/0xb0 [ 1223.999565][T18585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.005451][T18585] RIP: 0033:0x7f205e19df97 [ 1224.009857][T18585] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.029451][T18585] RSP: 002b:00007ffca3b29d28 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1224.037854][T18585] RAX: ffffffffffffffda RBX: 00007f205c3f66c0 RCX: 00007f205e19df97 [ 1224.045818][T18585] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f205c3d7000 [ 1224.053783][T18585] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1224.061742][T18585] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffca3b29e80 [ 1224.069702][T18585] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1224.077679][T18585] [ 1224.097944][T18585] memory: usage 192kB, limit 192kB, failcnt 112 [ 1224.104695][T18585] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1224.120053][T18585] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1224.130175][T18585] Memory cgroup stats for /syz9/test: [ 1224.130345][T18585] anon 0 [ 1224.130345][T18585] file 0 [ 1224.130345][T18585] kernel 196608 [ 1224.130345][T18585] kernel_stack 0 [ 1224.130345][T18585] pagetables 0 [ 1224.130345][T18585] sec_pagetables 0 [ 1224.130345][T18585] percpu 1184 [ 1224.130345][T18585] sock 0 [ 1224.130345][T18585] vmalloc 0 [ 1224.130345][T18585] shmem 0 [ 1224.130345][T18585] zswap 0 [ 1224.130345][T18585] zswapped 0 [ 1224.130345][T18585] file_mapped 0 [ 1224.130345][T18585] file_dirty 0 [ 1224.130345][T18585] file_writeback 0 [ 1224.130345][T18585] swapcached 0 [ 1224.130345][T18585] anon_thp 0 [ 1224.130345][T18585] file_thp 0 [ 1224.130345][T18585] shmem_thp 0 [ 1224.130345][T18585] inactive_anon 0 [ 1224.130345][T18585] active_anon 0 [ 1224.130345][T18585] inactive_file 0 [ 1224.130345][T18585] active_file 0 [ 1224.130345][T18585] unevictable 0 [ 1224.130345][T18585] slab_reclaimable 27792 [ 1224.130345][T18585] slab_unreclaimable 166008 [ 1224.130345][T18585] slab 193800 [ 1224.228514][T18585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3357,pid=18585,uid=0 [ 1224.245504][T18585] Memory cgroup out of memory: Killed process 18585 (syz.9.3357) total-vm:102532kB, anon-rss:1420kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1225.300120][T18615] loop6: detected capacity change from 0 to 128 [ 1225.394337][T18615] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1225.415469][T18615] ext4 filesystem being mounted at /536/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.465350][ T5631] EXT4-fs (loop6): unmounting filesystem. [ 1227.065591][T18661] lo speed is unknown, defaulting to 1000 [ 1227.599725][T18634] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 [ 1227.655463][T18634] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f] [ 1227.700640][T18634] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f] [ 1227.959594][T18634] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 1227.969328][T18678] lo speed is unknown, defaulting to 1000 [ 1227.983165][T18634] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f]: assigned [ 1228.016602][T13748] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 1229.681544][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1238.654933][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.661377][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.249717][T18785] Set syz1 is full, maxelem 6117 reached [ 1240.506721][T18802] socket: no more sockets [ 1240.604053][T18801] loop7: detected capacity change from 0 to 1764 [ 1240.612560][T18805] loop6: detected capacity change from 0 to 1024 [ 1240.681628][T18805] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1240.713262][T18805] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.856486][T18814] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.3396: Freeing blocks not in datazone - block = 0, count = 16 [ 1240.935930][T18805] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3396: bg 0: block 112: padding at end of block bitmap is not set [ 1240.981942][T18819] fuse: Bad value for 'fd' [ 1240.988732][T18805] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1241.011815][T18805] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1241.011815][T18805] [ 1241.031460][T18805] EXT4-fs (loop6): Total free blocks count 0 [ 1241.061348][T18805] EXT4-fs (loop6): Free/Dirty block details [ 1241.067312][T18805] EXT4-fs (loop6): free_blocks=16 [ 1241.079065][T18805] EXT4-fs (loop6): dirty_blocks=16 [ 1241.099580][T18805] EXT4-fs (loop6): Block reservation details [ 1241.125914][T18805] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1241.135792][T18821] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1241.151748][T18821] overlayfs: failed to set xattr on upper [ 1241.173981][T18821] overlayfs: ...falling back to index=off,metacopy=off. [ 1241.237909][ T5631] EXT4-fs (loop6): unmounting filesystem. [ 1241.543354][T18842] loop7: detected capacity change from 0 to 1024 [ 1241.578488][T18841] syz.9.3409 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1241.598455][T18841] CPU: 0 PID: 18841 Comm: syz.9.3409 Not tainted syzkaller #0 [ 1241.605977][T18841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1241.616079][T18841] Call Trace: [ 1241.619378][T18841] [ 1241.622331][T18841] dump_stack_lvl+0x188/0x24e [ 1241.627038][T18841] ? ___ratelimit+0x14e/0x610 [ 1241.631750][T18841] ? show_regs_print_info+0x12/0x12 [ 1241.636977][T18841] ? load_image+0x410/0x410 [ 1241.641518][T18841] ? ___ratelimit+0x474/0x610 [ 1241.646234][T18841] ? radix_tree_cpu_dead+0x160/0x160 [ 1241.651559][T18841] dump_header+0xd8/0x820 [ 1241.655914][T18841] oom_kill_process+0x361/0x550 [ 1241.660795][T18841] out_of_memory+0xe25/0x1220 [ 1241.665512][T18841] ? print_unlock_imbalance_bug+0x160/0x160 [ 1241.671441][T18841] ? mutex_lock_nested+0x10/0x10 [ 1241.676406][T18841] ? unregister_oom_notifier+0x20/0x20 [ 1241.681901][T18841] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1241.687478][T18841] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1241.693050][T18841] ? do_raw_spin_unlock+0x11d/0x230 [ 1241.698245][T18841] try_charge_memcg+0xc9d/0x17c0 [ 1241.703211][T18841] ? percpu_ref_put+0x180/0x180 [ 1241.708080][T18841] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1241.713799][T18841] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1241.719776][T18841] ? percpu_ref_tryget+0x15/0x180 [ 1241.724792][T18841] ? percpu_ref_tryget+0x15/0x180 [ 1241.729840][T18841] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1241.735575][T18841] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1241.741335][T18841] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1241.747177][T18841] obj_cgroup_charge+0x36a/0x620 [ 1241.752152][T18841] ? obj_cgroup_charge+0xe9/0x620 [ 1241.757207][T18841] ? mod_objcg_mlstate+0x320/0x320 [ 1241.762361][T18841] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1241.768276][T18841] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1241.769060][T18842] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1241.774167][T18841] slab_pre_alloc_hook+0x2e2/0x300 [ 1241.774199][T18841] ? __register_sysctl_table+0xee/0xed0 [ 1241.774228][T18841] __kmem_cache_alloc_node+0x4f/0x270 [ 1241.774253][T18841] ? __register_sysctl_table+0xee/0xed0 [ 1241.804888][T18841] __kmalloc+0xa3/0x240 [ 1241.809036][T18841] __register_sysctl_table+0xee/0xed0 [ 1241.814397][T18841] ? register_net_sysctl+0x303/0x370 [ 1241.819688][T18841] mpls_dev_sysctl_register+0x1fe/0x2f0 [ 1241.821934][T18842] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 1241.825326][T18841] ? mpls_dev_destroy_rcu+0x50/0x50 [ 1241.825360][T18841] ? _find_next_bit+0x11e/0x130 [ 1241.825383][T18841] mpls_dev_notify+0x247/0x770 [ 1241.833132][T18842] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1241.838098][T18841] raw_notifier_call_chain+0xcb/0x160 [ 1241.838132][T18841] register_netdevice+0x16a8/0x1b80 [ 1241.838161][T18841] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1241.838184][T18841] ? alloc_netdev_mqs+0xad6/0xf10 [ 1241.838202][T18841] ? memcpy+0x3c/0x60 [ 1241.838222][T18841] ? alloc_netdev_mqs+0xb56/0xf10 [ 1241.838243][T18841] register_netdev+0x37/0x50 [ 1241.838262][T18841] loopback_net_init+0x71/0x140 [ 1241.838291][T18841] ops_init+0x360/0x5e0 [ 1241.838317][T18841] setup_net+0x4f2/0xbd0 [ 1241.838343][T18841] ? copy_net_ns+0x5b0/0x5b0 [ 1241.838368][T18841] ? copy_net_ns+0x324/0x5b0 [ 1241.838389][T18841] ? down_read_killable+0x1cc/0x340 [ 1241.838418][T18841] copy_net_ns+0x33e/0x5b0 [ 1241.915272][T18842] syz.7.3412 (pid 18842) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1241.919977][T18841] create_new_namespaces+0x3ce/0x700 [ 1241.940126][T18841] unshare_nsproxy_namespaces+0x116/0x160 [ 1241.945888][T18841] ksys_unshare+0x4f6/0x8e0 [ 1241.950419][T18841] ? sighand_ctor+0x40/0x40 [ 1241.954942][T18841] ? lock_chain_count+0x20/0x20 [ 1241.959818][T18841] ? syscall_enter_from_user_mode+0x21/0x80 [ 1241.965728][T18841] __x64_sys_unshare+0x34/0x40 [ 1241.970490][T18841] do_syscall_64+0x4c/0xa0 [ 1241.974895][T18841] ? clear_bhb_loop+0x60/0xb0 [ 1241.979558][T18841] ? clear_bhb_loop+0x60/0xb0 [ 1241.984235][T18841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1241.990130][T18841] RIP: 0033:0x7f205e19e199 [ 1241.994549][T18841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.014163][T18841] RSP: 002b:00007f205efb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1242.022590][T18841] RAX: ffffffffffffffda RBX: 00007f205e425fa0 RCX: 00007f205e19e199 [ 1242.030551][T18841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1242.038507][T18841] RBP: 00007f205e2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.046474][T18841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.054436][T18841] R13: 00007f205e426038 R14: 00007f205e425fa0 R15: 00007ffca3b29d88 [ 1242.062407][T18841] [ 1242.073129][T18841] memory: usage 192kB, limit 192kB, failcnt 211 [ 1242.079931][T18841] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1242.088166][T18841] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1242.096831][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1242.102965][T18841] Memory cgroup stats for /syz9/test: [ 1242.103135][T18841] anon 0 [ 1242.103135][T18841] file 0 [ 1242.103135][T18841] kernel 196608 [ 1242.103135][T18841] kernel_stack 0 [ 1242.103135][T18841] pagetables 0 [ 1242.103135][T18841] sec_pagetables 0 [ 1242.103135][T18841] percpu 1184 [ 1242.103135][T18841] sock 0 [ 1242.103135][T18841] vmalloc 0 [ 1242.103135][T18841] shmem 0 [ 1242.103135][T18841] zswap 0 [ 1242.103135][T18841] zswapped 0 [ 1242.103135][T18841] file_mapped 0 [ 1242.103135][T18841] file_dirty 0 [ 1242.103135][T18841] file_writeback 0 [ 1242.103135][T18841] swapcached 0 [ 1242.103135][T18841] anon_thp 0 [ 1242.103135][T18841] file_thp 0 [ 1242.103135][T18841] shmem_thp 0 [ 1242.103135][T18841] inactive_anon 0 [ 1242.103135][T18841] active_anon 0 [ 1242.103135][T18841] inactive_file 0 [ 1242.103135][T18841] active_file 0 [ 1242.103135][T18841] unevictable 0 [ 1242.103135][T18841] slab_reclaimable 26248 [ 1242.103135][T18841] slab_unreclaimable 165744 [ 1242.103135][T18841] slab 191992 [ 1242.288604][T18841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3409,pid=18836,uid=0 [ 1242.296628][T18855] loop7: detected capacity change from 0 to 1024 [ 1242.314035][T18841] Memory cgroup out of memory: Killed process 18836 (syz.9.3409) total-vm:102656kB, anon-rss:1428kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1242.731854][T18873] input: syz0 as /devices/virtual/input/input15 [ 1242.939690][T18877] fuse: Bad value for 'fd' [ 1244.332161][T18869] loop7: detected capacity change from 0 to 40427 [ 1244.392878][T18869] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1244.453237][T18869] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1244.573970][T18869] F2FS-fs (loop7): invalid crc value [ 1244.640785][T18869] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1244.692549][ T22] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1244.816929][T18869] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1244.842275][T18869] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1244.891444][ T22] usb 10-1: Using ep0 maxpacket: 32 [ 1244.913549][ T22] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1244.936727][T18921] lo speed is unknown, defaulting to 1000 [ 1244.945998][ T22] usb 10-1: config 0 has no interface number 0 [ 1244.961409][ T22] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1244.997540][ T22] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1245.023227][ T22] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1245.041423][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.049554][ T22] usb 10-1: Product: syz [ 1245.071320][ T22] usb 10-1: Manufacturer: syz [ 1245.076059][ T22] usb 10-1: SerialNumber: syz [ 1245.102831][ T22] usb 10-1: config 0 descriptor?? [ 1245.108526][T18908] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1245.628712][ T22] ipheth 10-1:0.196: Apple iPhone USB Ethernet device attached [ 1247.110204][T18976] loop6: detected capacity change from 0 to 1024 [ 1247.172839][T18976] hfsplus: xattr searching failed [ 1247.184191][T18976] hfsplus: xattr searching failed [ 1247.193976][ T26] audit: type=1800 audit(2000000317.059:393): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3448" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1247.216141][T18976] hfsplus: xattr searching failed [ 1247.366434][ T30] hfsplus: b-tree write err: -5, ino 3 [ 1247.477830][ T4317] usb 10-1: USB disconnect, device number 5 [ 1247.604945][T18988] fuse: Bad value for 'fd' [ 1248.317827][ T4317] ipheth 10-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1248.708835][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1250.379346][T19047] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 1250.414038][T19051] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1250.565009][T19065] loop9: detected capacity change from 0 to 2048 [ 1250.965949][T19065] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1251.287234][T19065] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1251.376494][T19065] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1251.418005][T19063] loop6: detected capacity change from 0 to 8192 [ 1251.451892][T19065] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1251.451892][T19065] [ 1251.473960][T19065] EXT4-fs (loop9): Total free blocks count 0 [ 1251.494413][T19065] EXT4-fs (loop9): Free/Dirty block details [ 1251.537905][T19065] EXT4-fs (loop9): free_blocks=66060288 [ 1251.571572][T19065] EXT4-fs (loop9): dirty_blocks=32 [ 1251.576763][T19065] EXT4-fs (loop9): Block reservation details [ 1251.618869][T19065] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 1251.682449][ T4498] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 1251.683427][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1254.265394][T19137] loop6: detected capacity change from 0 to 256 [ 1254.347628][T19137] exfat: Deprecated parameter 'utf8' [ 1254.353088][T19137] exfat: Deprecated parameter 'utf8' [ 1254.358446][T19137] exfat: Deprecated parameter 'namecase' [ 1254.364900][T19137] exfat: Deprecated parameter 'utf8' [ 1254.392929][T19137] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1255.185405][T19163] lo speed is unknown, defaulting to 1000 [ 1256.512767][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.532211][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.543485][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.555289][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.565708][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1256.578618][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1256.618786][T19190] lo speed is unknown, defaulting to 1000 [ 1256.777677][T19190] chnl_net:caif_netlink_parms(): no params data found [ 1256.825957][T19190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.833334][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.841155][T19190] device bridge_slave_0 entered promiscuous mode [ 1256.853027][T19190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.860199][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.869100][T19190] device bridge_slave_1 entered promiscuous mode [ 1256.958757][T19190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.003203][T19190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.122529][T16999] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1257.479828][T19190] team0: Port device team_slave_0 added [ 1257.676197][T19190] team0: Port device team_slave_1 added [ 1257.759547][T19190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.788127][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.827308][T19190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.868253][T19220] overlayfs: failed to clone upperpath [ 1257.877654][T19190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.895116][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.972839][T19190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.011395][T13742] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1258.026800][T19190] device hsr_slave_0 entered promiscuous mode [ 1258.033655][T19190] device hsr_slave_1 entered promiscuous mode [ 1258.040160][T19190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.047963][T19190] Cannot create hsr debugfs directory [ 1258.193090][T13742] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.218268][T13742] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1258.240375][T13742] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1258.263837][T13742] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1258.282067][T13742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.641698][T16999] Bluetooth: hci3: command 0x0409 tx timeout [ 1258.805787][T13742] cxacru 10-1:1.0: send of cm 0x91 failed (-71) [ 1258.855365][T13742] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1258.894172][T13742] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1258.917743][T13742] cxacru: probe of 10-1:1.0 failed with error -71 [ 1258.938011][T13742] usb 10-1: USB disconnect, device number 6 [ 1260.741509][T16999] Bluetooth: hci3: command 0x041b tx timeout [ 1261.544198][T19278] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1261.610064][T19278] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1261.642841][T19190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1261.653576][T19190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1261.674731][T19190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1261.681705][T19278] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1261.707050][T19190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1261.714292][T19278] Error parsing options; rc = [-22] [ 1262.061622][T19190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.104654][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1262.131953][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1262.157797][T19190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.210722][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1262.241094][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1262.264516][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.271728][ T4757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.310248][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1262.359364][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1262.375777][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.389516][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.396709][ T4757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.585087][T19303] loop9: detected capacity change from 0 to 32768 [ 1262.686159][T19303] XFS (loop9): Mounting V5 Filesystem [ 1262.693005][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1262.752789][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1262.798619][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1262.807943][T16999] Bluetooth: hci3: command 0x040f tx timeout [ 1262.887057][T19303] XFS (loop9): Ending clean mount [ 1262.925871][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1262.936993][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.945938][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1263.121274][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.416071][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.479907][T19190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.516956][T19190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1263.549097][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1263.562225][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1263.584987][T16997] XFS (loop9): Unmounting Filesystem [ 1263.654594][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.689702][T19347] lo speed is unknown, defaulting to 1000 [ 1264.860593][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1264.881630][ T8136] Bluetooth: hci3: command 0x0419 tx timeout [ 1264.910916][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1264.975623][T19190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.099699][T19377] lo speed is unknown, defaulting to 1000 [ 1265.125519][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1265.151960][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1265.236895][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1265.264896][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1265.309455][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1265.334936][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1265.363291][T19190] device veth0_vlan entered promiscuous mode [ 1265.422427][T19190] device veth1_vlan entered promiscuous mode [ 1265.554035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1265.576407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1265.589160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1265.598562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1265.626788][T19190] device veth0_macvtap entered promiscuous mode [ 1265.659712][T19190] device veth1_macvtap entered promiscuous mode [ 1265.739356][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.817179][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.833493][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.861471][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.899057][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.937066][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.981470][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.003484][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.028266][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.045503][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.101894][T19190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.619670][T19410] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1266.718104][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.848839][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.878007][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.899264][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.917746][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.941160][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.964912][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.993034][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.009705][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1267.032755][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.113555][T19190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.121487][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1267.129970][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1267.160759][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1267.176272][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1267.277048][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1267.343130][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1267.594940][T19190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.649195][T19190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.675386][T19190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.749418][T19190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.854231][T19435] lo speed is unknown, defaulting to 1000 [ 1267.958275][T10495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.073540][T10495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.668542][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1268.712524][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.747793][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.830858][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1268.987482][T19452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1269.003168][T19452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1269.020481][T19452] device gretap0 entered promiscuous mode [ 1269.061120][T19452] device gretap0 left promiscuous mode [ 1269.111304][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1269.120335][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1270.106211][T19454] device gretap0 entered promiscuous mode [ 1270.220490][T19454] device gretap0 left promiscuous mode [ 1270.471523][ T22] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1270.674853][ T22] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1270.703716][ T22] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1270.754701][ T22] usb 10-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1270.799012][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.813009][ T22] usb 10-1: Product: syz [ 1270.818975][ T22] usb 10-1: Manufacturer: syz [ 1270.831730][ T22] usb 10-1: SerialNumber: syz [ 1270.935974][T19477] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 1270.955728][T19477] orangefs_mount: mount request failed with -110 [ 1271.102953][ T22] kaweth 10-1:1.0: Firmware present in device. [ 1271.268130][ T22] kaweth 10-1:1.0: Statistics collection: 0 [ 1271.286267][ T22] kaweth 10-1:1.0: Multicast filter limit: 0 [ 1271.293278][T19486] loop7: detected capacity change from 0 to 8 [ 1271.305717][ T22] kaweth 10-1:1.0: MTU: 0 [ 1271.320407][ T22] kaweth 10-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1271.687623][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3578'. [ 1271.956434][ T22] kaweth 10-1:1.0: kaweth interface created at eth1 [ 1272.419464][ T22] usb 10-1: USB disconnect, device number 7 [ 1273.999056][T19542] lo speed is unknown, defaulting to 1000 [ 1274.013693][T19541] syz.1.3587 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1274.048390][T19541] CPU: 1 PID: 19541 Comm: syz.1.3587 Not tainted syzkaller #0 [ 1274.055933][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1274.066016][T19541] Call Trace: [ 1274.069319][T19541] [ 1274.072271][T19541] dump_stack_lvl+0x188/0x24e [ 1274.076983][T19541] ? ___ratelimit+0x14e/0x610 [ 1274.081697][T19541] ? show_regs_print_info+0x12/0x12 [ 1274.086933][T19541] ? load_image+0x410/0x410 [ 1274.091470][T19541] ? ___ratelimit+0x474/0x610 [ 1274.096186][T19541] ? radix_tree_cpu_dead+0x160/0x160 [ 1274.101514][T19541] dump_header+0xd8/0x820 [ 1274.105884][T19541] oom_kill_process+0x361/0x550 [ 1274.110778][T19541] out_of_memory+0xe25/0x1220 [ 1274.115496][T19541] ? print_unlock_imbalance_bug+0x160/0x160 [ 1274.121430][T19541] ? mutex_lock_nested+0x10/0x10 [ 1274.126398][T19541] ? unregister_oom_notifier+0x20/0x20 [ 1274.131902][T19541] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1274.137487][T19541] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1274.143074][T19541] ? do_raw_spin_unlock+0x11d/0x230 [ 1274.148315][T19541] try_charge_memcg+0xc9d/0x17c0 [ 1274.153292][T19541] ? xfd_validate_state+0x69/0x140 [ 1274.158455][T19541] ? percpu_ref_put+0x180/0x180 [ 1274.163341][T19541] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1274.169109][T19541] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1274.175121][T19541] ? percpu_ref_tryget+0x15/0x180 [ 1274.180172][T19541] ? percpu_ref_tryget+0x15/0x180 [ 1274.185224][T19541] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1274.190973][T19541] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1274.196732][T19541] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1274.202573][T19541] obj_cgroup_charge+0x36a/0x620 [ 1274.207559][T19541] ? obj_cgroup_charge+0xe9/0x620 [ 1274.212617][T19541] ? mod_objcg_mlstate+0x320/0x320 [ 1274.217752][T19541] ? percpu_ref_tryget+0x15/0x180 [ 1274.222803][T19541] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1274.228721][T19541] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1274.234648][T19541] slab_pre_alloc_hook+0x2e2/0x300 [ 1274.239788][T19541] kmem_cache_alloc+0x56/0x2f0 [ 1274.244573][T19541] ? vm_area_alloc+0x20/0xe0 [ 1274.249197][T19541] vm_area_alloc+0x20/0xe0 [ 1274.253640][T19541] mmap_region+0xcbc/0x1c50 [ 1274.258187][T19541] ? file_mmap_ok+0x170/0x170 [ 1274.262893][T19541] ? vma_expand+0x850/0x850 [ 1274.267428][T19541] ? cap_mmap_addr+0x153/0x2c0 [ 1274.272236][T19541] do_mmap+0x9ce/0x10d0 [ 1274.276427][T19541] ? mlock_future_check+0x100/0x100 [ 1274.281650][T19541] ? ima_file_mmap+0xf7/0x140 [ 1274.286360][T19541] ? ima_file_free+0x3e0/0x3e0 [ 1274.291159][T19541] vm_mmap_pgoff+0x1c1/0x2d0 [ 1274.295788][T19541] ? account_locked_vm+0xe0/0xe0 [ 1274.300761][T19541] ? ksys_mmap_pgoff+0xef/0x720 [ 1274.305640][T19541] ? lockdep_hardirqs_on+0x94/0x140 [ 1274.310864][T19541] do_syscall_64+0x4c/0xa0 [ 1274.315306][T19541] ? clear_bhb_loop+0x60/0xb0 [ 1274.320008][T19541] ? clear_bhb_loop+0x60/0xb0 [ 1274.324716][T19541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1274.330636][T19541] RIP: 0033:0x7ff06eb9df02 [ 1274.335079][T19541] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1274.354696][T19541] RSP: 002b:00007ffdea1c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1274.363135][T19541] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff06eb9df02 [ 1274.371134][T19541] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1274.379130][T19541] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 1274.387126][T19541] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdea1c7150 [ 1274.395118][T19541] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1274.403130][T19541] [ 1274.624553][T19553] kvm [19552]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xb200000000 [ 1274.665302][T19553] kvm [19552]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xb200000000 [ 1274.719330][T19553] kvm [19552]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xb2be702111 [ 1274.764756][T19553] kvm [19552]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xb200000000 [ 1274.849160][T19553] kvm [19552]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xb200000000 [ 1275.437026][T19541] memory: usage 24kB, limit 192kB, failcnt 63 [ 1275.443412][T19541] memory+swap: usage 24kB, limit 9007199254740988kB, failcnt 0 [ 1275.450983][T19541] kmem: usage 24kB, limit 9007199254740988kB, failcnt 0 [ 1275.458157][T19541] Memory cgroup stats for /syz1/test: [ 1275.458326][T19541] anon 0 [ 1275.458326][T19541] file 0 [ 1275.458326][T19541] kernel 20480 [ 1275.458326][T19541] kernel_stack 0 [ 1275.458326][T19541] pagetables 0 [ 1275.458326][T19541] sec_pagetables 0 [ 1275.458326][T19541] percpu 0 [ 1275.458326][T19541] sock 0 [ 1275.458326][T19541] vmalloc 0 [ 1275.458326][T19541] shmem 0 [ 1275.458326][T19541] zswap 0 [ 1275.458326][T19541] zswapped 0 [ 1275.458326][T19541] file_mapped 0 [ 1275.458326][T19541] file_dirty 0 [ 1275.458326][T19541] file_writeback 0 [ 1275.458326][T19541] swapcached 0 [ 1275.458326][T19541] anon_thp 0 [ 1275.458326][T19541] file_thp 0 [ 1275.458326][T19541] shmem_thp 0 [ 1275.458326][T19541] inactive_anon 0 [ 1275.458326][T19541] active_anon 0 [ 1275.458326][T19541] inactive_file 0 [ 1275.458326][T19541] active_file 0 [ 1275.458326][T19541] unevictable 0 [ 1275.458326][T19541] slab_reclaimable 3088 [ 1275.458326][T19541] slab_unreclaimable 19216 [ 1275.458326][T19541] slab 22304 [ 1275.458326][T19541] workingset_refault_anon 0 [ 1275.621379][T19541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3587,pid=19541,uid=0 [ 1275.640109][T19541] Memory cgroup out of memory: Killed process 19541 (syz.1.3587) total-vm:102656kB, anon-rss:1412kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1277.010580][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1277.260862][ T14] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1277.349148][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.486688][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.514722][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1277.529419][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3605'. [ 1277.535769][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1277.569678][ T14] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1277.595595][ T14] usb 2-1: Manufacturer: syz [ 1277.622328][ T14] usb 2-1: config 0 descriptor?? [ 1277.640535][T19620] lo speed is unknown, defaulting to 1000 [ 1278.066563][ T14] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1278.089549][ T14] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 1278.208702][ T14] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1282.902966][ T4554] usb 2-1: USB disconnect, device number 4 [ 1283.786418][T19722] loop7: detected capacity change from 0 to 512 [ 1284.418347][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1284.589187][T19741] loop9: detected capacity change from 0 to 1024 [ 1284.838065][T19741] syz.9.3635: attempt to access beyond end of device [ 1284.838065][T19741] loop9: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 1285.351505][T19741] Buffer I/O error on dev loop9, logical block 2889, lost async page write [ 1285.533356][ T4371] hfsplus: bad catalog file entry [ 1286.230988][T19774] lo speed is unknown, defaulting to 1000 [ 1287.519141][T19800] ip_tables: iptables: counters copy to user failed while replacing table [ 1288.614564][T19821] overlayfs: failed to clone upperpath [ 1288.759642][T19827] overlayfs: failed to clone lowerpath [ 1289.841411][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1290.016007][T19853] lo speed is unknown, defaulting to 1000 [ 1290.041601][T13748] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1290.110758][T13748] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1290.191618][T19859] syz.7.3661 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1290.255123][T19859] CPU: 0 PID: 19859 Comm: syz.7.3661 Not tainted syzkaller #0 [ 1290.262643][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1290.272721][T19859] Call Trace: [ 1290.276010][T19859] [ 1290.278956][T19859] dump_stack_lvl+0x188/0x24e [ 1290.283657][T19859] ? ___ratelimit+0x14e/0x610 [ 1290.288369][T19859] ? show_regs_print_info+0x12/0x12 [ 1290.293594][T19859] ? load_image+0x410/0x410 [ 1290.298125][T19859] ? ___ratelimit+0x474/0x610 [ 1290.302826][T19859] ? radix_tree_cpu_dead+0x160/0x160 [ 1290.308137][T19859] dump_header+0xd8/0x820 [ 1290.312522][T19859] oom_kill_process+0x361/0x550 [ 1290.317389][T19859] out_of_memory+0xe25/0x1220 [ 1290.322095][T19859] ? print_unlock_imbalance_bug+0x160/0x160 [ 1290.328029][T19859] ? mutex_lock_nested+0x10/0x10 [ 1290.333007][T19859] ? unregister_oom_notifier+0x20/0x20 [ 1290.338502][T19859] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1290.344074][T19859] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1290.349650][T19859] ? do_raw_spin_unlock+0x11d/0x230 [ 1290.354872][T19859] try_charge_memcg+0xc9d/0x17c0 [ 1290.359856][T19859] ? percpu_ref_put+0x180/0x180 [ 1290.364734][T19859] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1290.370524][T19859] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1290.376539][T19859] ? percpu_ref_tryget+0x15/0x180 [ 1290.381599][T19859] ? percpu_ref_tryget+0x15/0x180 [ 1290.386648][T19859] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1290.392395][T19859] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1290.398150][T19859] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1290.403988][T19859] obj_cgroup_charge+0x36a/0x620 [ 1290.408951][T19859] ? obj_cgroup_charge+0xe9/0x620 [ 1290.413995][T19859] ? mod_objcg_mlstate+0x320/0x320 [ 1290.419131][T19859] ? percpu_ref_tryget+0x15/0x180 [ 1290.424184][T19859] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1290.430109][T19859] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1290.436033][T19859] slab_pre_alloc_hook+0x2e2/0x300 [ 1290.441165][T19859] ? __split_vma+0x4f0/0x4f0 [ 1290.445776][T19859] ? vma_merge+0x883/0xa50 [ 1290.450219][T19859] kmem_cache_alloc+0x56/0x2f0 [ 1290.455008][T19859] ? vm_area_dup+0x23/0x1a0 [ 1290.459525][T19859] vm_area_dup+0x23/0x1a0 [ 1290.463869][T19859] __split_vma+0xb9/0x4f0 [ 1290.468219][T19859] ? split_vma+0x70/0xf0 [ 1290.472494][T19859] mprotect_fixup+0x5dc/0x840 [ 1290.477210][T19859] ? change_protection+0x3980/0x3980 [ 1290.482536][T19859] ? apparmor_file_mprotect+0xf4/0x110 [ 1290.488021][T19859] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1290.493262][T19859] ? security_file_mprotect+0x7e/0xb0 [ 1290.498667][T19859] do_mprotect_pkey+0x7ff/0xba0 [ 1290.503549][T19859] ? do_futex+0x310/0x320 [ 1290.507906][T19859] ? prot_none_test+0x10/0x10 [ 1290.512624][T19859] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1290.518642][T19859] __x64_sys_mprotect+0x7c/0x90 [ 1290.523521][T19859] do_syscall_64+0x4c/0xa0 [ 1290.527959][T19859] ? clear_bhb_loop+0x60/0xb0 [ 1290.532655][T19859] ? clear_bhb_loop+0x60/0xb0 [ 1290.537354][T19859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1290.543274][T19859] RIP: 0033:0x7fecdc39e199 [ 1290.547707][T19859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.567340][T19859] RSP: 002b:00007fecdd230028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1290.575779][T19859] RAX: ffffffffffffffda RBX: 00007fecdc626180 RCX: 00007fecdc39e199 [ 1290.583771][T19859] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 1290.591761][T19859] RBP: 00007fecdc4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.599745][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.607735][T19859] R13: 00007fecdc626218 R14: 00007fecdc626180 R15: 00007ffecda71ad8 [ 1290.615740][T19859] [ 1290.793169][T19860] fido_id[19860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1291.041489][T13742] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1291.271407][T13742] usb 2-1: Using ep0 maxpacket: 8 [ 1291.278998][T13742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.391297][T13742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.404896][T13742] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1291.417924][T13742] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1291.998910][T13742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.013462][T13742] usb 2-1: config 0 descriptor?? [ 1292.078932][T19859] memory: usage 192kB, limit 192kB, failcnt 1744 [ 1292.085874][T19859] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1292.095029][T19859] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1292.104089][T19859] Memory cgroup stats for /syz7/test: [ 1292.104309][T19859] anon 0 [ 1292.104309][T19859] file 0 [ 1292.104309][T19859] kernel 196608 [ 1292.104309][T19859] kernel_stack 0 [ 1292.104309][T19859] pagetables 0 [ 1292.104309][T19859] sec_pagetables 0 [ 1292.104309][T19859] percpu 1184 [ 1292.104309][T19859] sock 0 [ 1292.104309][T19859] vmalloc 0 [ 1292.104309][T19859] shmem 0 [ 1292.104309][T19859] zswap 0 [ 1292.104309][T19859] zswapped 0 [ 1292.104309][T19859] file_mapped 0 [ 1292.104309][T19859] file_dirty 0 [ 1292.104309][T19859] file_writeback 0 [ 1292.104309][T19859] swapcached 57344 [ 1292.104309][T19859] anon_thp 0 [ 1292.104309][T19859] file_thp 0 [ 1292.104309][T19859] shmem_thp 0 [ 1292.104309][T19859] inactive_anon 0 [ 1292.104309][T19859] active_anon 0 [ 1292.104309][T19859] inactive_file 0 [ 1292.104309][T19859] active_file 0 [ 1292.104309][T19859] unevictable 0 [ 1292.104309][T19859] slab_reclaimable 26248 [ 1292.104309][T19859] slab_unreclaimable 165632 [ 1292.104309][T19859] slab 191880 [ 1292.236768][T13742] usbhid 2-1:0.0: can't add hid device: -71 [ 1292.247197][T13742] usbhid: probe of 2-1:0.0 failed with error -71 [ 1292.270622][T13742] usb 2-1: USB disconnect, device number 5 [ 1292.417695][T19895] ip_tables: iptables: counters copy to user failed while replacing table [ 1292.489731][T19897] lo speed is unknown, defaulting to 1000 [ 1292.501790][T19893] loop9: detected capacity change from 0 to 8192 [ 1292.539144][T19893] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1292.570705][T19893] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1292.621994][T19893] REISERFS (device loop9): using ordered data mode [ 1292.651325][T19859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.3661,pid=19845,uid=0 [ 1292.667964][T19859] Memory cgroup out of memory: Killed process 19845 (syz.7.3661) total-vm:102920kB, anon-rss:1420kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1292.692809][T19893] reiserfs: using flush barriers [ 1292.714589][T19893] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1292.754993][T19893] REISERFS (device loop9): checking transaction log (loop9) [ 1293.859036][T19893] REISERFS (device loop9): Using tea hash to sort names [ 1293.866562][T19893] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1294.070740][T19893] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 1294.427618][T19921] fuse: Bad value for 'fd' [ 1294.726531][ T28] oom_reaper: reaped process 19845 (syz.7.3661), now anon-rss:0kB, file-rss:22364kB, shmem-rss:0kB [ 1295.270310][T19938] lo speed is unknown, defaulting to 1000 [ 1295.289729][T19937] syz.1.3685 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1295.331843][T19937] CPU: 1 PID: 19937 Comm: syz.1.3685 Not tainted syzkaller #0 [ 1295.339375][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1295.349453][T19937] Call Trace: [ 1295.352749][T19937] [ 1295.355691][T19937] dump_stack_lvl+0x188/0x24e [ 1295.360386][T19937] ? ___ratelimit+0x14e/0x610 [ 1295.365093][T19937] ? show_regs_print_info+0x12/0x12 [ 1295.370317][T19937] ? load_image+0x410/0x410 [ 1295.374853][T19937] ? ___ratelimit+0x474/0x610 [ 1295.379568][T19937] ? radix_tree_cpu_dead+0x160/0x160 [ 1295.384888][T19937] dump_header+0xd8/0x820 [ 1295.389263][T19937] oom_kill_process+0x361/0x550 [ 1295.394158][T19937] out_of_memory+0xe25/0x1220 [ 1295.398868][T19937] ? print_unlock_imbalance_bug+0x160/0x160 [ 1295.404795][T19937] ? mutex_lock_nested+0x10/0x10 [ 1295.409766][T19937] ? unregister_oom_notifier+0x20/0x20 [ 1295.415256][T19937] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1295.420921][T19937] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1295.426510][T19937] ? do_raw_spin_unlock+0x11d/0x230 [ 1295.431734][T19937] try_charge_memcg+0xc9d/0x17c0 [ 1295.436674][T19937] ? xfd_validate_state+0x69/0x140 [ 1295.441796][T19937] ? percpu_ref_put+0x180/0x180 [ 1295.446644][T19937] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1295.452371][T19937] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1295.458356][T19937] ? percpu_ref_tryget+0x15/0x180 [ 1295.463376][T19937] ? percpu_ref_tryget+0x15/0x180 [ 1295.468396][T19937] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1295.474283][T19937] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1295.480023][T19937] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1295.485828][T19937] obj_cgroup_charge+0x36a/0x620 [ 1295.490766][T19937] ? obj_cgroup_charge+0xe9/0x620 [ 1295.495788][T19937] ? mod_objcg_mlstate+0x320/0x320 [ 1295.500920][T19937] ? percpu_ref_tryget+0x15/0x180 [ 1295.505940][T19937] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1295.511828][T19937] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1295.517719][T19937] slab_pre_alloc_hook+0x2e2/0x300 [ 1295.522831][T19937] kmem_cache_alloc+0x56/0x2f0 [ 1295.527587][T19937] ? vm_area_alloc+0x20/0xe0 [ 1295.532172][T19937] vm_area_alloc+0x20/0xe0 [ 1295.536581][T19937] mmap_region+0xcbc/0x1c50 [ 1295.541093][T19937] ? file_mmap_ok+0x170/0x170 [ 1295.545773][T19937] ? vma_expand+0x850/0x850 [ 1295.550271][T19937] ? cap_mmap_addr+0x153/0x2c0 [ 1295.555039][T19937] do_mmap+0x9ce/0x10d0 [ 1295.559195][T19937] ? mlock_future_check+0x100/0x100 [ 1295.564382][T19937] ? ima_file_mmap+0xf7/0x140 [ 1295.569055][T19937] ? ima_file_free+0x3e0/0x3e0 [ 1295.573820][T19937] vm_mmap_pgoff+0x1c1/0x2d0 [ 1295.578434][T19937] ? account_locked_vm+0xe0/0xe0 [ 1295.583369][T19937] ? ksys_mmap_pgoff+0xef/0x720 [ 1295.588216][T19937] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.593413][T19937] do_syscall_64+0x4c/0xa0 [ 1295.597825][T19937] ? clear_bhb_loop+0x60/0xb0 [ 1295.602511][T19937] ? clear_bhb_loop+0x60/0xb0 [ 1295.607183][T19937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.613071][T19937] RIP: 0033:0x7ff06eb9df02 [ 1295.617478][T19937] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1295.637089][T19937] RSP: 002b:00007ffdea1c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1295.645496][T19937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff06eb9df02 [ 1295.653460][T19937] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1295.661421][T19937] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 1295.669383][T19937] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdea1c7150 [ 1295.677346][T19937] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1295.685327][T19937] [ 1295.817062][T19943] device syzkaller0 entered promiscuous mode [ 1296.159907][T19937] memory: usage 192kB, limit 192kB, failcnt 109 [ 1296.179209][T19937] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1296.203814][T19937] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1296.244365][T19937] Memory cgroup stats for /syz1/test: [ 1296.244575][T19937] anon 0 [ 1296.244575][T19937] file 0 [ 1296.244575][T19937] kernel 196608 [ 1296.244575][T19937] kernel_stack 0 [ 1296.244575][T19937] pagetables 0 [ 1296.244575][T19937] sec_pagetables 0 [ 1296.244575][T19937] percpu 1184 [ 1296.244575][T19937] sock 0 [ 1296.244575][T19937] vmalloc 0 [ 1296.244575][T19937] shmem 0 [ 1296.244575][T19937] zswap 0 [ 1296.244575][T19937] zswapped 0 [ 1296.244575][T19937] file_mapped 0 [ 1296.244575][T19937] file_dirty 0 [ 1296.244575][T19937] file_writeback 0 [ 1296.244575][T19937] swapcached 0 [ 1296.244575][T19937] anon_thp 0 [ 1296.244575][T19937] file_thp 0 [ 1296.244575][T19937] shmem_thp 0 [ 1296.244575][T19937] inactive_anon 0 [ 1296.244575][T19937] active_anon 0 [ 1296.244575][T19937] inactive_file 0 [ 1296.244575][T19937] active_file 0 [ 1296.244575][T19937] unevictable 0 [ 1296.244575][T19937] slab_reclaimable 27792 [ 1296.244575][T19937] slab_unreclaimable 165632 [ 1296.244575][T19937] slab 193424 [ 1296.537926][T19937] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3685,pid=19937,uid=0 [ 1296.580212][T19937] Memory cgroup out of memory: Killed process 19937 (syz.1.3685) total-vm:102656kB, anon-rss:1420kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1298.037223][T19998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1298.670548][ T28] oom_reaper: reaped process 19937 (syz.1.3685), now anon-rss:0kB, file-rss:21964kB, shmem-rss:0kB [ 1300.104146][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.110495][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.981560][T19995] lo speed is unknown, defaulting to 1000 [ 1302.237574][T20027] input: syz0 as /devices/virtual/input/input16 [ 1302.485168][T20035] netlink: 'syz.8.3702': attribute type 39 has an invalid length. [ 1302.811580][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1303.048136][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1303.070446][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1303.094315][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 1303.105788][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.337366][ T22] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1303.989605][ T22] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1304.166696][ T22] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1304.173881][ T22] input input17: Device does not respond to id packet M [ 1304.226864][T20075] lo speed is unknown, defaulting to 1000 [ 1304.368564][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.385247][ T22] input input17: Device does not respond to id packet P [ 1304.407870][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.429932][ T22] input input17: Device does not respond to id packet B [ 1304.445124][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.458025][ T22] input input17: Device does not respond to id packet N [ 1304.474245][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.495939][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.508951][T20083] lo speed is unknown, defaulting to 1000 [ 1304.510523][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.527918][ T22] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1304.537914][ T22] iforce 2-1:1.0: usb_submit_urb failed -90 [ 1304.548945][ T22] iforce 2-1:1.0: usb_submit_urb failed -90 [ 1304.567358][T20092] loop9: detected capacity change from 0 to 128 [ 1304.583049][ T22] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input17 [ 1304.648074][T20092] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1304.708080][T20092] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.739576][ T22] usb 2-1: USB disconnect, device number 6 [ 1305.058858][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1305.306163][T20105] loop9: detected capacity change from 0 to 4096 [ 1305.341766][T20105] EXT4-fs: Ignoring removed nobh option [ 1305.347504][T20105] EXT4-fs: Ignoring removed bh option [ 1305.413452][T20105] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1306.528070][T20105] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1307.191934][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1307.284883][T20135] syz.1.3728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1307.344664][T20133] lo speed is unknown, defaulting to 1000 [ 1307.360706][T20135] CPU: 1 PID: 20135 Comm: syz.1.3728 Not tainted syzkaller #0 [ 1307.368223][T20135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1307.378299][T20135] Call Trace: [ 1307.381598][T20135] [ 1307.384545][T20135] dump_stack_lvl+0x188/0x24e [ 1307.389256][T20135] ? ___ratelimit+0x14e/0x610 [ 1307.393962][T20135] ? show_regs_print_info+0x12/0x12 [ 1307.399191][T20135] ? load_image+0x410/0x410 [ 1307.403739][T20135] ? ___ratelimit+0x474/0x610 [ 1307.408451][T20135] ? radix_tree_cpu_dead+0x160/0x160 [ 1307.413773][T20135] dump_header+0xd8/0x820 [ 1307.418136][T20135] oom_kill_process+0x361/0x550 [ 1307.423015][T20135] out_of_memory+0xe25/0x1220 [ 1307.427727][T20135] ? print_unlock_imbalance_bug+0x160/0x160 [ 1307.433660][T20135] ? mutex_lock_nested+0x10/0x10 [ 1307.438638][T20135] ? unregister_oom_notifier+0x20/0x20 [ 1307.444138][T20135] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1307.449732][T20135] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1307.455315][T20135] ? do_raw_spin_unlock+0x11d/0x230 [ 1307.460542][T20135] try_charge_memcg+0xc9d/0x17c0 [ 1307.465535][T20135] ? percpu_ref_put+0x180/0x180 [ 1307.470417][T20135] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1307.476172][T20135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1307.482202][T20135] ? percpu_ref_tryget+0x15/0x180 [ 1307.487262][T20135] ? percpu_ref_tryget+0x15/0x180 [ 1307.492328][T20135] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1307.498084][T20135] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1307.503886][T20135] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1307.509727][T20135] obj_cgroup_charge+0x36a/0x620 [ 1307.514701][T20135] ? obj_cgroup_charge+0xe9/0x620 [ 1307.519766][T20135] ? mod_objcg_mlstate+0x320/0x320 [ 1307.524912][T20135] ? percpu_ref_tryget+0x15/0x180 [ 1307.529975][T20135] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1307.535905][T20135] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1307.541840][T20135] slab_pre_alloc_hook+0x2e2/0x300 [ 1307.546985][T20135] ? __split_vma+0x4f0/0x4f0 [ 1307.551608][T20135] ? vma_merge+0x883/0xa50 [ 1307.556061][T20135] kmem_cache_alloc+0x56/0x2f0 [ 1307.560855][T20135] ? vm_area_dup+0x23/0x1a0 [ 1307.565390][T20135] vm_area_dup+0x23/0x1a0 [ 1307.569748][T20135] __split_vma+0xb9/0x4f0 [ 1307.574114][T20135] ? split_vma+0x70/0xf0 [ 1307.578395][T20135] mprotect_fixup+0x5dc/0x840 [ 1307.583120][T20135] ? change_protection+0x3980/0x3980 [ 1307.588445][T20135] ? apparmor_file_mprotect+0xf4/0x110 [ 1307.593941][T20135] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1307.599182][T20135] ? security_file_mprotect+0x7e/0xb0 [ 1307.604588][T20135] do_mprotect_pkey+0x7ff/0xba0 [ 1307.609476][T20135] ? do_futex+0x310/0x320 [ 1307.613853][T20135] ? prot_none_test+0x10/0x10 [ 1307.618580][T20135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1307.624614][T20135] __x64_sys_mprotect+0x7c/0x90 [ 1307.629509][T20135] do_syscall_64+0x4c/0xa0 [ 1307.633982][T20135] ? clear_bhb_loop+0x60/0xb0 [ 1307.638690][T20135] ? clear_bhb_loop+0x60/0xb0 [ 1307.643400][T20135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.649319][T20135] RIP: 0033:0x7ff06eb9e199 [ 1307.653756][T20135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.673388][T20135] RSP: 002b:00007ff06fb2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1307.681828][T20135] RAX: ffffffffffffffda RBX: 00007ff06ee26090 RCX: 00007ff06eb9e199 [ 1307.689830][T20135] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 1307.697827][T20135] RBP: 00007ff06ec358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.705823][T20135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.713816][T20135] R13: 00007ff06ee26128 R14: 00007ff06ee26090 R15: 00007ffdea1c7058 [ 1307.721827][T20135] [ 1307.967941][T20141] lo speed is unknown, defaulting to 1000 [ 1308.241038][T20125] loop7: detected capacity change from 0 to 40427 [ 1308.289023][T20125] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1308.321799][T20125] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1308.372728][T20125] F2FS-fs (loop7): invalid crc value [ 1308.410968][T20135] memory: usage 192kB, limit 192kB, failcnt 210 [ 1308.433375][T20125] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1308.451337][T20135] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1308.474334][T20135] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1308.491088][T20135] Memory cgroup stats for /syz1/test: [ 1308.491747][T20135] anon 0 [ 1308.491747][T20135] file 0 [ 1308.491747][T20135] kernel 196608 [ 1308.491747][T20135] kernel_stack 0 [ 1308.491747][T20135] pagetables 0 [ 1308.491747][T20135] sec_pagetables 0 [ 1308.491747][T20135] percpu 1184 [ 1308.491747][T20135] sock 0 [ 1308.491747][T20135] vmalloc 0 [ 1308.491747][T20135] shmem 0 [ 1308.491747][T20135] zswap 0 [ 1308.491747][T20135] zswapped 0 [ 1308.491747][T20135] file_mapped 0 [ 1308.491747][T20135] file_dirty 0 [ 1308.491747][T20135] file_writeback 0 [ 1308.491747][T20135] swapcached 0 [ 1308.491747][T20135] anon_thp 0 [ 1308.491747][T20135] file_thp 0 [ 1308.491747][T20135] shmem_thp 0 [ 1308.491747][T20135] inactive_anon 0 [ 1308.491747][T20135] active_anon 0 [ 1308.491747][T20135] inactive_file 0 [ 1308.491747][T20135] active_file 0 [ 1308.491747][T20135] unevictable 0 [ 1308.491747][T20135] slab_reclaimable 27792 [ 1308.491747][T20135] slab_unreclaimable 165632 [ 1308.491747][T20135] slab 193424 [ 1308.803973][T20125] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1308.895014][T20125] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1308.966551][T20135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3728,pid=20132,uid=0 [ 1308.995090][T20170] loop9: detected capacity change from 0 to 4096 [ 1309.006714][T20135] Memory cgroup out of memory: Killed process 20132 (syz.1.3728) total-vm:102788kB, anon-rss:1420kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1309.125607][T20170] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1309.422644][T16997] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 1309.873881][ T4317] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1310.063342][ T4317] usb 2-1: Using ep0 maxpacket: 8 [ 1310.070146][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.141447][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.198537][ T4317] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 1310.249303][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.305891][ T4317] usb 2-1: Product: syz [ 1310.310121][ T4317] usb 2-1: Manufacturer: syz [ 1310.342929][ T4317] usb 2-1: SerialNumber: syz [ 1310.512733][T20193] loop9: detected capacity change from 0 to 32768 [ 1310.588743][ T4317] usb 2-1: unit 0 not found! [ 1310.736522][ T4317] usb 2-1: USB disconnect, device number 7 [ 1310.779725][T20193] XFS (loop9): Mounting V5 Filesystem [ 1310.967518][T20193] XFS (loop9): Ending clean mount [ 1311.098516][T16997] XFS (loop9): Unmounting Filesystem [ 1311.103477][T20032] udevd[20032]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1312.082864][T20242] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1312.267916][T13748] infiniband s`z1: ib_query_port failed (-19) [ 1312.367606][T20242] siw: device registration error -19 [ 1315.114482][ T8136] Bluetooth: hci3: link tx timeout [ 1315.132129][ T8136] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1315.594459][T20310] syz.1.3769 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1315.649772][T20310] CPU: 1 PID: 20310 Comm: syz.1.3769 Not tainted syzkaller #0 [ 1315.657291][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1315.667366][T20310] Call Trace: [ 1315.670658][T20310] [ 1315.673601][T20310] dump_stack_lvl+0x188/0x24e [ 1315.678292][T20310] ? ___ratelimit+0x14e/0x610 [ 1315.682985][T20310] ? show_regs_print_info+0x12/0x12 [ 1315.688192][T20310] ? load_image+0x410/0x410 [ 1315.692708][T20310] ? ___ratelimit+0x474/0x610 [ 1315.697405][T20310] ? radix_tree_cpu_dead+0x160/0x160 [ 1315.702708][T20310] dump_header+0xd8/0x820 [ 1315.707054][T20310] oom_kill_process+0x361/0x550 [ 1315.711919][T20310] out_of_memory+0xe25/0x1220 [ 1315.716617][T20310] ? print_unlock_imbalance_bug+0x160/0x160 [ 1315.722525][T20310] ? mutex_lock_nested+0x10/0x10 [ 1315.727483][T20310] ? unregister_oom_notifier+0x20/0x20 [ 1315.732993][T20310] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1315.738559][T20310] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1315.744132][T20310] ? do_raw_spin_unlock+0x11d/0x230 [ 1315.749346][T20310] try_charge_memcg+0xc9d/0x17c0 [ 1315.754318][T20310] ? percpu_ref_put+0x180/0x180 [ 1315.759184][T20310] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1315.764925][T20310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1315.770924][T20310] ? percpu_ref_tryget+0x15/0x180 [ 1315.775966][T20310] ? percpu_ref_tryget+0x15/0x180 [ 1315.781007][T20310] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1315.786742][T20310] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1315.792476][T20310] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1315.798297][T20310] obj_cgroup_charge+0x36a/0x620 [ 1315.803253][T20310] ? obj_cgroup_charge+0xe9/0x620 [ 1315.808286][T20310] ? mod_objcg_mlstate+0x320/0x320 [ 1315.813411][T20310] ? percpu_ref_tryget+0x15/0x180 [ 1315.818453][T20310] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1315.824527][T20310] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1315.830441][T20310] slab_pre_alloc_hook+0x2e2/0x300 [ 1315.835580][T20310] kmem_cache_alloc+0x56/0x2f0 [ 1315.840357][T20310] ? vm_area_alloc+0x20/0xe0 [ 1315.844969][T20310] vm_area_alloc+0x20/0xe0 [ 1315.849392][T20310] mmap_region+0xcbc/0x1c50 [ 1315.853925][T20310] ? file_mmap_ok+0x170/0x170 [ 1315.858621][T20310] ? vma_expand+0x850/0x850 [ 1315.863132][T20310] ? cap_mmap_addr+0x153/0x2c0 [ 1315.867930][T20310] do_mmap+0x9ce/0x10d0 [ 1315.872113][T20310] ? mlock_future_check+0x100/0x100 [ 1315.877327][T20310] ? ima_file_mmap+0xf7/0x140 [ 1315.882023][T20310] ? ima_file_free+0x3e0/0x3e0 [ 1315.886805][T20310] ? __up_read+0x2b4/0x6b0 [ 1315.891236][T20310] vm_mmap_pgoff+0x1c1/0x2d0 [ 1315.895846][T20310] ? account_locked_vm+0xe0/0xe0 [ 1315.900800][T20310] ? ksys_mmap_pgoff+0xef/0x720 [ 1315.905664][T20310] ? lockdep_hardirqs_on+0x94/0x140 [ 1315.910883][T20310] do_syscall_64+0x4c/0xa0 [ 1315.915309][T20310] ? clear_bhb_loop+0x60/0xb0 [ 1315.920007][T20310] ? clear_bhb_loop+0x60/0xb0 [ 1315.924693][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1315.930601][T20310] RIP: 0033:0x7ff06eb9df02 [ 1315.935026][T20310] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1315.954646][T20310] RSP: 002b:00007ffdea1c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1315.963081][T20310] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff06eb9df02 [ 1315.971060][T20310] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1315.979040][T20310] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 1315.987022][T20310] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdea1c7150 [ 1315.995015][T20310] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1316.003006][T20310] [ 1317.213699][ T8136] Bluetooth: hci3: command 0x0406 tx timeout [ 1317.290091][T20310] memory: usage 192kB, limit 192kB, failcnt 275 [ 1317.296494][T20310] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1317.311330][T20310] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1317.318403][T20310] Memory cgroup stats for /syz1/test: [ 1317.318593][T20310] anon 0 [ 1317.318593][T20310] file 0 [ 1317.318593][T20310] kernel 196608 [ 1317.318593][T20310] kernel_stack 0 [ 1317.318593][T20310] pagetables 0 [ 1317.318593][T20310] sec_pagetables 0 [ 1317.318593][T20310] percpu 1184 [ 1317.318593][T20310] sock 0 [ 1317.318593][T20310] vmalloc 0 [ 1317.318593][T20310] shmem 0 [ 1317.318593][T20310] zswap 0 [ 1317.318593][T20310] zswapped 0 [ 1317.318593][T20310] file_mapped 0 [ 1317.318593][T20310] file_dirty 0 [ 1317.318593][T20310] file_writeback 0 [ 1317.318593][T20310] swapcached 0 [ 1317.318593][T20310] anon_thp 0 [ 1317.318593][T20310] file_thp 0 [ 1317.318593][T20310] shmem_thp 0 [ 1317.318593][T20310] inactive_anon 0 [ 1317.318593][T20310] active_anon 0 [ 1317.318593][T20310] inactive_file 0 [ 1317.318593][T20310] active_file 0 [ 1317.318593][T20310] unevictable 0 [ 1317.318593][T20310] slab_reclaimable 26248 [ 1317.318593][T20310] slab_unreclaimable 165632 [ 1317.318593][T20310] slab 191880 [ 1317.441479][T20310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3769,pid=20310,uid=0 [ 1317.458533][T20310] Memory cgroup out of memory: Killed process 20310 (syz.1.3769) total-vm:102656kB, anon-rss:1420kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1317.651169][T20322] loop7: detected capacity change from 0 to 32768 [ 1317.710021][T20322] JBD2: Ignoring recovery information on journal [ 1317.734156][T20362] netlink: 'syz.3.3778': attribute type 5 has an invalid length. [ 1318.609762][T20322] JBD2: recovery failed [ 1318.616231][T20322] (syz.7.3772,20322,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 1318.676528][T20322] (syz.7.3772,20322,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 1318.724372][T20322] (syz.7.3772,20322,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 1318.742132][T20382] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1318.775210][T20322] (syz.7.3772,20322,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 1318.777464][T20382] binder: 20381:20382 ioctl 4018620d 200000000040 returned -1 [ 1319.141768][T20322] (syz.7.3772,20322,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1324.701636][T20441] syz.9.3792 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1324.797069][T20441] CPU: 1 PID: 20441 Comm: syz.9.3792 Not tainted syzkaller #0 [ 1324.804601][T20441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1324.814682][T20441] Call Trace: [ 1324.817989][T20441] [ 1324.820959][T20441] dump_stack_lvl+0x188/0x24e [ 1324.825672][T20441] ? ___ratelimit+0x14e/0x610 [ 1324.830376][T20441] ? show_regs_print_info+0x12/0x12 [ 1324.835605][T20441] ? load_image+0x410/0x410 [ 1324.840145][T20441] ? ___ratelimit+0x474/0x610 [ 1324.844859][T20441] ? radix_tree_cpu_dead+0x160/0x160 [ 1324.850269][T20441] dump_header+0xd8/0x820 [ 1324.854627][T20441] oom_kill_process+0x361/0x550 [ 1324.859503][T20441] out_of_memory+0xe25/0x1220 [ 1324.864207][T20441] ? print_unlock_imbalance_bug+0x160/0x160 [ 1324.870132][T20441] ? mutex_lock_nested+0x10/0x10 [ 1324.875131][T20441] ? unregister_oom_notifier+0x20/0x20 [ 1324.880600][T20441] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1324.886156][T20441] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1324.891714][T20441] ? do_raw_spin_unlock+0x11d/0x230 [ 1324.896912][T20441] try_charge_memcg+0xc9d/0x17c0 [ 1324.901870][T20441] ? percpu_ref_put+0x180/0x180 [ 1324.906717][T20441] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1324.912438][T20441] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1324.918447][T20441] ? percpu_ref_tryget+0x15/0x180 [ 1324.923470][T20441] ? percpu_ref_tryget+0x15/0x180 [ 1324.928494][T20441] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1324.934215][T20441] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1324.939935][T20441] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1324.945746][T20441] obj_cgroup_charge+0x36a/0x620 [ 1324.950689][T20441] ? obj_cgroup_charge+0xe9/0x620 [ 1324.955712][T20441] ? mod_objcg_mlstate+0x320/0x320 [ 1324.960818][T20441] ? percpu_ref_tryget+0x15/0x180 [ 1324.965840][T20441] ? percpu_ref_tryget+0x15/0x180 [ 1324.970870][T20441] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1324.976765][T20441] slab_pre_alloc_hook+0x2e2/0x300 [ 1324.981877][T20441] ? __devinet_sysctl_register+0xa1/0x320 [ 1324.987589][T20441] __kmem_cache_alloc_node+0x4f/0x270 [ 1324.992954][T20441] ? do_raw_spin_unlock+0x11d/0x230 [ 1324.998170][T20441] ? __devinet_sysctl_register+0xa1/0x320 [ 1325.003883][T20441] __kmalloc_node_track_caller+0xa0/0x240 [ 1325.009599][T20441] kmemdup+0x27/0x60 [ 1325.013501][T20441] __devinet_sysctl_register+0xa1/0x320 [ 1325.019047][T20441] ? neigh_proc_dointvec_ms_jiffies+0x50/0x50 [ 1325.025123][T20441] ? devinet_sysctl_register+0x1f0/0x1f0 [ 1325.030752][T20441] ? ops_init+0x360/0x5e0 [ 1325.035073][T20441] ? setup_net+0x4f2/0xbd0 [ 1325.039490][T20441] ? copy_net_ns+0x33e/0x5b0 [ 1325.044079][T20441] ? create_new_namespaces+0x3ce/0x700 [ 1325.049533][T20441] ? unshare_nsproxy_namespaces+0x116/0x160 [ 1325.055420][T20441] ? ksys_unshare+0x4f6/0x8e0 [ 1325.060110][T20441] ? do_syscall_64+0x4c/0xa0 [ 1325.064696][T20441] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1325.070846][T20441] ? neigh_parms_alloc+0x406/0x500 [ 1325.075960][T20441] devinet_sysctl_register+0x17c/0x1f0 [ 1325.081425][T20441] inetdev_init+0x2ae/0x4e0 [ 1325.085925][T20441] inetdev_event+0x26f/0x13f0 [ 1325.090599][T20441] ? devinet_exit_net+0x220/0x220 [ 1325.095627][T20441] ? arp_netdev_event+0xd4/0x320 [ 1325.100559][T20441] raw_notifier_call_chain+0xcb/0x160 [ 1325.105931][T20441] register_netdevice+0x16a8/0x1b80 [ 1325.111132][T20441] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1325.117538][T20441] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1325.123182][T20441] ? register_netdev+0x2f/0x50 [ 1325.127943][T20441] register_netdev+0x37/0x50 [ 1325.132530][T20441] loopback_net_init+0x71/0x140 [ 1325.137470][T20441] ops_init+0x360/0x5e0 [ 1325.141641][T20441] setup_net+0x4f2/0xbd0 [ 1325.145907][T20441] ? copy_net_ns+0x5b0/0x5b0 [ 1325.150534][T20441] ? copy_net_ns+0x324/0x5b0 [ 1325.155142][T20441] ? down_read_killable+0x1cc/0x340 [ 1325.160351][T20441] copy_net_ns+0x33e/0x5b0 [ 1325.164778][T20441] create_new_namespaces+0x3ce/0x700 [ 1325.170075][T20441] unshare_nsproxy_namespaces+0x116/0x160 [ 1325.175791][T20441] ksys_unshare+0x4f6/0x8e0 [ 1325.180297][T20441] ? sighand_ctor+0x40/0x40 [ 1325.184795][T20441] ? lock_chain_count+0x20/0x20 [ 1325.189739][T20441] ? syscall_enter_from_user_mode+0x21/0x80 [ 1325.195637][T20441] __x64_sys_unshare+0x34/0x40 [ 1325.200396][T20441] do_syscall_64+0x4c/0xa0 [ 1325.204809][T20441] ? clear_bhb_loop+0x60/0xb0 [ 1325.209480][T20441] ? clear_bhb_loop+0x60/0xb0 [ 1325.214154][T20441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1325.220039][T20441] RIP: 0033:0x7f205e19e199 [ 1325.224452][T20441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.244051][T20441] RSP: 002b:00007f205efb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1325.252464][T20441] RAX: ffffffffffffffda RBX: 00007f205e425fa0 RCX: 00007f205e19e199 [ 1325.260433][T20441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1325.268398][T20441] RBP: 00007f205e2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.276372][T20441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.284343][T20441] R13: 00007f205e426038 R14: 00007f205e425fa0 R15: 00007ffca3b29d88 [ 1325.292323][T20441] [ 1325.380806][T20441] memory: usage 152kB, limit 192kB, failcnt 312 [ 1325.387352][T20441] memory+swap: usage 156kB, limit 9007199254740988kB, failcnt 0 [ 1325.395802][T20441] kmem: usage 148kB, limit 9007199254740988kB, failcnt 0 [ 1325.403405][T20441] Memory cgroup stats for /syz9/test: [ 1325.403597][T20441] anon 4096 [ 1325.403597][T20441] file 0 [ 1325.403597][T20441] kernel 151552 [ 1325.403597][T20441] kernel_stack 0 [ 1325.403597][T20441] pagetables 0 [ 1325.403597][T20441] sec_pagetables 0 [ 1325.403597][T20441] percpu 0 [ 1325.403597][T20441] sock 0 [ 1325.403597][T20441] vmalloc 0 [ 1325.403597][T20441] shmem 0 [ 1325.403597][T20441] zswap 0 [ 1325.403597][T20441] zswapped 0 [ 1325.403597][T20441] file_mapped 0 [ 1325.403597][T20441] file_dirty 0 [ 1325.403597][T20441] file_writeback 0 [ 1325.403597][T20441] swapcached 20480 [ 1325.403597][T20441] anon_thp 0 [ 1325.403597][T20441] file_thp 0 [ 1325.403597][T20441] shmem_thp 0 [ 1325.403597][T20441] inactive_anon 0 [ 1325.403597][T20441] active_anon 4096 [ 1325.403597][T20441] inactive_file 0 [ 1325.403597][T20441] active_file 0 [ 1325.403597][T20441] unevictable 0 [ 1325.403597][T20441] slab_reclaimable 26248 [ 1325.403597][T20441] slab_unreclaimable 123488 [ 1325.403597][T20441] slab 149736 [ 1325.604349][T20441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3792,pid=20437,uid=0 [ 1325.612852][T20465] loop7: detected capacity change from 0 to 8 [ 1325.637972][T20465] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1325.649876][T20465] SQUASHFS error: Failed to read block 0x9b: -5 [ 1325.679150][T20465] SQUASHFS error: Unable to read metadata cache entry [99] [ 1326.516881][T20465] SQUASHFS error: Unable to read inode 0x127 [ 1326.700914][T20441] Memory cgroup out of memory: Killed process 20441 (syz.9.3792) total-vm:102788kB, anon-rss:1436kB, file-rss:23696kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1329.279437][ T7412] Bluetooth: hci2: Frame reassembly failed (-84) [ 1329.319761][ T7412] Bluetooth: hci2: Frame reassembly failed (-84) [ 1330.278781][T20546] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1330.286681][T20546] binder: 20545:20546 ioctl 4018620d 200000000040 returned -1 [ 1331.207631][T20555] syz.9.3823 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1331.234822][T20555] CPU: 1 PID: 20555 Comm: syz.9.3823 Not tainted syzkaller #0 [ 1331.242348][T20555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1331.252428][T20555] Call Trace: [ 1331.255723][T20555] [ 1331.258674][T20555] dump_stack_lvl+0x188/0x24e [ 1331.263381][T20555] ? ___ratelimit+0x14e/0x610 [ 1331.268097][T20555] ? show_regs_print_info+0x12/0x12 [ 1331.273331][T20555] ? load_image+0x410/0x410 [ 1331.277864][T20555] ? ___ratelimit+0x474/0x610 [ 1331.282096][ T8136] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1331.282552][T20555] ? radix_tree_cpu_dead+0x160/0x160 [ 1331.282587][T20555] dump_header+0xd8/0x820 [ 1331.299110][T20555] oom_kill_process+0x361/0x550 [ 1331.303997][T20555] out_of_memory+0xe25/0x1220 [ 1331.308715][T20555] ? print_unlock_imbalance_bug+0x160/0x160 [ 1331.314654][T20555] ? mutex_lock_nested+0x10/0x10 [ 1331.319635][T20555] ? unregister_oom_notifier+0x20/0x20 [ 1331.325136][T20555] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1331.330726][T20555] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1331.336315][T20555] ? do_raw_spin_unlock+0x11d/0x230 [ 1331.341545][T20555] try_charge_memcg+0xc9d/0x17c0 [ 1331.346536][T20555] ? percpu_ref_put+0x180/0x180 [ 1331.351416][T20555] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1331.357164][T20555] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1331.363190][T20555] ? percpu_ref_tryget+0x15/0x180 [ 1331.368244][T20555] ? percpu_ref_tryget+0x15/0x180 [ 1331.373295][T20555] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1331.379041][T20555] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1331.384795][T20555] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1331.390632][T20555] obj_cgroup_charge+0x36a/0x620 [ 1331.395598][T20555] ? obj_cgroup_charge+0xe9/0x620 [ 1331.400649][T20555] ? mod_objcg_mlstate+0x320/0x320 [ 1331.405788][T20555] ? percpu_ref_tryget+0x15/0x180 [ 1331.410836][T20555] ? percpu_ref_tryget+0x15/0x180 [ 1331.415890][T20555] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1331.421814][T20555] slab_pre_alloc_hook+0x2e2/0x300 [ 1331.426946][T20555] ? __lock_acquire+0x7ea0/0x7ea0 [ 1331.431993][T20555] ? insert_header+0xaf7/0xdb0 [ 1331.436784][T20555] ? __addrconf_sysctl_register+0xa2/0x3e0 [ 1331.442630][T20555] __kmem_cache_alloc_node+0x4f/0x270 [ 1331.448032][T20555] ? __addrconf_sysctl_register+0xa2/0x3e0 [ 1331.453870][T20555] __kmalloc_node_track_caller+0xa0/0x240 [ 1331.459619][T20555] kmemdup+0x27/0x60 [ 1331.463555][T20555] __addrconf_sysctl_register+0xa2/0x3e0 [ 1331.469218][T20555] ? neigh_proc_dointvec_ms_jiffies+0x50/0x50 [ 1331.475317][T20555] ? addrconf_verify_work+0x30/0x30 [ 1331.480552][T20555] addrconf_sysctl_register+0x15c/0x1b0 [ 1331.486132][T20555] ipv6_add_dev+0xbd4/0x1110 [ 1331.490762][T20555] addrconf_notify+0x634/0xf60 [ 1331.495557][T20555] ? ip6mr_device_event+0x1dd/0x200 [ 1331.500782][T20555] ? raw_notifier_call_chain+0xa3/0x160 [ 1331.506358][T20555] raw_notifier_call_chain+0xcb/0x160 [ 1331.511765][T20555] register_netdevice+0x16a8/0x1b80 [ 1331.517001][T20555] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1331.523447][T20555] ? alloc_netdev_mqs+0xad6/0xf10 [ 1331.528498][T20555] ? memcpy+0x3c/0x60 [ 1331.532509][T20555] ? alloc_netdev_mqs+0xb56/0xf10 [ 1331.537560][T20555] register_netdev+0x37/0x50 [ 1331.542182][T20555] loopback_net_init+0x71/0x140 [ 1331.547068][T20555] ops_init+0x360/0x5e0 [ 1331.551247][T20555] setup_net+0x4f2/0xbd0 [ 1331.555523][T20555] ? copy_net_ns+0x5b0/0x5b0 [ 1331.560145][T20555] ? copy_net_ns+0x324/0x5b0 [ 1331.564774][T20555] ? down_read_killable+0x1cc/0x340 [ 1331.570017][T20555] copy_net_ns+0x33e/0x5b0 [ 1331.574468][T20555] create_new_namespaces+0x3ce/0x700 [ 1331.579788][T20555] unshare_nsproxy_namespaces+0x116/0x160 [ 1331.585539][T20555] ksys_unshare+0x4f6/0x8e0 [ 1331.590072][T20555] ? sighand_ctor+0x40/0x40 [ 1331.594592][T20555] ? lock_chain_count+0x20/0x20 [ 1331.599472][T20555] ? syscall_enter_from_user_mode+0x21/0x80 [ 1331.605399][T20555] __x64_sys_unshare+0x34/0x40 [ 1331.610193][T20555] do_syscall_64+0x4c/0xa0 [ 1331.614632][T20555] ? clear_bhb_loop+0x60/0xb0 [ 1331.619328][T20555] ? clear_bhb_loop+0x60/0xb0 [ 1331.624031][T20555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.629950][T20555] RIP: 0033:0x7f205e19e199 [ 1331.634384][T20555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.654063][T20555] RSP: 002b:00007f205efb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1331.662501][T20555] RAX: ffffffffffffffda RBX: 00007f205e425fa0 RCX: 00007f205e19e199 [ 1331.670496][T20555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1331.678490][T20555] RBP: 00007f205e2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.686487][T20555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.694485][T20555] R13: 00007f205e426038 R14: 00007f205e425fa0 R15: 00007ffca3b29d88 [ 1331.702500][T20555] [ 1332.137045][T20552] loop7: detected capacity change from 0 to 32768 [ 1332.238675][T20552] XFS (loop7): Mounting V5 Filesystem [ 1332.394442][T20552] XFS (loop7): Ending clean mount [ 1332.405755][T20555] memory: usage 188kB, limit 192kB, failcnt 400 [ 1332.412793][T20555] memory+swap: usage 196kB, limit 9007199254740988kB, failcnt 0 [ 1332.421000][T20555] kmem: usage 188kB, limit 9007199254740988kB, failcnt 0 [ 1332.431044][T20555] Memory cgroup stats for /syz9/test: [ 1332.431322][T20555] anon 0 [ 1332.431322][T20555] file 0 [ 1332.431322][T20555] kernel 192512 [ 1332.431322][T20555] kernel_stack 0 [ 1332.431322][T20555] pagetables 0 [ 1332.431322][T20555] sec_pagetables 0 [ 1332.431322][T20555] percpu 1184 [ 1332.431322][T20555] sock 0 [ 1332.431322][T20555] vmalloc 0 [ 1332.431322][T20555] shmem 0 [ 1332.431322][T20555] zswap 0 [ 1332.431322][T20555] zswapped 0 [ 1332.431322][T20555] file_mapped 0 [ 1332.431322][T20555] file_dirty 0 [ 1332.431322][T20555] file_writeback 0 [ 1332.431322][T20555] swapcached 20480 [ 1332.431322][T20555] anon_thp 0 [ 1332.431322][T20555] file_thp 0 [ 1332.431322][T20555] shmem_thp 0 [ 1332.431322][T20555] inactive_anon 0 [ 1332.431322][T20555] active_anon 0 [ 1332.431322][T20555] inactive_file 0 [ 1332.431322][T20555] active_file 0 [ 1332.431322][T20555] unevictable 0 [ 1332.431322][T20555] slab_reclaimable 26248 [ 1332.431322][T20555] slab_unreclaimable 161024 [ 1332.431322][T20555] slab 187272 [ 1332.539468][T20555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3823,pid=20554,uid=0 [ 1332.593548][T20555] Memory cgroup out of memory: Killed process 20555 (syz.9.3823) total-vm:102788kB, anon-rss:1440kB, file-rss:23696kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1332.637014][ T8390] XFS (loop7): Unmounting Filesystem [ 1335.066037][T20626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1335.078122][T20626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1335.087815][T20626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1335.124100][T20626] device bridge_slave_0 left promiscuous mode [ 1335.141543][T20626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.182453][T20626] device bridge_slave_1 left promiscuous mode [ 1335.188747][T20626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.235707][T20626] bond0: (slave bond_slave_0): Releasing backup interface [ 1335.335308][T20626] bond0: (slave bond_slave_1): Releasing backup interface [ 1336.131821][T20626] team0: Port device team_slave_0 removed [ 1336.177993][T20626] team0: Port device team_slave_1 removed [ 1336.194340][T20626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.228882][T20626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.312649][T20626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.321667][T20626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.464726][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1336.711173][T20653] syz.7.3832 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1337.224290][T20653] CPU: 0 PID: 20653 Comm: syz.7.3832 Not tainted syzkaller #0 [ 1337.231822][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1337.241902][T20653] Call Trace: [ 1337.245201][T20653] [ 1337.248152][T20653] dump_stack_lvl+0x188/0x24e [ 1337.252854][T20653] ? ___ratelimit+0x14e/0x610 [ 1337.257561][T20653] ? show_regs_print_info+0x12/0x12 [ 1337.262789][T20653] ? load_image+0x410/0x410 [ 1337.267317][T20653] ? ___ratelimit+0x474/0x610 [ 1337.272025][T20653] ? radix_tree_cpu_dead+0x160/0x160 [ 1337.277341][T20653] dump_header+0xd8/0x820 [ 1337.281704][T20653] oom_kill_process+0x361/0x550 [ 1337.286613][T20653] out_of_memory+0xe25/0x1220 [ 1337.291323][T20653] ? print_unlock_imbalance_bug+0x160/0x160 [ 1337.297248][T20653] ? mutex_lock_nested+0x10/0x10 [ 1337.302215][T20653] ? unregister_oom_notifier+0x20/0x20 [ 1337.307710][T20653] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1337.313291][T20653] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1337.318874][T20653] ? do_raw_spin_unlock+0x11d/0x230 [ 1337.324102][T20653] try_charge_memcg+0xc9d/0x17c0 [ 1337.329071][T20653] ? __lock_acquire+0x7ea0/0x7ea0 [ 1337.334146][T20653] ? percpu_ref_put+0x180/0x180 [ 1337.339020][T20653] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1337.344755][T20653] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1337.350472][T20653] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1337.356191][T20653] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1337.361998][T20653] __memcg_kmem_charge_page+0x220/0x380 [ 1337.367545][T20653] memcg_charge_kernel_stack+0x1ab/0x6d0 [ 1337.373180][T20653] dup_task_struct+0x15b/0x700 [ 1337.377950][T20653] copy_process+0x621/0x4070 [ 1337.382560][T20653] ? idle_dummy+0x10/0x10 [ 1337.386899][T20653] kernel_clone+0x24b/0x900 [ 1337.391403][T20653] ? create_io_thread+0x170/0x170 [ 1337.396434][T20653] __se_sys_clone3+0x32d/0x3f0 [ 1337.401195][T20653] ? __x64_sys_clone3+0x60/0x60 [ 1337.406039][T20653] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1337.412026][T20653] ? _copy_to_user+0xea/0x130 [ 1337.416713][T20653] ? lockdep_hardirqs_on+0x94/0x140 [ 1337.421923][T20653] do_syscall_64+0x4c/0xa0 [ 1337.426366][T20653] ? clear_bhb_loop+0x60/0xb0 [ 1337.431049][T20653] ? clear_bhb_loop+0x60/0xb0 [ 1337.435818][T20653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1337.441708][T20653] RIP: 0033:0x7fecdc39ef89 [ 1337.446156][T20653] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1337.465783][T20653] RSP: 002b:00007ffecda71998 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1337.474217][T20653] RAX: ffffffffffffffda RBX: 00007fecdc35a520 RCX: 00007fecdc39ef89 [ 1337.482203][T20653] RDX: 00007fecdc35a520 RSI: 0000000000000058 RDI: 00007ffecda719f0 [ 1337.490197][T20653] RBP: 00007fecdd2306c0 R08: 00007fecdd2306c0 R09: 00007ffecda71ad7 [ 1337.498181][T20653] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1337.506168][T20653] R13: 000000000000006e R14: 00007ffecda719f0 R15: 00007ffecda71ad8 [ 1337.514175][T20653] [ 1337.805417][T20683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1337.835736][T20686] overlayfs: failed to clone upperpath [ 1338.909590][T20653] memory: usage 192kB, limit 192kB, failcnt 1848 [ 1338.918164][T20653] memory+swap: usage 196kB, limit 9007199254740988kB, failcnt 0 [ 1338.932725][T20653] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 1338.939935][T20653] Memory cgroup stats for /syz7/test: [ 1338.940147][T20653] anon 0 [ 1338.940147][T20653] file 0 [ 1338.940147][T20653] kernel 196608 [ 1338.940147][T20653] kernel_stack 0 [ 1338.940147][T20653] pagetables 0 [ 1338.940147][T20653] sec_pagetables 0 [ 1338.940147][T20653] percpu 1184 [ 1338.940147][T20653] sock 0 [ 1338.940147][T20653] vmalloc 0 [ 1338.940147][T20653] shmem 0 [ 1338.940147][T20653] zswap 0 [ 1338.940147][T20653] zswapped 0 [ 1338.940147][T20653] file_mapped 0 [ 1338.940147][T20653] file_dirty 0 [ 1338.940147][T20653] file_writeback 0 [ 1338.940147][T20653] swapcached 61440 [ 1338.940147][T20653] anon_thp 0 [ 1338.940147][T20653] file_thp 0 [ 1338.940147][T20653] shmem_thp 0 [ 1338.940147][T20653] inactive_anon 0 [ 1338.940147][T20653] active_anon 0 [ 1338.940147][T20653] inactive_file 0 [ 1338.940147][T20653] active_file 0 [ 1338.940147][T20653] unevictable 0 [ 1338.940147][T20653] slab_reclaimable 26248 [ 1338.940147][T20653] slab_unreclaimable 155440 [ 1338.940147][T20653] slab 181688 [ 1339.070204][T20653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.3832,pid=20653,uid=0 [ 1339.096755][T20653] Memory cgroup out of memory: Killed process 20653 (syz.7.3832) total-vm:102920kB, anon-rss:1416kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1339.156183][T20687] syz.9.3845 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1339.839104][T20687] CPU: 0 PID: 20687 Comm: syz.9.3845 Not tainted syzkaller #0 [ 1339.846634][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1339.856714][T20687] Call Trace: [ 1339.860012][T20687] [ 1339.862957][T20687] dump_stack_lvl+0x188/0x24e [ 1339.867665][T20687] ? ___ratelimit+0x14e/0x610 [ 1339.872381][T20687] ? show_regs_print_info+0x12/0x12 [ 1339.877629][T20687] ? load_image+0x410/0x410 [ 1339.882167][T20687] ? ___ratelimit+0x474/0x610 [ 1339.886879][T20687] ? radix_tree_cpu_dead+0x160/0x160 [ 1339.892204][T20687] dump_header+0xd8/0x820 [ 1339.896563][T20687] oom_kill_process+0x361/0x550 [ 1339.901448][T20687] out_of_memory+0xe25/0x1220 [ 1339.906151][T20687] ? __mutex_lock+0x3ba/0xae0 [ 1339.910867][T20687] ? mutex_lock_nested+0x10/0x10 [ 1339.915842][T20687] ? unregister_oom_notifier+0x20/0x20 [ 1339.921340][T20687] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1339.926922][T20687] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1339.932524][T20687] ? do_raw_spin_unlock+0x11d/0x230 [ 1339.937763][T20687] try_charge_memcg+0xc9d/0x17c0 [ 1339.942764][T20687] ? percpu_ref_put+0x180/0x180 [ 1339.947659][T20687] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1339.953424][T20687] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1339.959438][T20687] ? percpu_ref_tryget+0x15/0x180 [ 1339.964494][T20687] ? percpu_ref_tryget+0x15/0x180 [ 1339.969554][T20687] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1339.975303][T20687] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1339.981044][T20687] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1339.986872][T20687] obj_cgroup_charge+0x36a/0x620 [ 1339.991843][T20687] ? obj_cgroup_charge+0xe9/0x620 [ 1339.996893][T20687] ? mod_objcg_mlstate+0x320/0x320 [ 1340.002034][T20687] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1340.007957][T20687] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1340.013883][T20687] slab_pre_alloc_hook+0x2e2/0x300 [ 1340.019023][T20687] ? __register_sysctl_table+0xee/0xed0 [ 1340.024604][T20687] __kmem_cache_alloc_node+0x4f/0x270 [ 1340.030012][T20687] ? __register_sysctl_table+0xee/0xed0 [ 1340.035595][T20687] __kmalloc+0xa3/0x240 [ 1340.039782][T20687] __register_sysctl_table+0xee/0xed0 [ 1340.045191][T20687] ? register_net_sysctl+0x303/0x370 [ 1340.050504][T20687] sctp_sysctl_net_register+0x18d/0x1e0 [ 1340.056085][T20687] sctp_ctrlsock_init+0xa1/0x160 [ 1340.061052][T20687] ops_init+0x360/0x5e0 [ 1340.065239][T20687] setup_net+0x4f2/0xbd0 [ 1340.069517][T20687] ? copy_net_ns+0x5b0/0x5b0 [ 1340.074142][T20687] ? copy_net_ns+0x324/0x5b0 [ 1340.078762][T20687] ? down_read_killable+0x1cc/0x340 [ 1340.083998][T20687] copy_net_ns+0x33e/0x5b0 [ 1340.088451][T20687] create_new_namespaces+0x3ce/0x700 [ 1340.093778][T20687] unshare_nsproxy_namespaces+0x116/0x160 [ 1340.099537][T20687] ksys_unshare+0x4f6/0x8e0 [ 1340.104076][T20687] ? sighand_ctor+0x40/0x40 [ 1340.108613][T20687] ? lock_chain_count+0x20/0x20 [ 1340.113498][T20687] ? syscall_enter_from_user_mode+0x21/0x80 [ 1340.119430][T20687] __x64_sys_unshare+0x34/0x40 [ 1340.124224][T20687] do_syscall_64+0x4c/0xa0 [ 1340.128672][T20687] ? clear_bhb_loop+0x60/0xb0 [ 1340.133372][T20687] ? clear_bhb_loop+0x60/0xb0 [ 1340.138077][T20687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.143993][T20687] RIP: 0033:0x7f205e19e199 [ 1340.148435][T20687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.168064][T20687] RSP: 002b:00007f205c395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1340.176507][T20687] RAX: ffffffffffffffda RBX: 00007f205e426180 RCX: 00007f205e19e199 [ 1340.184504][T20687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1340.192502][T20687] RBP: 00007f205e2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.200493][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.208472][T20687] R13: 00007f205e426218 R14: 00007f205e426180 R15: 00007ffca3b29d88 [ 1340.216440][T20687] [ 1340.401504][T20687] memory: usage 144kB, limit 192kB, failcnt 475 [ 1340.408192][T20687] memory+swap: usage 152kB, limit 9007199254740988kB, failcnt 0 [ 1340.416312][T20687] kmem: usage 144kB, limit 9007199254740988kB, failcnt 0 [ 1340.423493][T20687] Memory cgroup stats for /syz9/test: [ 1340.423692][T20687] anon 0 [ 1340.423692][T20687] file 0 [ 1340.423692][T20687] kernel 147456 [ 1340.423692][T20687] kernel_stack 0 [ 1340.423692][T20687] pagetables 4096 [ 1340.423692][T20687] sec_pagetables 0 [ 1340.423692][T20687] percpu 0 [ 1340.423692][T20687] sock 0 [ 1340.423692][T20687] vmalloc 0 [ 1340.423692][T20687] shmem 0 [ 1340.423692][T20687] zswap 0 [ 1340.423692][T20687] zswapped 0 [ 1340.423692][T20687] file_mapped 0 [ 1340.423692][T20687] file_dirty 0 [ 1340.423692][T20687] file_writeback 0 [ 1340.423692][T20687] swapcached 20480 [ 1340.423692][T20687] anon_thp 0 [ 1340.423692][T20687] file_thp 0 [ 1340.423692][T20687] shmem_thp 0 [ 1340.423692][T20687] inactive_anon 0 [ 1340.423692][T20687] active_anon 0 [ 1340.423692][T20687] inactive_file 0 [ 1340.423692][T20687] active_file 0 [ 1340.423692][T20687] unevictable 0 [ 1340.423692][T20687] slab_reclaimable 26248 [ 1340.423692][T20687] slab_unreclaimable 116792 [ 1340.423692][T20687] slab 143040 [ 1340.518453][T20687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.3845,pid=20676,uid=0 [ 1340.536863][T20687] Memory cgroup out of memory: Killed process 20676 (syz.9.3845) total-vm:102928kB, anon-rss:1440kB, file-rss:23052kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1340.636605][T20712] tipc: Subscription rejected, no memory [ 1340.868241][T20723] overlayfs: failed to clone upperpath [ 1341.272433][T20739] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(11) [ 1341.305474][T20740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3860'. [ 1341.404922][T20745] overlayfs: failed to clone upperpath [ 1342.508653][T20773] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1342.677544][T20777] lo speed is unknown, defaulting to 1000 [ 1343.034802][T20794] loop9: detected capacity change from 0 to 1024 [ 1343.142279][T20794] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1343.580072][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1343.791033][T20819] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1344.238193][T20835] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 1344.294507][T20835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.326118][T20835] bond2: (slave geneve2): making interface the new active one [ 1344.337549][T20835] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1344.347630][T15746] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1344.480196][T20843] loop9: detected capacity change from 0 to 512 [ 1344.683609][T20845] lo speed is unknown, defaulting to 1000 [ 1344.870675][T20843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1344.935437][T20843] System zones: 1-12 [ 1345.116808][T20843] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.3891: missing EA_INODE flag [ 1345.201931][T20843] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3891: error while reading EA inode 12 err=-117 [ 1345.245764][T20843] EXT4-fs (loop9): 1 orphan inode deleted [ 1345.276969][T20843] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1345.435953][T20861] loop7: detected capacity change from 0 to 1024 [ 1345.446958][ T26] audit: type=1804 audit(2000000415.309:394): pid=20843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3891" name="/newroot/141/file0/file1" dev="loop9" ino=15 res=1 errno=0 [ 1345.555437][T20861] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1345.588134][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1346.054742][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1347.407292][T20900] lo speed is unknown, defaulting to 1000 [ 1348.388477][T20911] loop7: detected capacity change from 0 to 128 [ 1348.460435][T20911] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1348.768728][ T7313] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1348.796979][ T7313] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1348.882718][T20917] loop7: detected capacity change from 0 to 4096 [ 1348.929568][T20917] EXT4-fs: Ignoring removed orlov option [ 1348.959157][T20919] lo speed is unknown, defaulting to 1000 [ 1348.966081][T20917] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1349.100440][T20917] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1349.348872][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1351.280594][T20955] lo speed is unknown, defaulting to 1000 [ 1351.427089][T20958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1351.584340][T20966] lo speed is unknown, defaulting to 1000 [ 1352.699973][T20986] overlayfs: failed to clone upperpath [ 1353.039773][T20991] 9pnet_fd: Insufficient options for proto=fd [ 1353.361970][ T8136] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.390515][T20970] loop7: detected capacity change from 0 to 32768 [ 1353.454138][T20970] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.3926 (20970) [ 1353.558285][T20970] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1353.570153][T20970] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1353.579584][T20970] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1353.639136][T20970] BTRFS info (device loop7): use zstd compression, level 3 [ 1353.689736][T20970] BTRFS info (device loop7): force clearing of disk cache [ 1353.738837][T20970] BTRFS info (device loop7): enabling disk space caching [ 1353.778272][T20970] BTRFS info (device loop7): disk space caching is enabled [ 1354.238037][T21024] lo speed is unknown, defaulting to 1000 [ 1355.027541][T21055] FAULT_INJECTION: forcing a failure. [ 1355.027541][T21055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.090544][T21055] CPU: 0 PID: 21055 Comm: syz.9.3951 Not tainted syzkaller #0 [ 1355.098067][T21055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1355.108152][T21055] Call Trace: [ 1355.111455][T21055] [ 1355.114423][T21055] dump_stack_lvl+0x188/0x24e [ 1355.119132][T21055] ? show_regs_print_info+0x12/0x12 [ 1355.124353][T21055] ? load_image+0x410/0x410 [ 1355.128901][T21055] ? __lock_acquire+0x7ea0/0x7ea0 [ 1355.133965][T21055] should_fail_ex+0x390/0x4c0 [ 1355.138679][T21055] _copy_from_user+0x2c/0x170 [ 1355.143402][T21055] memdup_user_nul+0x65/0xf0 [ 1355.148012][T21055] proc_simple_write+0xcb/0x130 [ 1355.152862][T21055] ? proc_remove+0x80/0x80 [ 1355.157271][T21055] proc_reg_write+0x1dd/0x2c0 [ 1355.161954][T21055] ? proc_reg_llseek+0x280/0x280 [ 1355.166908][T21055] vfs_write+0x2dc/0x9a0 [ 1355.171181][T21055] ? file_end_write+0x250/0x250 [ 1355.176056][T21055] ? __fget_files+0x28/0x460 [ 1355.180671][T21055] ? __fget_files+0x3fc/0x460 [ 1355.185381][T21055] ? __fdget_pos+0x2ae/0x360 [ 1355.189990][T21055] ? ksys_write+0x70/0x260 [ 1355.194435][T21055] ksys_write+0x14d/0x260 [ 1355.198798][T21055] ? __ia32_sys_read+0x80/0x80 [ 1355.203604][T21055] ? lockdep_hardirqs_on+0x94/0x140 [ 1355.208832][T21055] do_syscall_64+0x4c/0xa0 [ 1355.213268][T21055] ? clear_bhb_loop+0x60/0xb0 [ 1355.217967][T21055] ? clear_bhb_loop+0x60/0xb0 [ 1355.222669][T21055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.228583][T21055] RIP: 0033:0x7f205e19e199 [ 1355.233017][T21055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.252647][T21055] RSP: 002b:00007f205efb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.261089][T21055] RAX: ffffffffffffffda RBX: 00007f205e425fa0 RCX: 00007f205e19e199 [ 1355.269093][T21055] RDX: 0000000000000001 RSI: 0000200000000070 RDI: 0000000000000003 [ 1355.277093][T21055] RBP: 00007f205e2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.285092][T21055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.293088][T21055] R13: 00007f205e426038 R14: 00007f205e425fa0 R15: 00007ffca3b29d88 [ 1355.301135][T21055] [ 1355.341520][T20970] BTRFS error (device loop7): open_ctree failed: -22 [ 1355.558127][T21008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by udevd (21008) [ 1355.624544][T21068] netlink: 'syz.3.3953': attribute type 39 has an invalid length. [ 1355.739982][T21075] 9pnet_fd: Insufficient options for proto=fd [ 1355.806825][ C1] Unknown status report in ack skb [ 1356.724203][T21080] lo speed is unknown, defaulting to 1000 [ 1356.782763][T21089] loop7: detected capacity change from 0 to 512 [ 1356.800390][T21089] EXT4-fs: Ignoring removed oldalloc option [ 1356.880123][T21089] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1357.069096][T21089] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.3958: Invalid block bitmap block 1768304430 in block_group 0 [ 1357.183760][T21089] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1357.217355][T21089] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.3958: Invalid inode bitmap blk 3302764 in block_group 0 [ 1357.266359][T21089] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 1357.365980][ T8390] EXT4-fs (loop7): unmounting filesystem. [ 1358.299775][T21112] input: syz0 as /devices/virtual/input/input18 [ 1358.475492][T21119] overlayfs: failed to clone upperpath [ 1358.617343][T21123] loop9: detected capacity change from 0 to 1024 [ 1358.701046][T21123] hfsplus: keylen 65060 too large [ 1358.711135][T21123] hfsplus: xattr search failed [ 1358.946265][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 1359.283229][T21151] lo speed is unknown, defaulting to 1000 [ 1359.614642][T21166] loop7: detected capacity change from 0 to 1024 [ 1359.737711][T21166] hfsplus: keylen 65060 too large [ 1359.770256][T21166] hfsplus: xattr search failed [ 1360.641506][T21060] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1360.832843][T21060] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.850944][T21060] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.861398][T21060] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1360.880862][T21060] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1360.891847][T21060] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.910336][T21060] usb 10-1: config 0 descriptor?? [ 1361.325187][T21060] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 1361.337086][T21060] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1361.348784][T21060] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1361.533244][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.539599][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.596285][T21069] usb 10-1: USB disconnect, device number 8 [ 1363.253814][T21223] lo speed is unknown, defaulting to 1000 [ 1364.377757][T21245] Bluetooth: MGMT ver 1.22 [ 1364.385620][T21240] lo speed is unknown, defaulting to 1000 [ 1364.422953][T21246] overlayfs: failed to clone upperpath [ 1364.452859][T21246] overlayfs: failed to clone upperpath [ 1364.850708][T21255] lo speed is unknown, defaulting to 1000 [ 1365.069057][T21261] netlink: 'syz.7.4024': attribute type 1 has an invalid length. [ 1365.179363][T21261] device bond2 entered promiscuous mode [ 1365.239955][T21261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1365.900723][T21267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1365.924688][T21267] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1365.939419][T21267] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1365.973869][T21267] bond2: (slave gre1): making interface the new active one [ 1365.997130][T21267] device gre1 entered promiscuous mode [ 1366.017913][T21267] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1366.069513][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1366.220118][T21279] FAULT_INJECTION: forcing a failure. [ 1366.220118][T21279] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1366.233729][T21279] CPU: 0 PID: 21279 Comm: syz.7.4030 Not tainted syzkaller #0 [ 1366.241224][T21279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1366.251304][T21279] Call Trace: [ 1366.254602][T21279] [ 1366.257547][T21279] dump_stack_lvl+0x188/0x24e [ 1366.262263][T21279] ? show_regs_print_info+0x12/0x12 [ 1366.267484][T21279] ? load_image+0x410/0x410 [ 1366.272013][T21279] ? mark_lock+0x94/0x320 [ 1366.276364][T21279] ? __lock_acquire+0x1359/0x7ea0 [ 1366.281412][T21279] should_fail_ex+0x390/0x4c0 [ 1366.286121][T21279] get_futex_key+0x1b1/0x1000 [ 1366.290834][T21279] ? futex_setup_timer+0xc0/0xc0 [ 1366.295798][T21279] ? verify_lock_unused+0x140/0x140 [ 1366.301031][T21279] futex_wake+0x123/0x4f0 [ 1366.305386][T21279] ? futex_wake_mark+0x150/0x150 [ 1366.310356][T21279] do_futex+0x2e2/0x320 [ 1366.314533][T21279] ? fd_install+0x5c/0x4e0 [ 1366.318978][T21279] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1366.324890][T21279] ? rcu_read_lock_sched_held+0x86/0x110 [ 1366.330543][T21279] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1366.336554][T21279] __se_sys_futex+0x381/0x410 [ 1366.341261][T21279] ? __x64_sys_futex+0xf0/0xf0 [ 1366.346040][T21279] ? __se_sys_pidfd_open+0x1cf/0x240 [ 1366.351359][T21279] ? __x64_sys_futex+0x1d/0xf0 [ 1366.356145][T21279] do_syscall_64+0x4c/0xa0 [ 1366.360585][T21279] ? clear_bhb_loop+0x60/0xb0 [ 1366.365284][T21279] ? clear_bhb_loop+0x60/0xb0 [ 1366.369985][T21279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.375895][T21279] RIP: 0033:0x7fecdc39e199 [ 1366.380326][T21279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.399952][T21279] RSP: 002b:00007fecdd2d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1366.408390][T21279] RAX: ffffffffffffffda RBX: 00007fecdc625fa8 RCX: 00007fecdc39e199 [ 1366.416385][T21279] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fecdc625fac [ 1366.424374][T21279] RBP: 00007fecdc625fa0 R08: 000ab5991d7df5e8 R09: 0000000000000000 [ 1366.432383][T21279] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1366.440374][T21279] R13: 00007fecdc626038 R14: 00007ffecda719f0 R15: 00007ffecda71ad8 [ 1366.448417][T21279] [ 1366.454393][T12071] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1367.987600][T21295] lo speed is unknown, defaulting to 1000 [ 1368.177860][T12071] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1368.188463][T12071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.197374][T12071] usb 10-1: Product: syz [ 1368.205850][T12071] usb 10-1: Manufacturer: syz [ 1368.210577][T12071] usb 10-1: SerialNumber: syz [ 1368.231911][T12071] usb 10-1: config 0 descriptor?? [ 1368.467935][T21299] lo speed is unknown, defaulting to 1000 [ 1368.608626][T12071] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 009 [ 1369.374440][T21311] i2c i2c-1: failure reading status [ 1369.382954][T13742] usb 10-1: USB disconnect, device number 9 [ 1369.495241][T21315] overlayfs: missing 'lowerdir' [ 1370.660233][T21330] lo speed is unknown, defaulting to 1000 [ 1370.971637][T21070] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1372.238386][T21350] lo speed is unknown, defaulting to 1000 [ 1372.492964][T21070] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.504606][T21070] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.515225][T21070] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1372.525798][T21070] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.545343][T21070] usb 10-1: config 0 descriptor?? [ 1373.032520][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.039575][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.091314][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.098352][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.130223][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.167300][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.187597][T21070] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1373.228407][T21070] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1373.243706][T21372] lo speed is unknown, defaulting to 1000 [ 1373.448115][T21070] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 1374.416456][T21070] usb 10-1: reset high-speed USB device number 10 using dummy_hcd [ 1374.499274][T21390] lo speed is unknown, defaulting to 1000 [ 1375.457141][T21063] usb 10-1: USB disconnect, device number 10 [ 1376.238916][T21432] lo speed is unknown, defaulting to 1000 [ 1377.017569][T21457] lo speed is unknown, defaulting to 1000 [ 1377.589061][T21473] loop9: detected capacity change from 0 to 128 [ 1377.601586][T21473] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1377.698771][T21473] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1377.707825][T21473] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1377.758305][T16997] EXT4-fs (loop9): unmounting filesystem. [ 1377.940367][T21479] netlink: 'syz.1.4095': attribute type 22 has an invalid length. [ 1377.958676][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1377.983005][T21479] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.993260][T21479] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.002090][T21479] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.010808][T21479] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.818778][T21479] netlink: 'syz.1.4095': attribute type 22 has an invalid length. [ 1378.826746][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1378.934283][T21474] overlayfs: failed to clone upperpath [ 1379.079851][T21492] lo speed is unknown, defaulting to 1000 [ 1379.113005][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1379.240353][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1379.360473][T21500] lo speed is unknown, defaulting to 1000 [ 1379.510145][T21505] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1379.591532][T21508] netlink: 'syz.1.4104': attribute type 4 has an invalid length. [ 1381.361817][T21061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.921751][T14105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.224652][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.207070][T21573] lo speed is unknown, defaulting to 1000 [ 1383.251620][T13748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.203460][T21602] overlayfs: failed to clone upperpath [ 1384.321708][T13748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.424885][T21606] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 1384.643308][T13748] [ 1384.645681][T13748] ============================================ [ 1384.651827][T13748] WARNING: possible recursive locking detected [ 1384.657995][T13748] syzkaller #0 Not tainted [ 1384.662416][T13748] -------------------------------------------- [ 1384.668573][T13748] kworker/0:17/13748 is trying to acquire lock: [ 1384.674813][T13748] ffff88802e70a130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.684680][T13748] [ 1384.684680][T13748] but task is already holding lock: [ 1384.692043][T13748] ffff8880566a8930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.701804][T13748] [ 1384.701804][T13748] other info that might help us debug this: [ 1384.709865][T13748] Possible unsafe locking scenario: [ 1384.709865][T13748] [ 1384.717324][T13748] CPU0 [ 1384.720607][T13748] ---- [ 1384.723885][T13748] lock(&grp->list_lock); [ 1384.728310][T13748] lock(&grp->list_lock); [ 1384.732735][T13748] [ 1384.732735][T13748] *** DEADLOCK *** [ 1384.732735][T13748] [ 1384.740879][T13748] May be due to missing lock nesting notation [ 1384.740879][T13748] [ 1384.749204][T13748] 3 locks held by kworker/0:17/13748: [ 1384.754581][T13748] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1384.764953][T13748] #1: ffffc90003d37d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1384.776856][T13748] #2: ffff8880566a8930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.787022][T13748] [ 1384.787022][T13748] stack backtrace: [ 1384.792903][T13748] CPU: 0 PID: 13748 Comm: kworker/0:17 Not tainted syzkaller #0 [ 1384.800523][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1384.810586][T13748] Workqueue: events snd_rawmidi_input_event_work [ 1384.816972][T13748] Call Trace: [ 1384.820241][T13748] [ 1384.823160][T13748] dump_stack_lvl+0x188/0x24e [ 1384.827829][T13748] ? show_regs_print_info+0x12/0x12 [ 1384.833020][T13748] ? print_deadlock_bug+0x435/0x5d0 [ 1384.838224][T13748] __lock_acquire+0x690e/0x7ea0 [ 1384.843089][T13748] ? verify_lock_unused+0x140/0x140 [ 1384.848296][T13748] ? verify_lock_unused+0x140/0x140 [ 1384.853496][T13748] ? __lock_acquire+0x7ea0/0x7ea0 [ 1384.858528][T13748] lock_acquire+0x1bc/0x4a0 [ 1384.863027][T13748] ? snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.868475][T13748] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1384.874448][T13748] ? read_lock_is_recursive+0x10/0x10 [ 1384.879840][T13748] ? lock_chain_count+0x20/0x20 [ 1384.884679][T13748] ? do_raw_read_unlock+0x39/0x70 [ 1384.889690][T13748] _raw_read_lock+0x32/0x40 [ 1384.894187][T13748] ? snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.899640][T13748] snd_seq_deliver_event+0x1cb/0x8d0 [ 1384.904916][T13748] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1384.910973][T13748] snd_seq_control_queue+0x8ff/0x1010 [ 1384.916349][T13748] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 1384.922254][T13748] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1384.927601][T13748] ? __lock_acquire+0x7ea0/0x7ea0 [ 1384.932619][T13748] ? lockdep_hardirqs_on+0x94/0x140 [ 1384.937816][T13748] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1384.943966][T13748] ? do_raw_read_unlock+0x39/0x70 [ 1384.948979][T13748] ? _raw_read_unlock+0x24/0x40 [ 1384.953818][T13748] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1384.959107][T13748] ? snd_seq_system_notify+0x170/0x170 [ 1384.964573][T13748] snd_seq_deliver_single_event+0x806/0xb30 [ 1384.970482][T13748] ? snd_seq_deliver_event+0x1e2/0x8d0 [ 1384.975933][T13748] ? snd_sequencer_device_done+0x20/0x20 [ 1384.981581][T13748] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1384.987654][T13748] snd_seq_oss_timer_start+0x2ce/0x510 [ 1384.993124][T13748] ? snd_seq_oss_process_timer_event+0x3d0/0x3d0 [ 1384.999448][T13748] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1385.005334][T13748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1385.011226][T13748] ? _raw_spin_unlock+0x40/0x40 [ 1385.016064][T13748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1385.021944][T13748] ? _raw_spin_unlock+0x40/0x40 [ 1385.026782][T13748] ? mark_lock+0x94/0x320 [ 1385.031106][T13748] ? snd_seq_oss_readq_put_timestamp+0x33f/0x5c0 [ 1385.037447][T13748] snd_seq_oss_midi_input+0x2e8/0x890 [ 1385.042812][T13748] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 1385.048647][T13748] ? do_raw_read_unlock+0x39/0x70 [ 1385.054118][T13748] ? _raw_read_unlock+0x24/0x40 [ 1385.058967][T13748] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1385.064247][T13748] ? snd_seq_oss_process_event+0x2910/0x2910 [ 1385.070216][T13748] snd_seq_deliver_single_event+0x806/0xb30 [ 1385.076116][T13748] ? lockdep_hardirqs_on+0x94/0x140 [ 1385.081307][T13748] ? snd_sequencer_device_done+0x20/0x20 [ 1385.086928][T13748] ? do_raw_read_unlock+0x39/0x70 [ 1385.091941][T13748] snd_seq_deliver_event+0x49d/0x8d0 [ 1385.097218][T13748] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1385.103274][T13748] snd_midi_input_event+0x5ab/0x6f0 [ 1385.108494][T13748] ? event_process_midi+0x650/0x650 [ 1385.113705][T13748] ? _raw_spin_unlock+0x40/0x40 [ 1385.118556][T13748] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1385.123746][T13748] ? process_one_work+0x7b4/0x1160 [ 1385.128847][T13748] process_one_work+0x8ab/0x1160 [ 1385.133790][T13748] ? worker_detach_from_pool+0x240/0x240 [ 1385.139442][T13748] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1385.144512][T13748] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1385.150068][T13748] ? wq_worker_running+0x97/0x190 [ 1385.155094][T13748] worker_thread+0xaf5/0x12a0 [ 1385.159774][T13748] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1385.165654][T13748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1385.171539][T13748] kthread+0x29d/0x330 [ 1385.175595][T13748] ? worker_clr_flags+0x1a0/0x1a0 [ 1385.180604][T13748] ? kthread_blkcg+0xd0/0xd0 [ 1385.185178][T13748] ret_from_fork+0x1f/0x30 [ 1385.189587][T13748] [ 1385.283020][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.361628][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.401545][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.441553][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.321558][T21061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.481585][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.521554][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.561627][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.961455][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.361583][T21061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.603824][T13748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.641570][T13748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.681598][T13748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.411722][T21061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog