last executing test programs: 1m53.631676909s ago: executing program 0 (id=43): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x3f5}, [], {0x14, 0x3f4}}, 0x28}}, 0x4010) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRESDEC], 0xfd, 0x554e, &(0x7f000000b080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x400}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0xffff) close(0x3) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) getpeername(r0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0x4, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000540)) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x5, 0x10, 0x4, 0x2, 0x1, 0xbd, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x21, 0x77, {0x77, 0x7, "b3d052e3a6108bea5002901ddbff59532302afbb31b33b8f273b60d620984099523d33f41807532abf61e13e9f6f9952cf8c39c15a47eab83d4b7b41ad562827fca8af425d46a4c8976b980dc10a1b889fe7a83430625a2bcbdf8d294682a3bfe2ce6d0e676c1c889dff3ce50aa4c24ad057b3e9fc"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x18, 0xa7, "803f18d62bf13813367ca4b8c9149a89ce59dcbba40ebb3392b9d7497230496829a20a8178f647f0d2b03806ddf61951f498a5afca40fb579f4c9f0351ed48f7ed8a6f59048733cfa6ca076e76ec2b49308c6ab981231c35fd13745e09c86b3a04d404c093797ba0d3bf3111470f6cb1945dbb488594a365d3d014328a5ec3e433062e6442fabc6b46a363059b79f38764a756be44953420918e713fc791390cecd237f573d5b7"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0xc0, 0x5, 0x1, '9'}, &(0x7f00000005c0)={0x40, 0x5, 0x4, "86cea5c4"}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000001b80)={@mcast1, 0x9, 0x0, 0x2, 0xd, 0x4, 0x1}, &(0x7f0000001bc0)=0x20) io_setup(0x8, &(0x7f0000000600)) 1m50.665949182s ago: executing program 0 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m49.365070985s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) chdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) fcntl$setown(r2, 0x8, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xc4}}, 0x0) 1m43.560134299s ago: executing program 0 (id=82): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18181, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0) dup2(r5, r4) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) 1m39.10606086s ago: executing program 0 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000100)) 1m37.644284766s ago: executing program 0 (id=91): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000400)="96bc1480bb35f153", 0x8}], 0x2}, 0x0) 1m37.382247952s ago: executing program 32 (id=91): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000400)="96bc1480bb35f153", 0x8}], 0x2}, 0x0) 29.79497077s ago: executing program 3 (id=756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 28.895261652s ago: executing program 3 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8a002, 0x0) write$rfkill(r4, &(0x7f0000000240)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) 27.644114913s ago: executing program 3 (id=771): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@lazytime}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noacl}, {@test_dummy_encryption_v1}, {@usrquota}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x184) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xcb) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0xfff, 0xe, 0x4) 27.38638953s ago: executing program 3 (id=776): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100), 0x3, 0x484, &(0x7f0000000340)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 27.113342447s ago: executing program 3 (id=779): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d068e78bb62667a3c5fa88fa2a03af1ea2d7f9ca831570233d4ee4fac1e", 0x32}], 0x1, 0x6, 0x7) 27.012331779s ago: executing program 3 (id=782): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8a002, 0x0) write$rfkill(r4, &(0x7f0000000240)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) 26.97903232s ago: executing program 33 (id=782): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8a002, 0x0) write$rfkill(r4, &(0x7f0000000240)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) 18.413683172s ago: executing program 6 (id=860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 15.837457037s ago: executing program 6 (id=896): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.836972797s ago: executing program 4 (id=897): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 15.789444198s ago: executing program 6 (id=898): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x8) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 15.750441599s ago: executing program 4 (id=899): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 15.623837132s ago: executing program 4 (id=901): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe80900", 0x40}], 0x1) prlimit64(0x0, 0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x2e, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) 15.532437954s ago: executing program 4 (id=902): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800702, &(0x7f0000000b80)={[{@nolazytime}, {@stripe={'stripe', 0x3d, 0xfff}}, {@norecovery}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x477, &(0x7f0000001440)="$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") chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1) 15.144213034s ago: executing program 4 (id=903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000456000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.037090567s ago: executing program 4 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 14.979490518s ago: executing program 34 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 14.91218287s ago: executing program 6 (id=906): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 14.655621736s ago: executing program 6 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x77b, &(0x7f00000017c0)=0x0) io_destroy(r4) io_setup(0x2278, &(0x7f0000000180)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b428f0e1ac6e7049b346d959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25470a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490843bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e90af2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0f1f4f674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ffc4ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a5869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be1200fdc4e9134f77020000f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d594c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3eff1b0ff034ef655b253ca050083815b1b6fc6522d4e4fdcf3a38cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d0100d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfd7b2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154504b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b033a53faf46366e7205dd8d6f37525c1a0e94610dd94223f6c15d07f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef928ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd1cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f87a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17cb51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e80e0082d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459716246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f352ceee26596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f0cfc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea62839b4a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30842b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bbb935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c0bec664bff000000000000005d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e975be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f04817fb909729a7db6ff9576abc9ede7886294ff1aa7082ead01a9b03c37b0969be0bff60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bccf8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000370f00", 0x5bb1f126059684ef}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@sysvgroups}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") 14.48822332s ago: executing program 6 (id=913): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0xa00000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x802000, 0x0) 14.454826381s ago: executing program 35 (id=913): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0xa00000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x802000, 0x0) 13.373341558s ago: executing program 7 (id=923): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) 13.362440238s ago: executing program 7 (id=924): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000600"], 0x28) 13.29355995s ago: executing program 7 (id=925): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xac1) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 12.372321093s ago: executing program 7 (id=930): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0xc, 0x8005, 0x0, 0x8bb, 0x1, 0x0, [{0x6, 0x8, 0x354, '\x00', 0x280}]}) 11.989723292s ago: executing program 7 (id=934): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) prlimit64(0x0, 0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x747}], 0x1, 0x0, 0x0, 0x0) 11.852248866s ago: executing program 7 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x702}) 11.852091886s ago: executing program 36 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x702}) 8.240067445s ago: executing program 2 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xb000, 0xf000, {}, 0x0, 0x100000000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.171707947s ago: executing program 2 (id=987): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1004000, &(0x7f00000014c0), 0x0, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f00000001c0)='./file1\x00', 0x185) 7.868808704s ago: executing program 2 (id=991): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0x0, @remote, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 7.114491013s ago: executing program 9 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 7.083298244s ago: executing program 9 (id=1005): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 7.033237495s ago: executing program 9 (id=1006): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x174c56b28484f9e2, 0x1d8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00004eb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4080, 0xff0, 0x0, 0x0}, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0)) 7.000568806s ago: executing program 9 (id=1007): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) 6.936784237s ago: executing program 2 (id=1008): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/22, 0x16}, 0x55}], 0x1, 0x40010103, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.811634101s ago: executing program 2 (id=1009): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0x12, 0x6, "3e27b57f1bb3"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x1, 0x3, "27e6cc"}, 0x0, 0x0, 0x0, 0x0}) 6.01238474s ago: executing program 5 (id=1011): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1e9, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 5.899602843s ago: executing program 5 (id=1014): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 5.847943385s ago: executing program 1 (id=1015): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)={0x1, 0x0, [{0x4, 0x8, &(0x7f0000001a40)=""/8}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) 5.823059496s ago: executing program 5 (id=1016): getresuid(&(0x7f0000000700), &(0x7f0000001080), 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279r02kcB/BPqiF3OrgIBy6nDg6HHCiOZlBJoqKQi3aRGxQUETNFECIXEHTQDIoZxNFFCln6Y2qaoVNLC517pUOPQocud7RLoUtzhD5dyg0tlx4cvF7w5cPzfN/f5/N8/oBv8L82FH/1er1MRPRyEd8d8uvhdqF462z5WuV+RKZ/WPz+8w+/9N/8mBL9U/vOp/VKWn/7eqL7fvNmtr18b+vCw5nm0N51IuJ1RJwc6QwPYj6O1mh+9tSbt7XSh3r+2VKpsfZuceHu2Eah0rnTbI3fzt54nHJzqR5P9UXU41U8j0dRjWo8idqA+n9pr17aOVNqTz69ul3sfpy+nHLlfznnQfu/PPfpQatx/eLE6c9X6lPzlfVju7lq7oguAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQI3mZ0+9eVsrfajncxGx9m5x4e7YRqHSudNsjd/O3niccnOpHk/1RdTjVTyPR1GNajyJ2t6Bvd5B2n7/D/2fLZUaa1/aq5d2zpTak0+vbhe7H6cvp1x5UAPvs7//y3OfHrQa1y9OnP58pT41X1k/tpur5o7oAgAAAAAAAAAAAAAAAAAAABARheKts+VrlfsRmfg1In7687eh/n4v/e+eSbnzqa6k/W9fT3Tfb97MtpfvbV14ONP8I+2/Ts/Jkc7wfz4Mh/Z3AAAA///sR5Sb") syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210000, &(0x7f0000000500)={[{@time_offset}, {@discard}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@fmask={'fmask', 0x3d, 0x40}}, {@gid}, {@errors_remount}, {@discard}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 5.802954026s ago: executing program 1 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x55}) 5.712159228s ago: executing program 1 (id=1018): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1004000, &(0x7f00000014c0), 0x0, 0x793, &(0x7f0000000c00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f00000001c0)='./file1\x00', 0x185) 5.514149703s ago: executing program 8 (id=1019): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 5.492785674s ago: executing program 1 (id=1020): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5b4}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.485360164s ago: executing program 5 (id=1021): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x174c56b28484f9e2, 0x1d8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00004eb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4080, 0xff0, 0x0, 0x0}, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0)) 5.484736014s ago: executing program 8 (id=1022): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = eventfd(0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x300, 0x1, 0xffffffff, 0xfffffffffffffeff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syncfs(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f00000002c0)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@fat=@errors_continue}, {@fat=@check_strict}, {@utf8}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@rodir}]}, 0x3, 0x27b, &(0x7f00000008c0)="$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") r5 = socket(0x25, 0xa, 0x2) fcntl$setlease(r5, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x210840, 0x33) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x3, 0x100000) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x7, 0x1d, 0x6, '\x00', 0xa}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0xfb}, {0x2, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0x4}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x6}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 5.373203136s ago: executing program 5 (id=1023): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffffc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) creat(&(0x7f0000000200)='./file0\x00', 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.064170494s ago: executing program 8 (id=1024): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x4, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x2401}) 4.878830739s ago: executing program 8 (id=1025): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1e9, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 4.8055451s ago: executing program 5 (id=1026): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xde0, &(0x7f00000000c0)=ANY=[], 0x0) 4.797506841s ago: executing program 1 (id=1027): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 4.718521992s ago: executing program 1 (id=1028): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 4.718390672s ago: executing program 9 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='-1\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='N\x00', 0x2) 300.239773ms ago: executing program 2 (id=1030): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, 0x0) 299.137373ms ago: executing program 8 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000280)="000000011a2b3c4d000100000100"/154, 0x9c) write(r3, &(0x7f0000000340)="000000011a2b3c4d0002000001000100"/156, 0x9c) write(r2, &(0x7f0000000400)="000000011a2b3c4d00070000123400"/160, 0xa4) write(r3, &(0x7f00000004c0)="000000011a2b3c4d00080000567812340100"/32, 0x20) 239.441184ms ago: executing program 9 (id=1032): unshare(0x2a020480) unshare(0x2060280) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) lstat(&(0x7f0000000340)='./my_configfs/usb_gadget/g1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/UDC\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={[{@huge_within_size}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x36]}}, {@mode={'mode', 0x3d, 0x6}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@uid_eq={'uid', 0x3d, r0}}, {@hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@appraise_type}]}) syz_emit_ethernet(0x46, &(0x7f0000001000)={@remote, @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0xf, 0x6, "1bfae7", 0x10, 0x21, 0x0, @remote, @mcast2, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x7, '\x00', 0x64, "9c404c"}}}}}}}}, 0x0) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) rmdir(&(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1\x00') write(r1, &(0x7f0000000280)='dummy_udc.0', 0xb) 0s ago: executing program 8 (id=1033): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c67726f75705f69643d2d61d94c09e6ad6560"], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18f1d162a5985f7ef467a43a807cb75d34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7f96bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a873085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb30a138c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74dda2ae43ee2514b55aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e468401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bfed1def9e19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af47806eaa6b875304738f1129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87d69809af59268f3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6198ca6d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401e760f82cfc86ac19a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd79a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e67", 0x2000, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001e8, 0x12) kernel console output (not intermixed with test programs): tem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.806811][ T2430] FAT-fs (loop2): codepage cp85 not found [ 132.070302][ T2406] F2FS-fs (loop1): invalid crc value [ 132.089845][ T2406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.130242][ T2406] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 132.137730][ T2406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 132.272737][ T2436] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.309155][ T2436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.331611][ T2436] F2FS-fs (loop2): invalid crc value [ 132.419719][ T2436] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 132.450605][ T2436] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.457869][ T2436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.537498][ T2449] kvm: apic: phys broadcast and lowest prio [ 132.786854][ T2459] set_capacity_and_notify: 4 callbacks suppressed [ 132.786875][ T2459] loop2: detected capacity change from 0 to 256 [ 132.978815][ T2457] loop4: detected capacity change from 0 to 40427 [ 133.009488][ T2457] F2FS-fs (loop4): fault_injection options not supported [ 133.016902][ T2457] F2FS-fs (loop4): fault_type options not supported [ 133.024630][ T2457] F2FS-fs (loop4): invalid crc value [ 133.049844][ T2457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.136496][ T2463] loop2: detected capacity change from 0 to 4096 [ 133.156700][ T2463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.169024][ T2463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.194995][ T2457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.230110][ T2463] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 133.303849][ T286] attempt to access beyond end of device [ 133.303849][ T286] loop4: rw=2049, want=45104, limit=40427 [ 133.346620][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 133.346637][ T30] audit: type=1400 audit(1785155781.413:351): avc: denied { setattr } for pid=2462 comm="syz.2.768" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.451669][ T2455] loop1: detected capacity change from 0 to 131072 [ 133.464098][ T2455] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 133.527755][ T2455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.564962][ T2455] F2FS-fs (loop1): invalid crc value [ 133.579807][ T2471] loop3: detected capacity change from 0 to 512 [ 133.600086][ T2475] input: syz0 as /devices/virtual/input/input14 [ 133.609055][ T2455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.658243][ T30] audit: type=1400 audit(1785155781.723:352): avc: denied { read } for pid=2477 comm="syz.2.773" path="socket:[23145]" dev="sockfs" ino=23145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.689907][ T2471] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 133.689907][ T2471] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 133.689907][ T2471] [ 133.708407][ T2455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.720426][ T2482] loop2: detected capacity change from 0 to 1024 [ 133.727000][ T2455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 133.728122][ T2483] loop4: detected capacity change from 0 to 256 [ 133.738161][ T2471] EXT4-fs (loop3): Test dummy encryption mode enabled [ 133.748628][ T2471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.760465][ T2471] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.771: bad orphan inode 131083 [ 133.771266][ T2471] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,noacl,test_dummy_encryption=v1,usrquota,,errors=continue. Quota mode: writeback. [ 133.815269][ T2483] exfat: Deprecated parameter 'namecase' [ 133.823965][ T2483] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 133.857061][ T2482] EXT4-fs (loop2): Ignoring removed orlov option [ 133.875690][ T2486] loop3: detected capacity change from 0 to 512 [ 133.908963][ T2482] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 133.943143][ T2486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.977941][ T2486] EXT4-fs (loop3): 1 truncate cleaned up [ 133.983828][ T2486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.076849][ T2497] loop2: detected capacity change from 0 to 128 [ 134.141652][ T2455] F2FS-fs (loop1): Start checkpoint disabled! [ 134.235874][ T2503] xt_hashlimit: size too large, truncated to 1048576 [ 134.270885][ T30] audit: type=1400 audit(1785155782.333:353): avc: denied { write } for pid=2504 comm="syz.2.781" name="mcfilter6" dev="proc" ino=4026532687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 134.473772][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.483236][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.501388][ T2508] device bridge_slave_0 entered promiscuous mode [ 134.546071][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.553176][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.599462][ T2508] device bridge_slave_1 entered promiscuous mode [ 134.614931][ T290] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.701288][ T2518] loop1: detected capacity change from 0 to 2048 [ 134.737287][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.745859][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.759931][ T2518] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,usrjquota=,nodiscard,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 134.781014][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.790919][ T2518] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.801962][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.814728][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.821860][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.832400][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.841306][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.849791][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.856997][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.864711][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.882209][ T615] device bridge_slave_1 left promiscuous mode [ 134.889707][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.900084][ T615] device bridge_slave_0 left promiscuous mode [ 134.906778][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.925192][ T615] device veth1_macvtap left promiscuous mode [ 134.931376][ T615] device veth0_vlan left promiscuous mode [ 134.936497][ T30] audit: type=1400 audit(1785155782.993:354): avc: denied { write } for pid=2524 comm="syz.1.789" name="p_chmask" dev="configfs" ino=24262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 135.040546][ T30] audit: type=1400 audit(1785155783.023:355): avc: denied { open } for pid=2524 comm="syz.1.789" path="/145/my_configfs/usb_gadget/g1/functions/uac2.usb0/p_chmask" dev="configfs" ino=24262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 135.075071][ T290] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 135.083575][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.102014][ T30] audit: type=1400 audit(1785155783.023:356): avc: denied { read } for pid=2524 comm="syz.1.789" name="p_chmask" dev="configfs" ino=24262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 135.105158][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.135740][ T290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.149462][ T290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.160592][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.171447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.182313][ T290] usb 3-1: config 0 descriptor?? [ 135.195253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.220936][ T2533] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 135.250700][ T2533] EXT4-fs (loop1): 1 truncate cleaned up [ 135.256688][ T2533] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 135.332576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.362168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.374747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.385337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.406162][ T2508] device veth0_vlan entered promiscuous mode [ 135.452751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.482984][ T2508] device veth1_macvtap entered promiscuous mode [ 135.537926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.555340][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.567208][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.616569][ T30] audit: type=1400 audit(1785155783.683:357): avc: denied { mount } for pid=2508 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.639555][ T30] audit: type=1400 audit(1785155783.683:358): avc: denied { mounton } for pid=2508 comm="syz-executor" path="/root/syzkaller.gvVu0x/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 135.719433][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.734452][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.759974][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.786273][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.810924][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.842506][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.860306][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.873642][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.895216][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.920518][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.935205][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.962986][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 135.981442][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.001587][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.019995][ T290] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.040486][ T290] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 136.073035][ T290] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 136.115840][ T290] usb 3-1: USB disconnect, device number 11 [ 136.224335][ T2546] kvm [2545]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0xf800 [ 136.248954][ T2546] kvm [2545]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0xf800 [ 136.395679][ T30] audit: type=1400 audit(1785155784.463:359): avc: denied { watch watch_reads } for pid=2557 comm="syz.1.801" path="/" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.437400][ T2560] xt_hashlimit: size too large, truncated to 1048576 [ 136.489057][ T2531] F2FS-fs (loop4): Test dummy encryption mode enabled [ 136.511575][ T2531] F2FS-fs (loop4): invalid crc value [ 136.536666][ T2531] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.592106][ T2531] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.733576][ T2572] Mass Storage Function, version: 2009/09/11 [ 136.741107][ T2572] LUN: removable file: (no medium) [ 136.747664][ T2572] mass_storage.usb0/lun.0: unable to open backing file: fi [ 137.030372][ T2584] EXT4-fs (loop4): 1 truncate cleaned up [ 137.042450][ T2584] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 137.063982][ T2584] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.810: invalid indirect mapped block 234881024 (level 0) [ 137.081498][ T30] audit: type=1400 audit(1785155785.143:360): avc: denied { bind } for pid=2586 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.185734][ T2596] program syz.4.815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.454196][ T2597] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 137.473722][ T2597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.539909][ T2597] F2FS-fs (loop1): invalid crc value [ 137.679104][ T2597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.705320][ T290] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.812257][ T2597] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.819705][ T2597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.878602][ T2616] set_capacity_and_notify: 4 callbacks suppressed [ 137.878622][ T2616] loop4: detected capacity change from 0 to 40427 [ 137.901956][ T2616] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 137.909661][ T2616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.918722][ T2616] F2FS-fs (loop4): fault_type options not supported [ 137.928873][ T2616] F2FS-fs (loop4): invalid crc value [ 137.935680][ T2616] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.962170][ T2616] F2FS-fs (loop4): Start checkpoint disabled! [ 137.969599][ T2616] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.976860][ T2616] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 137.977295][ T290] usb 3-1: Using ep0 maxpacket: 32 [ 138.004637][ T615] attempt to access beyond end of device [ 138.004637][ T615] loop4: rw=2049, want=45104, limit=40427 [ 138.145071][ T290] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.154367][ T290] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.165758][ T290] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.175240][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.185259][ T290] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.195193][ T290] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.208399][ T290] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.218020][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.267027][ T290] usb 3-1: config 0 descriptor?? [ 138.581436][ T2642] loop6: detected capacity change from 0 to 40427 [ 138.589615][ T290] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.610652][ T2642] F2FS-fs (loop6): fault_injection options not supported [ 138.632116][ T2642] F2FS-fs (loop6): fault_type options not supported [ 138.639589][ T2654] syz.4.838: vmalloc error: size 15032385536, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 138.658761][ T2642] F2FS-fs (loop6): invalid crc value [ 138.664602][ T2654] CPU: 0 PID: 2654 Comm: syz.4.838 Tainted: G W syzkaller #0 [ 138.673350][ T2654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.683447][ T2654] Call Trace: [ 138.687040][ T2654] [ 138.690008][ T2654] __dump_stack+0x21/0x30 [ 138.694552][ T2654] dump_stack_lvl+0x110/0x170 [ 138.699372][ T2654] ? show_regs_print_info+0x20/0x20 [ 138.704628][ T2654] ? pr_cont_kernfs_name+0xe3/0xf0 [ 138.709982][ T2654] dump_stack+0x15/0x20 [ 138.714191][ T2654] warn_alloc+0x1dc/0x200 [ 138.718704][ T2654] ? __alloc_pages_bulk+0xab0/0xab0 [ 138.723953][ T2654] ? zone_watermark_ok_safe+0x270/0x270 [ 138.729619][ T2654] __vmalloc_node_range+0xbb/0xad0 [ 138.734787][ T2654] ? kasan_poison+0x62/0x70 [ 138.739347][ T2654] ? kmalloc_order+0xb9/0x160 [ 138.744357][ T2654] ? __vcalloc+0x36/0x50 [ 138.748726][ T2654] __vmalloc+0x79/0x90 [ 138.752833][ T2654] ? __vcalloc+0x36/0x50 [ 138.757102][ T2654] __vcalloc+0x36/0x50 [ 138.761230][ T2654] memslot_rmap_alloc+0x67/0x2b0 [ 138.766203][ T2654] kvm_arch_prepare_memory_region+0xb6/0xb90 [ 138.772248][ T2654] ? kvm_set_memslot+0x538/0x1780 [ 138.777314][ T2654] ? memcpy+0x56/0x70 [ 138.781331][ T2654] kvm_set_memslot+0x552/0x1780 [ 138.786377][ T2654] ? id_to_memslot+0x130/0x130 [ 138.791561][ T2654] ? id_to_memslot+0xb7/0x130 [ 138.796342][ T2654] __kvm_set_memory_region+0xbb7/0xdf0 [ 138.801888][ T2654] ? kvm_put_kvm_no_destroy+0x90/0x90 [ 138.807315][ T2654] ? __asan_set_shadow_00+0xe/0x10 [ 138.812524][ T2654] ? do_futex+0xdd3/0x27f0 [ 138.816993][ T2654] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 138.822778][ T2654] ? kvm_vm_ioctl_create_vcpu+0x66e/0x880 [ 138.829128][ T2654] kvm_vm_ioctl_set_memory_region+0x74/0xa0 [ 138.835089][ T2654] kvm_vm_ioctl+0x8d4/0xb00 [ 138.839650][ T2654] ? kvm_device_release+0x210/0x210 [ 138.845333][ T2654] ? ioctl_has_perm+0x1b8/0x4f0 [ 138.850324][ T2654] ? memcpy+0x56/0x70 [ 138.854362][ T2654] ? has_cap_mac_admin+0x370/0x370 [ 138.859610][ T2654] ? kvm_vcpu_ioctl+0xab6/0xc00 [ 138.864511][ T2654] ? selinux_file_ioctl+0x3ad/0x4c0 [ 138.869756][ T2654] ? selinux_file_alloc_security+0x120/0x120 [ 138.875774][ T2654] ? kvm_dev_ioctl+0x12be/0x1af0 [ 138.881182][ T2654] ? __fget_files+0x2e1/0x340 [ 138.885978][ T2654] ? security_file_ioctl+0x84/0xa0 [ 138.891285][ T2654] ? kvm_device_release+0x210/0x210 [ 138.896682][ T2654] __se_sys_ioctl+0x121/0x1a0 [ 138.901400][ T2654] __x64_sys_ioctl+0x7b/0x90 [ 138.906249][ T2654] x64_sys_call+0x2f/0x9a0 [ 138.910758][ T2654] do_syscall_64+0x4c/0xa0 [ 138.915402][ T2654] ? clear_bhb_loop+0x50/0xa0 [ 138.920266][ T2654] ? clear_bhb_loop+0x50/0xa0 [ 138.925081][ T2654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.931088][ T2654] RIP: 0033:0x7fbe43986e99 [ 138.936225][ T2654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.955973][ T2654] RSP: 002b:00007fbe423e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.964956][ T2654] RAX: ffffffffffffffda RBX: 00007fbe43c0efa0 RCX: 00007fbe43986e99 [ 138.973249][ T2654] RDX: 0000200000000300 RSI: 000000004020ae46 RDI: 0000000000000004 [ 138.981461][ T2654] RBP: 00007fbe43a1ceaf R08: 0000000000000000 R09: 0000000000000000 [ 138.989904][ T2654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.997994][ T2654] R13: 00007fbe43c0f038 R14: 00007fbe43c0efa0 R15: 00007fff3e819568 [ 139.006187][ T2654] [ 139.009864][ T2654] Mem-Info: [ 139.013033][ T2654] active_anon:2988 inactive_anon:15236 isolated_anon:0 [ 139.013033][ T2654] active_file:5029 inactive_file:3932 isolated_file:0 [ 139.013033][ T2654] unevictable:0 dirty:12 writeback:0 [ 139.013033][ T2654] slab_reclaimable:8782 slab_unreclaimable:73921 [ 139.013033][ T2654] mapped:31072 shmem:9310 pagetables:788 bounce:0 [ 139.013033][ T2654] kernel_misc_reclaimable:0 [ 139.013033][ T2654] free:1545573 free_pcp:14757 free_cma:0 [ 139.056535][ T2654] Node 0 active_anon:11952kB inactive_anon:61944kB active_file:20116kB inactive_file:15728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124288kB dirty:48kB writeback:0kB shmem:38240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4828kB pagetables:3152kB all_unreclaimable? no [ 139.088640][ T2654] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982756kB mlocked:0kB bounce:0kB free_pcp:3984kB local_pcp:3984kB free_cma:0kB [ 139.102000][ T2642] F2FS-fs (loop6): Found nat_bits in checkpoint [ 139.121027][ T2654] lowmem_reserve[]: 0 3941 3941 [ 139.132118][ T2654] Normal free:3201764kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:11952kB inactive_anon:63744kB active_file:20116kB inactive_file:15728kB unevictable:0kB writepending:48kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:53612kB local_pcp:14356kB free_cma:0kB [ 139.199977][ T2654] lowmem_reserve[]: 0 0 0 [ 139.213157][ T2668] loop5: detected capacity change from 0 to 256 [ 139.221096][ T6] usb 3-1: USB disconnect, device number 12 [ 139.227419][ T2654] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 139.246454][ T6] usblp0: removed [ 139.255359][ T2654] Normal: 1*4kB (E) 2*8kB (UM) 555*16kB (UME) 643*32kB (UME) 161*64kB (UME) 87*128kB (UME) 43*256kB (UME) 37*512kB (UM) 26*1024kB (UM) 11*2048kB (UM) 750*4096kB (UM) = 3202020kB [ 139.273834][ T2668] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.294066][ T2654] 21698 total pagecache pages [ 139.299296][ T2642] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 139.301840][ T2654] 2 pages in swap cache [ 139.312025][ T2654] Swap cache stats: add 2, delete 0, find 1/1 [ 139.327072][ T2654] Free swap = 124984kB [ 139.331779][ T2654] Total swap = 124996kB [ 139.336348][ T2654] 2097051 pages RAM [ 139.340311][ T2654] 0 pages HighMem/MovableOnly [ 139.345477][ T2654] 342338 pages reserved [ 139.349931][ T2654] 0 pages cma reserved [ 139.359865][ T2657] loop1: detected capacity change from 0 to 40427 [ 139.385283][ T2642] attempt to access beyond end of device [ 139.385283][ T2642] loop6: rw=2049, want=45128, limit=40427 [ 139.405427][ T2657] F2FS-fs (loop1): invalid crc value [ 139.443291][ T2657] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.480527][ T2508] attempt to access beyond end of device [ 139.480527][ T2508] loop6: rw=2049, want=45152, limit=40427 [ 139.577679][ T2657] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 139.669405][ T2657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.833400][ T2657] attempt to access beyond end of device [ 139.833400][ T2657] loop1: rw=2049, want=45112, limit=40427 [ 139.878992][ T2684] loop4: detected capacity change from 0 to 512 [ 139.935960][ T2684] EXT4-fs (loop4): dax option not supported [ 139.981911][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 139.981928][ T30] audit: type=1400 audit(1785155788.043:362): avc: denied { set_context_mgr } for pid=2690 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.019489][ T2691] binder: 2690:2691 ioctl c0306201 200000000640 returned -22 [ 140.058015][ T30] audit: type=1400 audit(1785155788.123:363): avc: denied { remount } for pid=2683 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.095417][ T2695] loop2: detected capacity change from 0 to 256 [ 140.132041][ T30] audit: type=1400 audit(1785155788.163:364): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.241634][ T2702] loop1: detected capacity change from 0 to 256 [ 142.176588][ T2702] FAT-fs (loop1): codepage cp85 not found [ 142.195078][ T2695] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 142.252695][ T2695] xt_hashlimit: size too large, truncated to 1048576 [ 142.253387][ T30] audit: type=1400 audit(1785155790.313:365): avc: denied { write } for pid=2712 comm="syz.6.856" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.287350][ T2713] binder: 2712:2713 ioctl c0306201 200000000080 returned -14 [ 142.373774][ T2717] loop6: detected capacity change from 0 to 512 [ 142.390729][ T2718] loop4: detected capacity change from 0 to 512 [ 142.409879][ T2717] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 142.409879][ T2717] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 142.409879][ T2717] [ 142.428003][ T6] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.458023][ T2717] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,errors=remount-ro,minixdf,noacl,. Quota mode: writeback. [ 142.476013][ T2718] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 142.492229][ T2717] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.513381][ T2718] EXT4-fs (loop4): 1 truncate cleaned up [ 142.525043][ T2718] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 142.576923][ T2717] EXT4-fs (loop6): shut down requested (1) [ 142.586490][ T30] audit: type=1400 audit(1785155790.653:366): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 142.645028][ T30] audit: type=1400 audit(1785155790.653:367): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.674962][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 142.717157][ T30] audit: type=1400 audit(1785155790.653:368): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.795074][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.815054][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.836266][ T30] audit: type=1400 audit(1785155790.653:369): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.905095][ T30] audit: type=1400 audit(1785155790.653:370): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.945069][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 142.954195][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.983819][ T30] audit: type=1400 audit(1785155790.653:371): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.985050][ T6] usb 6-1: SerialNumber: syz [ 143.084967][ T290] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.105841][ T6] usb 6-1: 0:2 : does not exist [ 143.171755][ T2734] device batadv_slave_0 entered promiscuous mode [ 143.179678][ T2733] device batadv_slave_0 left promiscuous mode [ 143.305683][ T2739] loop4: detected capacity change from 0 to 128 [ 143.334997][ T290] usb 7-1: Using ep0 maxpacket: 16 [ 143.423791][ T2723] loop1: detected capacity change from 0 to 131072 [ 143.435576][ T2744] loop4: detected capacity change from 0 to 1024 [ 143.436271][ T2723] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 143.448944][ T2723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.457628][ T290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.474194][ T2723] F2FS-fs (loop1): invalid crc value [ 143.481051][ T290] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.494684][ T290] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.504189][ T290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.507686][ T2744] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 143.524784][ T290] usb 7-1: config 0 descriptor?? [ 143.529074][ T2723] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.532122][ T2744] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.560535][ T2744] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.867: lblock 0 mapped to illegal pblock 0 (length 6) [ 143.575909][ T2744] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 143.589340][ T2744] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.589340][ T2744] [ 143.603197][ T2744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.867: bg 0: block 112: padding at end of block bitmap is not set [ 143.611069][ T2723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.619130][ T2744] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 143.625312][ T2723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 143.644865][ T2744] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.644865][ T2744] [ 143.655118][ T2744] EXT4-fs (loop4): Total free blocks count 0 [ 143.661457][ T2744] EXT4-fs (loop4): Free/Dirty block details [ 143.668068][ T2744] EXT4-fs (loop4): free_blocks=0 [ 143.673261][ T2744] EXT4-fs (loop4): dirty_blocks=48 [ 143.678728][ T2744] EXT4-fs (loop4): Block reservation details [ 143.684836][ T2744] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 144.008823][ T290] HID 045e:07da: Invalid code 65791 type 1 [ 144.028782][ T290] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0015/input/input15 [ 144.044073][ T2758] syz.4.870[2758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.044239][ T2758] syz.4.870[2758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.066555][ T290] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 144.132729][ T2763] loop4: detected capacity change from 0 to 1024 [ 144.204221][ T2763] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.290704][ T2771] loop1: detected capacity change from 0 to 1024 [ 144.378318][ T6] usb 6-1: USB disconnect, device number 8 [ 144.386250][ T2771] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 144.401359][ T2771] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 144.412240][ T2771] JBD2: no valid journal superblock found [ 144.418553][ T2771] EXT4-fs (loop1): error loading journal [ 144.443333][ T2775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2775 comm=syz.2.875 [ 144.470371][ T2777] loop4: detected capacity change from 0 to 512 [ 144.501728][ T2779] loop5: detected capacity change from 0 to 512 [ 144.531877][ T2777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.546217][ T2777] EXT4-fs (loop4): 1 truncate cleaned up [ 144.552082][ T2777] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 144.584514][ T2786] loop2: detected capacity change from 0 to 256 [ 144.616472][ T2779] incfs: Can't find or create .index dir in . [ 144.623436][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.626931][ T2779] incfs: mount failed -22 [ 144.654786][ T2791] netlink: 27 bytes leftover after parsing attributes in process `syz.4.882'. [ 144.655529][ T2786] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 144.761349][ T2796] loop5: detected capacity change from 0 to 512 [ 144.794855][ T2802] loop4: detected capacity change from 0 to 2048 [ 144.842201][ T307] usb 7-1: USB disconnect, device number 2 [ 144.863456][ T2802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.878094][ T2802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 144.893843][ T2796] EXT4-fs (loop5): 1 truncate cleaned up [ 144.899978][ T2796] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 144.907179][ T2802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 144.920818][ T2796] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.885: invalid indirect mapped block 234881024 (level 0) [ 144.923522][ T2802] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.923522][ T2802] [ 144.940689][ T2796] EXT4-fs (loop5): Remounting filesystem read-only [ 144.948285][ T2802] EXT4-fs (loop4): Total free blocks count 0 [ 144.962284][ T2802] EXT4-fs (loop4): Free/Dirty block details [ 144.975055][ T2802] EXT4-fs (loop4): free_blocks=4096 [ 144.980506][ T2802] EXT4-fs (loop4): dirty_blocks=16 [ 144.988006][ T2802] EXT4-fs (loop4): Block reservation details [ 144.995335][ T2802] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 145.106300][ T2817] exfat: Deprecated parameter 'utf8' [ 145.119452][ T2817] exfat: Deprecated parameter 'utf8' [ 145.154978][ T290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.168678][ T2817] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 145.284944][ T6] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 145.398020][ T2829] syz.4.897[2829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.398148][ T2829] syz.4.897[2829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.515051][ T290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.539340][ T290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.556981][ T2838] exfat: Deprecated parameter 'namecase' [ 145.562889][ T2838] exfat: Deprecated parameter 'namecase' [ 145.573459][ T2838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcaad04e, utbl_chksum : 0xe619d30d) [ 145.650804][ T290] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.663854][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.675221][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.685456][ T290] usb 2-1: SerialNumber: syz [ 145.688919][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.752002][ T2842] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.902: iget: bogus i_mode (4) [ 145.764022][ T2842] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.902: couldn't read orphan inode 15 (err -117) [ 145.776949][ T6] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.786641][ T2842] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,stripe=0x0000000000000fff,norecovery,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 145.816372][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.825163][ T6] usb 6-1: SerialNumber: syz [ 145.975872][ T290] usb 2-1: 0:2 : does not exist [ 145.982917][ T290] usb 2-1: USB disconnect, device number 15 [ 146.011123][ T286] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 146.037129][ T286] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 146.052275][ T286] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 146.105982][ T6] usb 6-1: 0:2 : does not exist [ 146.138479][ T6] usb 6-1: USB disconnect, device number 9 [ 146.185559][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.336645][ T2847] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.906: bg 0: block 5: invalid block bitmap [ 146.352384][ T2838] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 146.362369][ T2847] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 146.368379][ T2838] exFAT-fs (loop2): error, failed to bmap (inode : ffff8881295ddab0 iblock : 8, err : -5) [ 146.376010][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.382418][ T2838] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 146.399525][ T2847] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.906: invalid indirect mapped block 3 (level 2) [ 146.413311][ T2838] attempt to access beyond end of device [ 146.413311][ T2838] loop2: rw=2049, want=34225520832, limit=256 [ 146.422382][ T2847] EXT4-fs (loop6): 1 orphan inode deleted [ 146.437922][ T2847] EXT4-fs (loop6): 1 truncate cleaned up [ 146.443882][ T2847] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 146.482443][ T2847] overlayfs: failed to set xattr on upper [ 146.493462][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.501367][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.510098][ T2848] device bridge_slave_0 entered promiscuous mode [ 146.524344][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.539075][ T2508] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 146.551931][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.559758][ T2848] device bridge_slave_1 entered promiscuous mode [ 146.569185][ T2508] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 146.741164][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.748312][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.755694][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.762767][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.835353][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.849866][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.886748][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.902650][ T615] device bridge_slave_1 left promiscuous mode [ 146.912699][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.921064][ T2873] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.935600][ T2873] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.951853][ T615] device bridge_slave_0 left promiscuous mode [ 146.959500][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.976148][ T615] device veth1_macvtap left promiscuous mode [ 146.982678][ T615] device veth0_vlan left promiscuous mode [ 146.991008][ T2876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.012630][ T2876] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.027777][ T697] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.166721][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.187274][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.194413][ T697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.202986][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.211303][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.235080][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.244656][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.281944][ T2848] device veth0_vlan entered promiscuous mode [ 147.301588][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.324961][ T707] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.327201][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.348067][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.365371][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.422676][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.430842][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.438945][ T2874] device bridge_slave_0 entered promiscuous mode [ 147.446679][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.453756][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.463218][ T2874] device bridge_slave_1 entered promiscuous mode [ 147.494599][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.503286][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.513713][ T2848] device veth1_macvtap entered promiscuous mode [ 147.552439][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.562134][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.571742][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.586854][ T2890] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 147.595258][ T707] usb 3-1: Using ep0 maxpacket: 16 [ 147.631555][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.647840][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.656813][ T2890] EXT4-fs (loop1): 1 truncate cleaned up [ 147.662567][ T2890] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 147.725081][ T707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.745164][ T707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.814707][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.842529][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.851795][ T2885] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 147.855192][ T707] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 147.863416][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.876927][ T697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.881094][ T707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.887496][ T2885] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 147.900026][ T707] usb 3-1: SerialNumber: syz [ 147.905879][ T2885] F2FS-fs (loop5): invalid crc value [ 147.911316][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.933560][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.945276][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.953891][ T697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.964049][ T2885] F2FS-fs (loop5): Found nat_bits in checkpoint [ 147.976735][ T707] usb 3-1: 0:2 : does not exist [ 147.985593][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.994006][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.016099][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.031921][ T2885] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 148.039697][ T2885] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 148.047282][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.056860][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.064709][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.073024][ T2874] device veth0_vlan entered promiscuous mode [ 148.113410][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.126471][ T2874] device veth1_macvtap entered promiscuous mode [ 148.134006][ T2885] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 148.155187][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.175754][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.185435][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.225062][ T2911] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.257344][ T2911] attempt to access beyond end of device [ 148.257344][ T2911] loop1: rw=0, want=34359738368, limit=16 [ 148.265113][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 148.265179][ T30] audit: type=1400 audit(1785155796.323:377): avc: denied { map } for pid=2910 comm="syz.1.926" path="/184/file1/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.303957][ T2911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[9000] [ 148.337060][ T615] device bridge_slave_1 left promiscuous mode [ 148.345750][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.354293][ T615] device bridge_slave_0 left promiscuous mode [ 148.361943][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.371304][ T2911] attempt to access beyond end of device [ 148.371304][ T2911] loop1: rw=0, want=34359738368, limit=16 [ 148.391171][ T615] device veth1_macvtap left promiscuous mode [ 148.399874][ T2911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[9000] [ 148.427526][ T615] device veth0_vlan left promiscuous mode [ 148.433742][ T2911] attempt to access beyond end of device [ 148.433742][ T2911] loop1: rw=0, want=34359738368, limit=16 [ 148.455507][ T2911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[9000] [ 148.491374][ T2911] attempt to access beyond end of device [ 148.491374][ T2911] loop1: rw=0, want=34359738368, limit=16 [ 148.515676][ T2911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[9000] [ 148.741762][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 148.752008][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.762409][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 148.773462][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.782243][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.792257][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.801174][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.810536][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.848174][ T2923] set_capacity_and_notify: 10 callbacks suppressed [ 148.848198][ T2923] loop7: detected capacity change from 0 to 1024 [ 148.963229][ T2923] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.986649][ T2923] 9pnet_virtio: no channels available for device syz [ 149.001494][ T30] audit: type=1400 audit(1785155797.063:378): avc: denied { write } for pid=2922 comm="syz.7.930" name="/" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.034376][ T30] audit: type=1400 audit(1785155797.063:379): avc: denied { add_name } for pid=2922 comm="syz.7.930" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.053922][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.060196][ T30] audit: type=1400 audit(1785155797.063:380): avc: denied { read } for pid=2922 comm="syz.7.930" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 149.089369][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.101236][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.113205][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.124845][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.136885][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.148922][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.160305][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.172052][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.183745][ T2848] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 149.234930][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 149.251827][ T707] usb 3-1: USB disconnect, device number 13 [ 149.446521][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.458798][ T2944] loop1: detected capacity change from 0 to 512 [ 149.466954][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.469754][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.485693][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 149.497964][ T2938] device bridge_slave_0 entered promiscuous mode [ 149.509048][ T2944] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.519516][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.527133][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.535988][ T2938] device bridge_slave_1 entered promiscuous mode [ 149.546066][ T2944] EXT4-fs (loop1): 1 truncate cleaned up [ 149.552254][ T2944] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 149.615018][ T60] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.627516][ T60] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.637571][ T60] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.650817][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 149.657587][ T60] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.667014][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.676276][ T60] usb 9-1: config 0 descriptor?? [ 149.724605][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.731915][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.739465][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.746585][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.759260][ T2956] loop2: detected capacity change from 0 to 128 [ 149.767880][ T2956] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.782400][ T2956] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.802828][ T2958] netlink: 'syz.5.942': attribute type 4 has an invalid length. [ 149.830179][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.842795][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.851120][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.871112][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.879772][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.886894][ T615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.895118][ T344] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.895163][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.913774][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.921020][ T615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.937153][ T44] device bridge_slave_1 left promiscuous mode [ 149.943401][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.951546][ T44] device bridge_slave_0 left promiscuous mode [ 149.959397][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.973742][ T44] device veth1_macvtap left promiscuous mode [ 149.980114][ T44] device veth0_vlan left promiscuous mode [ 150.118196][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.126981][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.136158][ T2928] UDC core: couldn't find an available UDC or it's busy: -16 [ 150.144303][ T2928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.163655][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.177585][ T60] hid (null): invalid report_size 606077993 [ 150.223340][ T2938] device veth0_vlan entered promiscuous mode [ 150.230520][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.239195][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.248841][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.256777][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.282037][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.312530][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.324683][ T2938] device veth1_macvtap entered promiscuous mode [ 150.341042][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.349583][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.359465][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.373233][ T2969] kvm: MWAIT instruction emulated as NOP! [ 150.379077][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.380482][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.406884][ T6] usb 9-1: USB disconnect, device number 2 [ 150.416515][ T2969] APIC base relocation is unsupported by KVM [ 150.475286][ T30] audit: type=1400 audit(1785155798.543:381): avc: denied { mounton } for pid=2975 comm="syz.2.948" path="/proc/508/task" dev="proc" ino=28022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 150.547232][ T2982] loop1: detected capacity change from 0 to 256 [ 150.605668][ T2982] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 150.619517][ T2982] exFAT-fs (loop1): IO charset isox859-9 not found [ 150.645642][ T30] audit: type=1400 audit(1785155798.713:382): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 150.743207][ T2990] loop1: detected capacity change from 0 to 128 [ 150.781712][ T2990] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.794321][ T2990] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.862877][ T339] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.036696][ T6] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 151.062706][ T3006] loop2: detected capacity change from 0 to 512 [ 151.076346][ T3007] loop1: detected capacity change from 0 to 256 [ 151.094488][ T3006] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 151.103102][ T3007] FAT-fs (loop1): codepage cp85 not found [ 151.110546][ T3006] EXT4-fs (loop2): 1 truncate cleaned up [ 151.116679][ T3006] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 151.145266][ T2978] loop9: detected capacity change from 0 to 131072 [ 151.186006][ T2978] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 151.193366][ T2978] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 151.204438][ T2978] F2FS-fs (loop9): invalid crc value [ 151.246390][ T2978] F2FS-fs (loop9): Found nat_bits in checkpoint [ 151.279683][ T2978] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 151.286912][ T2978] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 151.304991][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 151.314976][ T290] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 151.351401][ T3016] loop1: detected capacity change from 0 to 1024 [ 151.361950][ T3016] EXT4-fs (loop1): Ignoring removed oldalloc option [ 151.370395][ T3016] EXT4-fs (loop1): Ignoring removed bh option [ 151.387844][ T3016] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,usrjquota=,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 151.405985][ T3016] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.425116][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.437322][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.439356][ T3016] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.962: Freeing blocks not in datazone - block = 0, count = 16 [ 151.451372][ T6] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.473803][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.483719][ T6] usb 6-1: config 0 descriptor?? [ 151.490958][ T3016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.962: bg 0: block 112: padding at end of block bitmap is not set [ 151.506010][ T3016] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 151.518875][ T3016] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.518875][ T3016] [ 151.530143][ T3016] EXT4-fs (loop1): Total free blocks count 0 [ 151.536520][ T3016] EXT4-fs (loop1): Free/Dirty block details [ 151.542630][ T3016] EXT4-fs (loop1): free_blocks=0 [ 151.547825][ T3016] EXT4-fs (loop1): dirty_blocks=16 [ 151.553234][ T3016] EXT4-fs (loop1): Block reservation details [ 151.560088][ T3016] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 151.627926][ T3021] loop1: detected capacity change from 0 to 512 [ 151.647275][ T3021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.659434][ T3021] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.675185][ T30] audit: type=1400 audit(1785155799.743:383): avc: denied { map } for pid=3020 comm="syz.1.964" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.710608][ T3021] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.964: corrupted inode contents [ 151.722749][ T3021] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.964: mark_inode_dirty error [ 151.735139][ T290] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.745851][ T290] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.785531][ T3021] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.964: corrupted inode contents [ 151.807081][ T3021] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.964: mark_inode_dirty error [ 151.845067][ T290] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.854356][ T290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.874136][ T290] usb 9-1: SerialNumber: syz [ 151.945194][ T3027] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 151.972401][ T3027] EXT4-fs (loop2): invalid journal inode [ 151.978445][ T3027] EXT4-fs (loop2): can't get journal size [ 151.994166][ T3027] EXT4-fs (loop2): 1 truncate cleaned up [ 152.001758][ T6] HID 045e:07da: Invalid code 65791 type 1 [ 152.014150][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input16 [ 152.026605][ T3027] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 152.040024][ T6] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 152.175843][ T290] usb 9-1: 0:2 : does not exist [ 152.182666][ T3043] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 152.196109][ T290] usb 9-1: USB disconnect, device number 3 [ 152.223713][ T3043] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.437119][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.546891][ T3072] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.558630][ T3072] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.579155][ T3072] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.981: corrupted inode contents [ 152.591221][ T3072] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #2: comm syz.2.981: mark_inode_dirty error [ 152.603133][ T3072] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.981: corrupted inode contents [ 152.615766][ T3072] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.981: mark_inode_dirty error [ 152.685092][ T6] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 152.830512][ T60] usb 6-1: USB disconnect, device number 10 [ 152.842512][ T3080] EXT4-fs (loop2): Ignoring removed bh option [ 152.877124][ T3080] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 152.944962][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 153.065123][ T6] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.081744][ T6] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 153.093503][ T6] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 255 [ 153.104232][ T6] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 153.119053][ T3088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.144757][ T3088] incfs: ino conflict with backing FS 2 [ 153.150934][ T6] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.163341][ T3076] F2FS-fs (loop8): Invalid log sectorsize (0) [ 153.169658][ T3076] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 153.184255][ T30] audit: type=1400 audit(1785155801.243:384): avc: denied { getattr } for pid=3087 comm="syz.2.987" name="/" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 153.188013][ T3076] F2FS-fs (loop8): invalid crc value [ 153.213810][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.232972][ T30] audit: type=1400 audit(1785155801.283:385): avc: denied { write } for pid=3087 comm="syz.2.987" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.256556][ T30] audit: type=1400 audit(1785155801.283:386): avc: denied { open } for pid=3087 comm="syz.2.987" path="/230/bus/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.280348][ T30] audit: type=1400 audit(1785155801.283:387): avc: denied { link } for pid=3087 comm="syz.2.987" name="#1261" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.305588][ T3065] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.312843][ T3065] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.318454][ T3076] F2FS-fs (loop8): Found nat_bits in checkpoint [ 153.345067][ T30] audit: type=1400 audit(1785155801.363:388): avc: denied { unlink } for pid=289 comm="syz-executor" name="file1" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.356507][ T6] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 153.414437][ T3076] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 153.422047][ T3076] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 153.429856][ T3101] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 153.503361][ T3106] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 153.566677][ T6] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 153.593292][ T6] usb 10-1: USB disconnect, device number 2 [ 153.672922][ T3121] erofs: (device loop1): mounted with root inode @ nid 36. [ 153.685179][ T3121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 153.695917][ T3121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 153.702179][ T3116] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 153.709605][ T3121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 153.719576][ T3116] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 153.728050][ T3121] overlayfs: failed to get redirect (-117) [ 153.754995][ T307] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 153.993594][ T3130] set_capacity_and_notify: 8 callbacks suppressed [ 153.993615][ T3130] loop1: detected capacity change from 0 to 512 [ 154.007136][ T307] usb 9-1: Using ep0 maxpacket: 16 [ 154.026776][ T3130] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.046744][ T3130] EXT4-fs (loop1): 1 truncate cleaned up [ 154.053712][ T3130] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 154.125049][ T307] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.150834][ T307] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.289270][ T3128] loop5: detected capacity change from 0 to 131072 [ 154.345161][ T307] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.355213][ T3128] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 154.356146][ T307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.371015][ T307] usb 9-1: Product: syz [ 154.371673][ T3128] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 154.375511][ T307] usb 9-1: Manufacturer: syz [ 154.389213][ T307] usb 9-1: SerialNumber: syz [ 154.394692][ T3128] F2FS-fs (loop5): invalid crc value [ 154.409617][ T3128] F2FS-fs (loop5): Found nat_bits in checkpoint [ 154.447597][ T3128] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 154.454789][ T3128] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 154.515004][ T290] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 154.664970][ T359] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.715129][ T307] usb 9-1: 0:2 : does not exist [ 154.730592][ T307] usb 9-1: USB disconnect, device number 4 [ 154.875134][ T290] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.886345][ T290] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.898202][ T290] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.909108][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 154.914546][ T290] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.956005][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.984693][ T3151] loop5: detected capacity change from 0 to 256 [ 155.005144][ T290] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 155.014764][ T290] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 155.024973][ T359] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 155.033457][ T359] usb 3-1: config 1 has no interface number 0 [ 155.040238][ T359] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.050663][ T3151] FAT-fs (loop5): codepage cp85 not found [ 155.057227][ T290] usb 10-1: Manufacturer: syz [ 155.062955][ T290] usb 10-1: config 0 descriptor?? [ 155.068465][ T359] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 155.079079][ T359] usb 3-1: config 1 interface 105 has no altsetting 0 [ 155.199785][ T3157] loop5: detected capacity change from 0 to 16 [ 155.209493][ T3157] erofs: (device loop5): mounted with root inode @ nid 36. [ 155.220756][ T3157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 155.230233][ T3157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 155.239608][ T3157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 155.249220][ T359] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 155.258665][ T3157] overlayfs: failed to get redirect (-117) [ 155.265015][ T359] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 155.273509][ T359] usb 3-1: Product: syz [ 155.285123][ T359] usb 3-1: Manufacturer: syz [ 155.289908][ T359] usb 3-1: SerialNumber: syz [ 155.315207][ T3144] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.331515][ T3144] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.404017][ T3165] loop5: detected capacity change from 0 to 2048 [ 155.458935][ T3170] loop1: detected capacity change from 0 to 2048 [ 155.522954][ T3165] loop5: detected capacity change from 0 to 256 [ 155.543691][ T3165] exfat: Deprecated parameter 'utf8' [ 155.543884][ T30] audit: type=1400 audit(1785155803.603:389): avc: denied { bind } for pid=3171 comm="syz.8.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.558496][ T3170] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.572294][ T290] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 155.595838][ T3170] incfs: ino conflict with backing FS 2 [ 155.599455][ T30] audit: type=1400 audit(1785155803.613:390): avc: denied { listen } for pid=3171 comm="syz.8.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.621573][ T3165] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 155.622100][ T30] audit: type=1400 audit(1785155803.653:391): avc: denied { connect } for pid=3171 comm="syz.8.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.653689][ T30] audit: type=1400 audit(1785155803.653:392): avc: denied { write } for pid=3171 comm="syz.8.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.664736][ T290] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 155.711448][ T290] appleir 0003:05AC:8243.0018: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 155.733212][ T3178] loop8: detected capacity change from 0 to 256 [ 155.801302][ T3178] FAT-fs (loop8): codepage cp85 not found [ 155.807518][ T3144] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.814549][ T3144] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.886996][ T444] usb 10-1: USB disconnect, device number 3 [ 155.956944][ T3180] xt_hashlimit: size too large, truncated to 1048576 [ 156.016897][ T3185] loop5: detected capacity change from 0 to 40427 [ 156.030184][ T3185] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 156.069449][ T3185] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.088819][ T3185] F2FS-fs (loop5): invalid crc value [ 156.105459][ T3190] loop8: detected capacity change from 0 to 1024 [ 156.112510][ T3185] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.153952][ T3185] F2FS-fs (loop5): Start checkpoint disabled! [ 156.161404][ T3185] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 156.169444][ T3185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 156.178300][ T3190] EXT4-fs (loop8): Ignoring removed bh option [ 156.205053][ T3190] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.252640][ T3190] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 156.289663][ T359] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 156.341523][ T30] audit: type=1400 audit(1785155804.403:393): avc: denied { create } for pid=3184 comm="syz.5.1023" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 156.363584][ T359] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 156.396504][ T339] attempt to access beyond end of device [ 156.396504][ T339] loop5: rw=2049, want=45112, limit=40427 [ 156.417246][ T359] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3e:27:b5:7f:1b:b3 [ 156.430905][ T3197] erofs: (device loop8): mounted with root inode @ nid 36. [ 156.452536][ T3197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=46 [ 156.462286][ T3197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=46 [ 156.482335][ T3201] FAULT_INJECTION: forcing a failure. [ 156.482335][ T3201] name failslab, interval 1, probability 100, space 0, times 1 [ 156.482371][ T333] FAULT_INJECTION: forcing a failure. [ 156.482371][ T333] name failslab, interval 1, probability 100, space 0, times 1 [ 156.496046][ T3197] FAULT_INJECTION: forcing a failure. [ 156.496046][ T3197] name failslab, interval 1, probability 100, space 0, times 1 [ 156.508764][ T101] FAULT_INJECTION: forcing a failure. [ 156.508764][ T101] name failslab, interval 1, probability 100, space 0, times 1 [ 156.521946][ T90] FAULT_INJECTION: forcing a failure. [ 156.521946][ T90] name failslab, interval 1, probability 100, space 0, times 1 [ 156.535853][ T359] FAULT_INJECTION: forcing a failure. [ 156.535853][ T359] name failslab, interval 1, probability 100, space 0, times 1 [ 156.561077][ T3200] FAULT_INJECTION: forcing a failure. [ 156.561077][ T3200] name failslab, interval 1, probability 100, space 0, times 1 [ 156.561702][ T285] FAULT_INJECTION: forcing a failure. [ 156.561702][ T285] name failslab, interval 1, probability 100, space 0, times 1 [ 156.585079][ T90] CPU: 0 PID: 90 Comm: klogd Tainted: G W syzkaller #0 [ 156.587260][ C1] FAULT_INJECTION: forcing a failure. [ 156.587260][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 156.595217][ T90] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.595231][ T90] Call Trace: [ 156.595238][ T90] [ 156.595246][ T90] __dump_stack+0x21/0x30 [ 156.628932][ T90] dump_stack_lvl+0x110/0x170 [ 156.633876][ T90] ? show_regs_print_info+0x20/0x20 [ 156.639117][ T90] ? prandom_u32+0x24d/0x290 [ 156.643728][ T90] dump_stack+0x15/0x20 [ 156.647990][ T90] should_fail+0x3ab/0x500 [ 156.652533][ T90] __should_failslab+0xa4/0xe0 [ 156.657322][ T90] should_failslab+0x9/0x20 [ 156.661848][ T90] slab_pre_alloc_hook+0x39/0xd0 [ 156.666812][ T90] ? __alloc_skb+0xe4/0x730 [ 156.671349][ T90] kmem_cache_alloc+0x44/0x260 [ 156.676176][ T90] __alloc_skb+0xe4/0x730 [ 156.680550][ T90] alloc_skb_with_frags+0xa8/0x620 [ 156.685684][ T90] ? memcpy+0x56/0x70 [ 156.689697][ T90] sock_alloc_send_pskb+0x87f/0x9a0 [ 156.694932][ T90] ? sock_kzfree_s+0x60/0x60 [ 156.699549][ T90] ? __kasan_check_write+0x14/0x20 [ 156.704797][ T90] ? _raw_spin_lock+0x94/0xf0 [ 156.709597][ T90] ? _raw_spin_trylock_bh+0x150/0x150 [ 156.715001][ T90] unix_dgram_sendmsg+0x6f3/0x19b0 [ 156.720159][ T90] ? unix_dgram_poll+0x6c0/0x6c0 [ 156.725449][ T90] ? security_socket_sendmsg+0x82/0xa0 [ 156.731184][ T90] __sys_sendto+0x46d/0x620 [ 156.735847][ T90] ? __ia32_sys_getpeername+0x90/0x90 [ 156.741266][ T90] ? __kasan_check_write+0x14/0x20 [ 156.746407][ T90] __x64_sys_sendto+0xe5/0x100 [ 156.751191][ T90] x64_sys_call+0x178/0x9a0 [ 156.755935][ T90] do_syscall_64+0x4c/0xa0 [ 156.760545][ T90] ? clear_bhb_loop+0x50/0xa0 [ 156.765279][ T90] ? clear_bhb_loop+0x50/0xa0 [ 156.770092][ T90] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.776003][ T90] RIP: 0033:0x7f41f8747407 [ 156.780448][ T90] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.800360][ T90] RSP: 002b:00007fff4ee00260 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 156.809255][ T90] RAX: ffffffffffffffda RBX: 00007f41f85f7c80 RCX: 00007f41f8747407 [ 156.817348][ T90] RDX: 0000000000000055 RSI: 00007fff4ee003a0 RDI: 0000000000000003 [ 156.825662][ T90] RBP: 00007fff4ee007d0 R08: 0000000000000000 R09: 0000000000000000 [ 156.834634][ T90] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff4ee007e8 [ 156.842855][ T90] R13: 00007fff4ee003a0 R14: 000000000000003a R15: 00007fff4ee003a0 [ 156.851158][ T90] [ 156.854243][ C1] CPU: 1 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 156.856218][ T3143] FAULT_INJECTION: forcing a failure. [ 156.856218][ T3143] name failslab, interval 1, probability 100, space 0, times 1 [ 156.863408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.887402][ C1] Call Trace: [ 156.890831][ C1] [ 156.894332][ C1] __dump_stack+0x21/0x30 [ 156.899735][ C1] dump_stack_lvl+0x110/0x170 [ 156.904481][ C1] ? show_regs_print_info+0x20/0x20 [ 156.909737][ C1] ? prandom_u32+0x24d/0x290 [ 156.914478][ C1] dump_stack+0x15/0x20 [ 156.918774][ C1] should_fail+0x3ab/0x500 [ 156.923225][ C1] __should_failslab+0xa4/0xe0 [ 156.928011][ C1] should_failslab+0x9/0x20 [ 156.932538][ C1] slab_pre_alloc_hook+0x39/0xd0 [ 156.937618][ C1] ? __alloc_skb+0xe4/0x730 [ 156.942310][ C1] kmem_cache_alloc+0x44/0x260 [ 156.947179][ C1] __alloc_skb+0xe4/0x730 [ 156.951567][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 156.957083][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 156.963946][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 156.970421][ C1] ? wg_expired_zero_key_material+0x170/0x170 [ 156.976528][ C1] call_timer_fn+0x38/0x290 [ 156.981059][ C1] ? wg_expired_zero_key_material+0x170/0x170 [ 156.987426][ C1] __run_timers+0x637/0x9a0 [ 156.992379][ C1] ? calc_index+0x200/0x200 [ 156.996963][ C1] ? sched_clock_cpu+0x18/0x3d0 [ 157.001907][ C1] run_timer_softirq+0x6a/0xf0 [ 157.006845][ C1] handle_softirqs+0x250/0x560 [ 157.011652][ C1] ? irqtime_account_irq+0xbe/0x390 [ 157.017043][ C1] __irq_exit_rcu+0x52/0xf0 [ 157.021641][ C1] irq_exit_rcu+0x9/0x10 [ 157.025950][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 157.031631][ C1] [ 157.034576][ C1] [ 157.037544][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.043721][ C1] RIP: 0010:console_unlock+0xb32/0xf10 [ 157.049323][ C1] Code: 28 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 86 bf 17 00 49 81 e6 00 02 00 00 75 07 e8 38 bb 17 00 eb 06 e8 31 bb 17 00 fb 89 d8 <0a> 44 24 1f a8 01 74 0e e8 21 bb 17 00 85 db 74 19 e9 1b 03 00 00 [ 157.069520][ C1] RSP: 0018:ffffc90000a26ae0 EFLAGS: 00000293 [ 157.075983][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff8881208393c0 [ 157.084069][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 157.092059][ C1] RBP: ffffc90000a26d50 R08: 0000000000000003 R09: 0000000000000004 [ 157.101183][ C1] R10: dffffc0000000000 R11: fffff52000144d4c R12: 000000000000008f [ 157.109220][ C1] R13: fffff52000144d68 R14: 0000000000000200 R15: dffffc0000000000 [ 157.117225][ C1] ? vprintk_emit+0x320/0x320 [ 157.122193][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 157.126950][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 157.132869][ C1] ? vprintk_emit+0x2bb/0x320 [ 157.137586][ C1] vprintk_emit+0x13f/0x320 [ 157.142219][ C1] ? vprintk_store+0x13e0/0x13e0 [ 157.147525][ C1] ? preempt_schedule_irq+0xca/0x120 [ 157.152929][ C1] ? __cond_resched+0xd0/0xd0 [ 157.159298][ C1] vprintk_default+0x26/0x30 [ 157.164011][ C1] vprintk+0x7a/0x80 [ 157.168096][ C1] _printk+0xda/0x130 [ 157.172207][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.178399][ C1] ? load_image+0x3f0/0x3f0 [ 157.183215][ C1] ? prandom_u32+0x24d/0x290 [ 157.187849][ C1] should_fail+0x38d/0x500 [ 157.192284][ C1] __should_failslab+0xa4/0xe0 [ 157.197191][ C1] should_failslab+0x9/0x20 [ 157.201870][ C1] slab_pre_alloc_hook+0x39/0xd0 [ 157.206946][ C1] ? alloc_vmap_area+0x186/0x1a70 [ 157.211999][ C1] kmem_cache_alloc+0x44/0x260 [ 157.216782][ C1] alloc_vmap_area+0x186/0x1a70 [ 157.221658][ C1] ? vm_map_ram+0xa70/0xa70 [ 157.226181][ C1] ? kmem_cache_alloc_trace+0x119/0x270 [ 157.231757][ C1] ? __get_vm_area_node+0x11d/0x350 [ 157.237005][ C1] __get_vm_area_node+0x14e/0x350 [ 157.242055][ C1] __vmalloc_node_range+0xe8/0xad0 [ 157.247272][ C1] ? alloc_counters+0x65/0x540 [ 157.252055][ C1] ? selinux_capable+0x2b6/0x3b0 [ 157.257006][ C1] ? selinux_capset+0xf0/0xf0 [ 157.261703][ C1] ? alloc_counters+0x65/0x540 [ 157.266479][ C1] vzalloc+0x78/0x90 [ 157.270388][ C1] ? alloc_counters+0x65/0x540 [ 157.275168][ C1] alloc_counters+0x65/0x540 [ 157.279887][ C1] ? xt_find_table_lock+0x3b6/0x400 [ 157.285108][ C1] do_ip6t_get_ctl+0xa2d/0x1120 [ 157.290001][ C1] ? do_ip6t_set_ctl+0xd80/0xd80 [ 157.295140][ C1] ? 0xffffffffa002c000 [ 157.299525][ C1] ? unwind_get_return_address+0x4d/0x90 [ 157.305082][ C0] FAULT_INJECTION: forcing a failure. [ 157.305082][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 157.305529][ C1] ? __kasan_check_write+0x14/0x20 [ 157.323906][ C1] ? mutex_unlock+0x8f/0x230 [ 157.328809][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 157.334289][ C1] nf_getsockopt+0x26d/0x290 [ 157.338895][ C1] ipv6_getsockopt+0x1af3/0x21d0 [ 157.343849][ C1] ? is_bpf_text_address+0x177/0x190 [ 157.349159][ C1] ? ipv6_setsockopt+0x3750/0x3750 [ 157.354381][ C1] ? unwind_get_return_address+0x4d/0x90 [ 157.360070][ C1] ? stack_trace_save+0xf0/0xf0 [ 157.365562][ C1] ? arch_stack_walk+0xee/0x140 [ 157.370570][ C1] ? stack_trace_save+0xa6/0xf0 [ 157.375703][ C1] ? __stack_depot_save+0x34/0x480 [ 157.380843][ C1] ? __kasan_slab_alloc+0xc9/0xe0 [ 157.385888][ C1] ? __kasan_slab_alloc+0xb7/0xe0 [ 157.391714][ C1] ? slab_post_alloc_hook+0x4f/0x2b0 [ 157.397962][ C1] ? kmem_cache_alloc+0xf7/0x260 [ 157.403796][ C1] ? security_file_alloc+0x33/0x120 [ 157.409333][ C1] ? __alloc_file+0xb5/0x2a0 [ 157.413970][ C1] ? alloc_empty_file+0x97/0x180 [ 157.418929][ C1] ? alloc_file+0x59/0x580 [ 157.423373][ C1] ? alloc_file_pseudo+0x180/0x200 [ 157.428515][ C1] ? sock_alloc_file+0xba/0x260 [ 157.433591][ C1] ? __sys_socket+0x12b/0x190 [ 157.438327][ C1] ? __x64_sys_socket+0x7a/0x90 [ 157.443219][ C1] ? x64_sys_call+0x8c5/0x9a0 [ 157.447945][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.454044][ C1] tcp_getsockopt+0x1fc/0x23a0 [ 157.458833][ C1] ? memcpy+0x56/0x70 [ 157.463049][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 157.468728][ C1] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 157.474401][ C1] ? avc_denied+0x1b0/0x1b0 [ 157.479147][ C1] ? avc_has_perm+0x163/0x250 [ 157.483936][ C1] ? avc_has_perm_noaudit+0x490/0x490 [ 157.489417][ C1] ? selinux_socket_getsockopt+0x22f/0x340 [ 157.495351][ C1] ? memcpy+0x56/0x70 [ 157.499356][ C1] ? selinux_socket_getpeername+0x340/0x340 [ 157.505358][ C1] ? alloc_empty_file_noaccount+0x80/0x80 [ 157.511108][ C1] sock_common_getsockopt+0x98/0xb0 [ 157.516722][ C1] ? sock_recv_errqueue+0x5c0/0x5c0 [ 157.521975][ C1] __sys_getsockopt+0x207/0x400 [ 157.527058][ C1] __x64_sys_getsockopt+0xbf/0xd0 [ 157.532230][ C1] x64_sys_call+0x6db/0x9a0 [ 157.537060][ C1] do_syscall_64+0x4c/0xa0 [ 157.541939][ C1] ? clear_bhb_loop+0x50/0xa0 [ 157.546659][ C1] ? clear_bhb_loop+0x50/0xa0 [ 157.551360][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.557738][ C1] RIP: 0033:0x7f8b6745866a [ 157.562196][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 157.582157][ C1] RSP: 002b:00007ffce45ffa58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 157.590707][ C1] RAX: ffffffffffffffda RBX: 00007ffce45ffae0 RCX: 00007f8b6745866a [ 157.598902][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 157.607223][ C1] RBP: 0000000000000003 R08: 00007ffce45ffa7c R09: 0000000000000000 [ 157.615354][ C1] R10: 00007ffce45ffae0 R11: 0000000000000212 R12: 00007f8b676a4e00 [ 157.623522][ C1] R13: 00007ffce45ffa7c R14: 0000000000000000 R15: 00007f8b676a6fc0 [ 157.631881][ C1] [ 157.635022][ C0] CPU: 0 PID: 339 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 157.644087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.654359][ C0] Workqueue: events_unbound toggle_allocation_gate [ 157.661097][ C0] Call Trace: [ 157.664491][ C0] [ 157.667449][ C0] __dump_stack+0x21/0x30 [ 157.671811][ C0] dump_stack_lvl+0x110/0x170 [ 157.676515][ C0] ? show_regs_print_info+0x20/0x20 [ 157.681850][ C0] ? prandom_u32+0x24d/0x290 [ 157.686477][ C0] dump_stack+0x15/0x20 [ 157.690917][ C0] should_fail+0x3ab/0x500 [ 157.695446][ C0] __should_failslab+0xa4/0xe0 [ 157.700424][ C0] should_failslab+0x9/0x20 [ 157.704952][ C0] slab_pre_alloc_hook+0x39/0xd0 [ 157.710275][ C0] ? __alloc_skb+0xe4/0x730 [ 157.714800][ C0] kmem_cache_alloc+0x44/0x260 [ 157.719677][ C0] __alloc_skb+0xe4/0x730 [ 157.724147][ C0] wg_packet_send_keepalive+0x62/0x1c0 [ 157.729765][ C0] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 157.736677][ C0] wg_expired_send_persistent_keepalive+0x53/0x80 [ 157.743133][ C0] ? wg_expired_zero_key_material+0x170/0x170 [ 157.749326][ C0] call_timer_fn+0x38/0x290 [ 157.753875][ C0] ? wg_expired_zero_key_material+0x170/0x170 [ 157.760057][ C0] __run_timers+0x637/0x9a0 [ 157.764706][ C0] ? calc_index+0x200/0x200 [ 157.769236][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 157.774310][ C0] run_timer_softirq+0x6a/0xf0 [ 157.779110][ C0] handle_softirqs+0x250/0x560 [ 157.784125][ C0] ? irqtime_account_irq+0xbe/0x390 [ 157.789390][ C0] __irq_exit_rcu+0x52/0xf0 [ 157.793959][ C0] irq_exit_rcu+0x9/0x10 [ 157.798269][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 157.804048][ C0] [ 157.807034][ C0] [ 157.810187][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.816409][ C0] RIP: 0010:smp_call_function_many_cond+0x8ad/0x9e0 [ 157.823118][ C0] Code: 0f b6 44 05 00 84 c0 0f 85 9b 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 31 48 0a 00 83 e3 01 75 07 e8 77 44 0a 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 157.843308][ C0] RSP: 0018:ffffc900010d7860 EFLAGS: 00000293 [ 157.849409][ C0] RAX: ffffffff815f728f RBX: 0000000000000001 RCX: ffff88810c760000 [ 157.857723][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 157.866370][ C0] RBP: ffffc900010d7978 R08: ffff8881f7038e97 R09: 1ffff1103ee071d2 [ 157.874729][ C0] R10: dffffc0000000000 R11: ffffed103ee071d3 R12: ffff8881f7038e80 [ 157.882731][ C0] R13: 1ffff1103ee2784d R14: 0000000000000001 R15: ffff8881f713c268 [ 157.890907][ C0] ? smp_call_function_many_cond+0x8cf/0x9e0 [ 157.897038][ C0] ? text_poke_sync+0x30/0x30 [ 157.902373][ C0] ? smp_call_function_many+0x40/0x40 [ 157.907800][ C0] ? __kmalloc_track_caller+0x74/0x2c0 [ 157.913635][ C0] ? text_poke+0x20/0x20 [ 157.917896][ C0] ? text_poke_loc_init+0x105/0x560 [ 157.923371][ C0] ? text_poke_sync+0x30/0x30 [ 157.928079][ C0] on_each_cpu_cond_mask+0x43/0x80 [ 157.933414][ C0] text_poke_bp_batch+0x1d4/0x600 [ 157.938669][ C0] ? text_poke_loc_init+0x560/0x560 [ 157.944003][ C0] ? __kasan_check_write+0x14/0x20 [ 157.949435][ C0] ? mutex_lock+0x9b/0x1c0 [ 157.954011][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 157.960794][ C0] ? text_poke_queue+0xde/0x1a0 [ 157.965687][ C0] text_poke_finish+0x1a/0x30 [ 157.970395][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 157.976416][ C0] __jump_label_update+0x38f/0x3b0 [ 157.981546][ C0] jump_label_update+0x39b/0x450 [ 157.986506][ C0] static_key_enable_cpuslocked+0x126/0x240 [ 157.992621][ C0] static_key_enable+0x1a/0x30 [ 157.997403][ C0] toggle_allocation_gate+0xba/0x440 [ 158.002706][ C0] ? kfence_debugfs_init+0x70/0x70 [ 158.007840][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 158.012977][ C0] ? finish_task_switch+0x16b/0x790 [ 158.018252][ C0] ? switch_mm_irqs_off+0x730/0x960 [ 158.023476][ C0] ? __schedule+0xbd7/0x14a0 [ 158.028104][ C0] process_one_work+0x6c8/0xbb0 [ 158.033003][ C0] worker_thread+0xaa0/0x1250 [ 158.037706][ C0] kthread+0x3f5/0x4f0 [ 158.041801][ C0] ? worker_clr_flags+0x190/0x190 [ 158.046857][ C0] ? kthread_blkcg+0xd0/0xd0 [ 158.051496][ C0] ret_from_fork+0x1f/0x30 [ 158.055931][ C0] [ 158.058967][ T359] CPU: 1 PID: 359 Comm: kworker/1:5 Tainted: G W syzkaller #0 [ 158.067890][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.078020][ T359] Workqueue: usb_hub_wq hub_event [ 158.083191][ T359] Call Trace: [ 158.086607][ T359] [ 158.089568][ T359] __dump_stack+0x21/0x30 [ 158.093924][ T359] dump_stack_lvl+0x110/0x170 [ 158.098723][ T359] ? show_regs_print_info+0x20/0x20 [ 158.103952][ T359] ? prandom_u32+0x24d/0x290 [ 158.108741][ T359] dump_stack+0x15/0x20 [ 158.113014][ T359] should_fail+0x3ab/0x500 [ 158.117548][ T359] __should_failslab+0xa4/0xe0 [ 158.122603][ T359] should_failslab+0x9/0x20 [ 158.127143][ T359] slab_pre_alloc_hook+0x39/0xd0 [ 158.132200][ T359] ? __kernfs_new_node+0xe1/0x670 [ 158.137423][ T359] kmem_cache_alloc+0x44/0x260 [ 158.142490][ T359] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 158.147979][ T359] __kernfs_new_node+0xe1/0x670 [ 158.152856][ T359] ? __mutex_lock_slowpath+0x10/0x10 [ 158.158180][ T359] ? kernfs_new_node+0x260/0x260 [ 158.163172][ T359] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 158.169141][ T359] ? __kasan_check_write+0x14/0x20 [ 158.174308][ T359] kernfs_new_node+0x150/0x260 [ 158.179191][ T359] kernfs_create_link+0xa4/0x200 [ 158.184185][ T359] sysfs_do_create_link_sd+0x8a/0x110 [ 158.189829][ T359] sysfs_create_link+0x68/0x80 [ 158.194636][ T359] usb_new_device+0xd97/0x1720 [ 158.199454][ T359] ? usb_disconnect+0x870/0x870 [ 158.204444][ T359] ? mutex_unlock+0x8f/0x230 [ 158.209097][ T359] ? __mutex_lock_slowpath+0x10/0x10 [ 158.214514][ T359] hub_event+0x291b/0x43f0 [ 158.218991][ T359] ? hub_post_resume+0x120/0x120 [ 158.224060][ T359] ? __schedule+0xbd7/0x14a0 [ 158.228765][ T359] process_one_work+0x6c8/0xbb0 [ 158.233744][ T359] worker_thread+0xaa0/0x1250 [ 158.238456][ T359] kthread+0x3f5/0x4f0 [ 158.242570][ T359] ? worker_clr_flags+0x190/0x190 [ 158.247617][ T359] ? kthread_blkcg+0xd0/0xd0 [ 158.252234][ T359] ret_from_fork+0x1f/0x30 [ 158.256795][ T359] [ 158.260000][ T3201] CPU: 1 PID: 3201 Comm: syz.9.1029 Tainted: G W syzkaller #0 [ 158.268889][ T3201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.279081][ T3201] Call Trace: [ 158.282393][ T3201] [ 158.285351][ T3201] __dump_stack+0x21/0x30 [ 158.289706][ T3201] dump_stack_lvl+0x110/0x170 [ 158.294408][ T3201] ? show_regs_print_info+0x20/0x20 [ 158.299655][ T3201] dump_stack+0x15/0x20 [ 158.303839][ T3201] should_fail+0x3ab/0x500 [ 158.308284][ T3201] __should_failslab+0xa4/0xe0 [ 158.313106][ T3201] should_failslab+0x9/0x20 [ 158.318262][ T3201] slab_pre_alloc_hook+0x39/0xd0 [ 158.323357][ T3201] ? getname_flags+0xba/0x510 [ 158.328204][ T3201] kmem_cache_alloc+0x44/0x260 [ 158.333108][ T3201] getname_flags+0xba/0x510 [ 158.337647][ T3201] getname+0x19/0x20 [ 158.341591][ T3201] do_sys_openat2+0xeb/0x7f0 [ 158.346210][ T3201] ? __se_sys_futex+0x135/0x330 [ 158.351091][ T3201] ? do_sys_open+0xe0/0xe0 [ 158.355553][ T3201] ? __x64_sys_futex+0x100/0x100 [ 158.360621][ T3201] ? ksys_write+0x1fa/0x260 [ 158.365155][ T3201] __x64_sys_openat+0x136/0x160 [ 158.370030][ T3201] x64_sys_call+0x219/0x9a0 [ 158.374578][ T3201] do_syscall_64+0x4c/0xa0 [ 158.379027][ T3201] ? clear_bhb_loop+0x50/0xa0 [ 158.384119][ T3201] ? clear_bhb_loop+0x50/0xa0 [ 158.388995][ T3201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.395080][ T3201] RIP: 0033:0x7f671296ee99 [ 158.399722][ T3201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.419775][ T3201] RSP: 002b:00007f67113c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.428240][ T3201] RAX: ffffffffffffffda RBX: 00007f6712bf6fa0 RCX: 00007f671296ee99 [ 158.436249][ T3201] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 158.444439][ T3201] RBP: 00007f6712a04eaf R08: 0000000000000000 R09: 0000000000000000 [ 158.452429][ T3201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.460511][ T3201] R13: 00007f6712bf7038 R14: 00007f6712bf6fa0 R15: 00007ffcaaf21818 [ 158.468719][ T3201] [ 158.471925][ T3197] CPU: 1 PID: 3197 Comm: syz.8.1025 Tainted: G W syzkaller #0 [ 158.481068][ T3197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.491169][ T3197] Call Trace: [ 158.494528][ T3197] [ 158.497588][ T3197] __dump_stack+0x21/0x30 [ 158.502161][ T3197] dump_stack_lvl+0x110/0x170 [ 158.506876][ T3197] ? show_regs_print_info+0x20/0x20 [ 158.512205][ T3197] ? prandom_u32+0x24d/0x290 [ 158.516829][ T3197] dump_stack+0x15/0x20 [ 158.521008][ T3197] should_fail+0x3ab/0x500 [ 158.525457][ T3197] __should_failslab+0xa4/0xe0 [ 158.530343][ T3197] should_failslab+0x9/0x20 [ 158.534895][ T3197] slab_pre_alloc_hook+0x39/0xd0 [ 158.539868][ T3197] kmem_cache_alloc_trace+0x48/0x270 [ 158.545289][ T3197] ? inode_doinit_use_xattr+0x5d/0x3f0 [ 158.550778][ T3197] inode_doinit_use_xattr+0x5d/0x3f0 [ 158.556206][ T3197] inode_doinit_with_dentry+0x837/0xd90 [ 158.561788][ T3197] ? sb_finish_set_opts+0xa10/0xa10 [ 158.567013][ T3197] selinux_inode_getxattr+0x19e/0x3b0 [ 158.572415][ T3197] ? selinux_inode_post_setxattr+0x490/0x490 [ 158.578444][ T3197] ? capable+0x8a/0xe0 [ 158.582551][ T3197] security_inode_getxattr+0xc0/0x120 [ 158.588063][ T3197] vfs_getxattr+0xdc/0x6e0 [ 158.592512][ T3197] ? __vfs_getxattr+0x400/0x400 [ 158.597509][ T3197] ? __kasan_check_write+0x14/0x20 [ 158.602680][ T3197] ? _raw_spin_lock+0x94/0xf0 [ 158.607491][ T3197] ? __vfs_getxattr+0x400/0x400 [ 158.612372][ T3197] ? lookup_one_unlocked+0x18f/0x2a0 [ 158.617767][ T3197] ? ovl_check_dir_xattr+0x188/0x210 [ 158.623090][ T3197] ovl_get_redirect_xattr+0x80/0x3a0 [ 158.628489][ T3197] ovl_check_redirect+0x81/0x260 [ 158.633454][ T3197] ovl_lookup_single+0x5f8/0x860 [ 158.638870][ T3197] ovl_lookup_layer+0x355/0x420 [ 158.643830][ T3197] ovl_lookup+0x6b0/0x1730 [ 158.648886][ T3197] ? ovl_path_next+0x280/0x280 [ 158.653677][ T3197] ? __kasan_check_write+0x14/0x20 [ 158.658817][ T3197] ? rwsem_read_trylock+0x2af/0x640 [ 158.664088][ T3197] ? __kasan_check_write+0x14/0x20 [ 158.669342][ T3197] ? downgrade_write+0x440/0x440 [ 158.674425][ T3197] __lookup_slow+0x2b8/0x410 [ 158.679052][ T3197] ? lookup_one_len+0x2d0/0x2d0 [ 158.684031][ T3197] ? down_read+0xab/0x100 [ 158.688393][ T3197] ? handle_dots+0xe10/0xe10 [ 158.693118][ T3197] lookup_slow+0x57/0x70 [ 158.697767][ T3197] walk_component+0x326/0x460 [ 158.702696][ T3197] path_lookupat+0x155/0x430 [ 158.707351][ T3197] filename_lookup+0x21e/0x550 [ 158.712250][ T3197] ? hashlen_string+0x120/0x120 [ 158.717347][ T3197] ? getname_kernel+0x145/0x2e0 [ 158.722245][ T3197] ? memcpy+0x56/0x70 [ 158.726278][ T3197] ? getname_kernel+0x201/0x2e0 [ 158.731338][ T3197] kern_path+0x3c/0x1b0 [ 158.735548][ T3197] unix_find_other+0xe9/0x830 [ 158.740270][ T3197] ? __unix_set_addr+0x3c0/0x3c0 [ 158.745382][ T3197] unix_dgram_sendmsg+0xba3/0x19b0 [ 158.750536][ T3197] ? unix_dgram_poll+0x6c0/0x6c0 [ 158.755519][ T3197] ? security_socket_sendmsg+0x82/0xa0 [ 158.761275][ T3197] ? unix_dgram_poll+0x6c0/0x6c0 [ 158.766287][ T3197] ____sys_sendmsg+0x5be/0x8f0 [ 158.771089][ T3197] ? __sys_sendmsg_sock+0x40/0x40 [ 158.776144][ T3197] ? import_iovec+0x7c/0xb0 [ 158.780681][ T3197] ___sys_sendmsg+0x236/0x2e0 [ 158.785425][ T3197] ? __sys_sendmsg+0x280/0x280 [ 158.790301][ T3197] ? slab_post_alloc_hook+0x6d/0x2b0 [ 158.795639][ T3197] __sys_sendmmsg+0x2ba/0x4e0 [ 158.800581][ T3197] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 158.805837][ T3197] ? fd_install+0x169/0x2a0 [ 158.810388][ T3197] ? __kasan_check_write+0x14/0x20 [ 158.815701][ T3197] ? switch_fpu_return+0x15d/0x2c0 [ 158.821193][ T3197] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.826192][ T3197] x64_sys_call+0x6c6/0x9a0 [ 158.830744][ T3197] do_syscall_64+0x4c/0xa0 [ 158.835213][ T3197] ? clear_bhb_loop+0x50/0xa0 [ 158.841312][ T3197] ? clear_bhb_loop+0x50/0xa0 [ 158.846084][ T3197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.852352][ T3197] RIP: 0033:0x7f545b474e99 [ 158.856798][ T3197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.876779][ T3197] RSP: 002b:00007f5459ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.886266][ T3197] RAX: ffffffffffffffda RBX: 00007f545b6fcfa0 RCX: 00007f545b474e99 [ 158.894543][ T3197] RDX: 0000000000000002 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 158.902717][ T3197] RBP: 00007f545b50aeaf R08: 0000000000000000 R09: 0000000000000000 [ 158.911067][ T3197] R10: 000000000604e054 R11: 0000000000000246 R12: 0000000000000000 [ 158.919364][ T3197] R13: 00007f545b6fd038 R14: 00007f545b6fcfa0 R15: 00007ffdedbd2978 [ 158.927739][ T3197] [ 158.931252][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 158.940358][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.950675][ T285] Call Trace: [ 158.954192][ T285] [ 158.957237][ T285] __dump_stack+0x21/0x30 [ 158.962129][ T285] dump_stack_lvl+0x110/0x170 [ 158.967111][ T285] ? show_regs_print_info+0x20/0x20 [ 158.972395][ T285] ? prandom_u32+0x24d/0x290 [ 158.977300][ T285] dump_stack+0x15/0x20 [ 158.981753][ T285] should_fail+0x3ab/0x500 [ 158.986318][ T285] __should_failslab+0xa4/0xe0 [ 158.991120][ T285] should_failslab+0x9/0x20 [ 158.995657][ T285] slab_pre_alloc_hook+0x39/0xd0 [ 159.000773][ T285] ? alloc_vmap_area+0x186/0x1a70 [ 159.006212][ T285] kmem_cache_alloc+0x44/0x260 [ 159.011019][ T285] alloc_vmap_area+0x186/0x1a70 [ 159.016174][ T285] ? vm_map_ram+0xa70/0xa70 [ 159.021667][ T285] ? kmem_cache_alloc_trace+0x119/0x270 [ 159.027438][ T285] ? __get_vm_area_node+0x11d/0x350 [ 159.032891][ T285] __get_vm_area_node+0x14e/0x350 [ 159.037952][ T285] __vmalloc_node_range+0xe8/0xad0 [ 159.043197][ T285] ? alloc_counters+0x65/0x540 [ 159.048102][ T285] ? selinux_capable+0x2b6/0x3b0 [ 159.048959][ T359] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 159.053088][ T285] ? selinux_capset+0xf0/0xf0 [ 159.069762][ T285] ? alloc_counters+0x65/0x540 [ 159.074661][ T285] vzalloc+0x78/0x90 [ 159.078610][ T285] ? alloc_counters+0x65/0x540 [ 159.083750][ T285] alloc_counters+0x65/0x540 [ 159.088386][ T285] ? xt_find_table_lock+0x3b6/0x400 [ 159.094373][ T285] do_ip6t_get_ctl+0xa2d/0x1120 [ 159.099705][ T285] ? do_ip6t_set_ctl+0xd80/0xd80 [ 159.104718][ T285] ? 0xffffffffa002c000 [ 159.108914][ T285] ? unwind_get_return_address+0x4d/0x90 [ 159.114584][ T285] ? __kasan_check_write+0x14/0x20 [ 159.119856][ T285] ? mutex_unlock+0x8f/0x230 [ 159.124498][ T285] ? __mutex_lock_slowpath+0x10/0x10 [ 159.129953][ T285] nf_getsockopt+0x26d/0x290 [ 159.134791][ T285] ipv6_getsockopt+0x1af3/0x21d0 [ 159.140101][ T285] ? is_bpf_text_address+0x177/0x190 [ 159.145574][ T285] ? ipv6_setsockopt+0x3750/0x3750 [ 159.150916][ T285] ? unwind_get_return_address+0x4d/0x90 [ 159.156966][ T285] ? stack_trace_save+0xf0/0xf0 [ 159.161970][ T285] ? arch_stack_walk+0xee/0x140 [ 159.166881][ T285] ? stack_trace_save+0xa6/0xf0 [ 159.171993][ T285] ? __stack_depot_save+0x34/0x480 [ 159.177137][ T285] ? __kasan_slab_alloc+0xc9/0xe0 [ 159.182278][ T285] ? __kasan_slab_alloc+0xb7/0xe0 [ 159.187334][ T285] ? slab_post_alloc_hook+0x4f/0x2b0 [ 159.192649][ T285] ? kmem_cache_alloc+0xf7/0x260 [ 159.197662][ T285] ? security_file_alloc+0x33/0x120 [ 159.202995][ T285] ? __alloc_file+0xb5/0x2a0 [ 159.207806][ T285] ? alloc_empty_file+0x97/0x180 [ 159.212946][ T285] ? alloc_file+0x59/0x580 [ 159.217389][ T285] ? alloc_file_pseudo+0x180/0x200 [ 159.222714][ T285] ? sock_alloc_file+0xba/0x260 [ 159.227688][ T285] ? __sys_socket+0x12b/0x190 [ 159.232385][ T285] ? __x64_sys_socket+0x7a/0x90 [ 159.237255][ T285] ? x64_sys_call+0x8c5/0x9a0 [ 159.241977][ T285] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.248653][ T285] tcp_getsockopt+0x1fc/0x23a0 [ 159.253479][ T285] ? memcpy+0x56/0x70 [ 159.257673][ T285] ? avc_has_perm_noaudit+0x30a/0x490 [ 159.263081][ T285] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 159.268928][ T285] ? avc_denied+0x1b0/0x1b0 [ 159.273515][ T285] ? avc_has_perm+0x163/0x250 [ 159.278335][ T285] ? avc_has_perm_noaudit+0x490/0x490 [ 159.283771][ T285] ? selinux_socket_getsockopt+0x22f/0x340 [ 159.289617][ T285] ? memcpy+0x56/0x70 [ 159.293625][ T285] ? selinux_socket_getpeername+0x340/0x340 [ 159.299559][ T285] ? alloc_empty_file_noaccount+0x80/0x80 [ 159.305307][ T285] sock_common_getsockopt+0x98/0xb0 [ 159.310540][ T285] ? sock_recv_errqueue+0x5c0/0x5c0 [ 159.315761][ T285] __sys_getsockopt+0x207/0x400 [ 159.320645][ T285] __x64_sys_getsockopt+0xbf/0xd0 [ 159.325699][ T285] x64_sys_call+0x6db/0x9a0 [ 159.330219][ T285] do_syscall_64+0x4c/0xa0 [ 159.334657][ T285] ? clear_bhb_loop+0x50/0xa0 [ 159.339370][ T285] ? clear_bhb_loop+0x50/0xa0 [ 159.344067][ T285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.350004][ T285] RIP: 0033:0x7f8b6745866a [ 159.354755][ T285] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 159.374468][ T285] RSP: 002b:00007ffce45ffa58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 159.383012][ T285] RAX: ffffffffffffffda RBX: 00007ffce45ffae0 RCX: 00007f8b6745866a [ 159.391089][ T285] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 159.399175][ T285] RBP: 0000000000000003 R08: 00007ffce45ffa7c R09: 0000000000000000 [ 159.407287][ T285] R10: 00007ffce45ffae0 R11: 0000000000000212 R12: 00007f8b676a4e00 [ 159.415320][ T285] R13: 00007ffce45ffa7c R14: 0000000000000000 R15: 00007f8b676a6fc0 [ 159.423333][ T285] [ 159.426390][ T333] CPU: 1 PID: 333 Comm: udevd Tainted: G W syzkaller #0 [ 159.434679][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.444876][ T333] Call Trace: [ 159.448191][ T333] [ 159.451153][ T333] __dump_stack+0x21/0x30 [ 159.455518][ T333] dump_stack_lvl+0x110/0x170 [ 159.460232][ T333] ? show_regs_print_info+0x20/0x20 [ 159.465466][ T333] dump_stack+0x15/0x20 [ 159.469650][ T333] should_fail+0x3ab/0x500 [ 159.474199][ T333] __should_failslab+0xa4/0xe0 [ 159.479000][ T333] should_failslab+0x9/0x20 [ 159.483584][ T333] slab_pre_alloc_hook+0x39/0xd0 [ 159.488842][ T333] ? getname_flags+0xba/0x510 [ 159.493659][ T333] kmem_cache_alloc+0x44/0x260 [ 159.498461][ T333] getname_flags+0xba/0x510 [ 159.503106][ T333] getname+0x19/0x20 [ 159.507054][ T333] do_sys_openat2+0xeb/0x7f0 [ 159.512022][ T333] ? __kasan_check_read+0x11/0x20 [ 159.517099][ T333] ? __fdget+0x15b/0x230 [ 159.521399][ T333] ? __x64_sys_recvmsg+0x216/0x2d0 [ 159.526543][ T333] ? do_sys_open+0xe0/0xe0 [ 159.530987][ T333] ? ___sys_recvmsg+0x5c0/0x5c0 [ 159.535865][ T333] ? __x64_sys_epoll_wait+0x1d4/0x220 [ 159.541260][ T333] __x64_sys_openat+0x136/0x160 [ 159.546260][ T333] x64_sys_call+0x219/0x9a0 [ 159.550970][ T333] do_syscall_64+0x4c/0xa0 [ 159.555406][ T333] ? clear_bhb_loop+0x50/0xa0 [ 159.560117][ T333] ? clear_bhb_loop+0x50/0xa0 [ 159.564904][ T333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.570930][ T333] RIP: 0033:0x7f17ffdf8407 [ 159.575371][ T333] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 159.595117][ T333] RSP: 002b:00007ffed9b2fd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 159.603574][ T333] RAX: ffffffffffffffda RBX: 00007f17ffd0a880 RCX: 00007f17ffdf8407 [ 159.611581][ T333] RDX: 0000000000080000 RSI: 00007ffed9b2ff10 RDI: ffffffffffffff9c [ 159.619673][ T333] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 159.627834][ T333] R10: 0000000000000000 R11: 0000000000000202 R12: 000056085d45d7f5 [ 159.635827][ T333] R13: 000056085d45d7f5 R14: 0000000000000001 R15: 000056085d478140 [ 159.644218][ T333] [ 159.648472][ T101] CPU: 0 PID: 101 Comm: udevd Tainted: G W syzkaller #0 [ 159.656944][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.667049][ T101] Call Trace: [ 159.670375][ T101] [ 159.673415][ T101] __dump_stack+0x21/0x30 [ 159.677777][ T101] dump_stack_lvl+0x110/0x170 [ 159.682575][ T101] ? show_regs_print_info+0x20/0x20 [ 159.687815][ T101] dump_stack+0x15/0x20 [ 159.691992][ T101] should_fail+0x3ab/0x500 [ 159.696436][ T101] __should_failslab+0xa4/0xe0 [ 159.701219][ T101] should_failslab+0x9/0x20 [ 159.705771][ T101] slab_pre_alloc_hook+0x39/0xd0 [ 159.710763][ T101] ? __alloc_skb+0xe4/0x730 [ 159.715398][ T101] kmem_cache_alloc+0x44/0x260 [ 159.720378][ T101] __alloc_skb+0xe4/0x730 [ 159.724855][ T101] netlink_sendmsg+0x611/0xb80 [ 159.729745][ T101] ? netlink_getsockopt+0x530/0x530 [ 159.735002][ T101] ? security_socket_sendmsg+0x82/0xa0 [ 159.740485][ T101] ? netlink_getsockopt+0x530/0x530 [ 159.745796][ T101] ____sys_sendmsg+0x5be/0x8f0 [ 159.750674][ T101] ? __sys_sendmsg_sock+0x40/0x40 [ 159.755735][ T101] ? import_iovec+0x7c/0xb0 [ 159.760262][ T101] ___sys_sendmsg+0x236/0x2e0 [ 159.765141][ T101] ? __sys_sendmsg+0x280/0x280 [ 159.769932][ T101] ? __kasan_check_read+0x11/0x20 [ 159.775087][ T101] ? __fdget+0x15b/0x230 [ 159.779508][ T101] __x64_sys_sendmsg+0x201/0x2d0 [ 159.784577][ T101] ? ___sys_sendmsg+0x2e0/0x2e0 [ 159.789557][ T101] ? __x64_sys_epoll_wait+0x1d4/0x220 [ 159.795256][ T101] ? __kasan_check_write+0x14/0x20 [ 159.801211][ T101] ? switch_fpu_return+0x15d/0x2c0 [ 159.806700][ T101] x64_sys_call+0x4b/0x9a0 [ 159.811250][ T101] do_syscall_64+0x4c/0xa0 [ 159.816441][ T101] ? clear_bhb_loop+0x50/0xa0 [ 159.821273][ T101] ? clear_bhb_loop+0x50/0xa0 [ 159.826168][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.832189][ T101] RIP: 0033:0x7f17ffdf8407 [ 159.836761][ T101] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 159.856985][ T101] RSP: 002b:00007ffed9b38940 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 159.865768][ T101] RAX: ffffffffffffffda RBX: 00007f17ffd0a880 RCX: 00007f17ffdf8407 [ 159.873789][ T101] RDX: 0000000000000000 RSI: 00007ffed9b389a0 RDI: 0000000000000004 [ 159.882070][ T101] RBP: 0000560877c30420 R08: 0000000000000000 R09: 0000000000000000 [ 159.890887][ T101] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000a6 [ 159.899449][ T101] R13: 00005608779bbd80 R14: 0000000000000000 R15: 0000000000000000 [ 159.907790][ T101] [ 159.910844][ T3143] CPU: 1 PID: 3143 Comm: syz.2.1009 Tainted: G W syzkaller #0 [ 159.919219][ T101] udevd[101]: worker [340] did not accept message -105 (No buffer space available), kill it [ 159.920043][ T3143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.940750][ T3143] Call Trace: [ 159.944099][ T3143] [ 159.947065][ T3143] __dump_stack+0x21/0x30 [ 159.951578][ T3143] dump_stack_lvl+0x110/0x170 [ 159.956291][ T3143] ? show_regs_print_info+0x20/0x20 [ 159.961534][ T3143] ? prandom_u32+0x24d/0x290 [ 159.966261][ T3143] dump_stack+0x15/0x20 [ 159.970504][ T3143] should_fail+0x3ab/0x500 [ 159.975198][ T3143] ? dev_uevent_filter+0xb0/0xb0 [ 159.980279][ T3143] __should_failslab+0xa4/0xe0 [ 159.985113][ T3143] should_failslab+0x9/0x20 [ 159.987729][ T285] syz-executor: vmalloc error: size 64, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1 [ 159.989802][ T3143] slab_pre_alloc_hook+0x39/0xd0 [ 159.989820][ T285] ,mems_allowed=0 [ 159.989835][ T3143] ? dev_uevent_filter+0xb0/0xb0 [ 160.017266][ T3143] kmem_cache_alloc_trace+0x48/0x270 [ 160.022612][ T3143] ? kobject_uevent_env+0x271/0x700 [ 160.027862][ T3143] ? dev_uevent_filter+0xb0/0xb0 [ 160.032845][ T3143] kobject_uevent_env+0x271/0x700 [ 160.038117][ T3143] kobject_uevent+0x1d/0x30 [ 160.042712][ T3143] usb_gadget_remove_driver+0x274/0x310 [ 160.045044][ T285] [ 160.048395][ T3143] usb_gadget_unregister_driver+0x181/0x480 [ 160.056665][ T3143] ? task_work_add+0x1b2/0x1e0 [ 160.061462][ T3143] raw_release+0xda/0x260 [ 160.065970][ T3143] ? raw_open+0x3d0/0x3d0 [ 160.070354][ T3143] __fput+0x22b/0x900 [ 160.074390][ T3143] ____fput+0x15/0x20 [ 160.078430][ T3143] task_work_run+0x127/0x190 [ 160.083232][ T3143] exit_to_user_mode_loop+0xd0/0xe0 [ 160.088479][ T3143] exit_to_user_mode_prepare+0x87/0xd0 [ 160.094251][ T3143] syscall_exit_to_user_mode+0x1a/0x30 [ 160.096208][ T101] udevd[101]: worker [340] terminated by signal 9 (Killed) [ 160.100187][ T3143] do_syscall_64+0x58/0xa0 [ 160.113129][ T3143] ? clear_bhb_loop+0x50/0xa0 [ 160.118160][ T3143] ? clear_bhb_loop+0x50/0xa0 [ 160.122974][ T3143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.129094][ T3143] RIP: 0033:0x7fab37031e99 [ 160.133833][ T3143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.153939][ T3143] RSP: 002b:00007ffde6453fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 160.162597][ T3143] RAX: 0000000000000000 RBX: 00007fab372bbda0 RCX: 00007fab37031e99 [ 160.170826][ T3143] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 160.179119][ T3143] RBP: 00007fab372bbda0 R08: 0000000000000006 R09: 0000000000000000 [ 160.187233][ T3143] R10: 00000000003ffcec R11: 0000000000000246 R12: 0000000000027055 [ 160.195691][ T3143] R13: 00007fab372b9fac R14: 00000000000263f4 R15: 00007ffde64540f0 [ 160.203791][ T3143] [ 160.207575][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 160.216680][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.227484][ T285] Call Trace: [ 160.230791][ T285] [ 160.233740][ T285] __dump_stack+0x21/0x30 [ 160.238192][ T285] dump_stack_lvl+0x110/0x170 [ 160.243080][ T285] ? show_regs_print_info+0x20/0x20 [ 160.248384][ T285] dump_stack+0x15/0x20 [ 160.252585][ T285] warn_alloc+0x1dc/0x200 [ 160.257371][ T285] ? slab_free_freelist_hook+0xc2/0x190 [ 160.262996][ T285] ? zone_watermark_ok_safe+0x270/0x270 [ 160.268791][ T285] ? __get_vm_area_node+0x163/0x350 [ 160.274151][ T285] ? __get_vm_area_node+0x163/0x350 [ 160.279842][ T285] __vmalloc_node_range+0x15e/0xad0 [ 160.285097][ T285] ? selinux_capable+0x2b6/0x3b0 [ 160.290224][ T285] ? selinux_capset+0xf0/0xf0 [ 160.295053][ T285] ? alloc_counters+0x65/0x540 [ 160.300110][ T285] vzalloc+0x78/0x90 [ 160.304247][ T285] ? alloc_counters+0x65/0x540 [ 160.309327][ T285] alloc_counters+0x65/0x540 [ 160.314114][ T285] ? xt_find_table_lock+0x3b6/0x400 [ 160.319460][ T285] do_ip6t_get_ctl+0xa2d/0x1120 [ 160.324440][ T285] ? do_ip6t_set_ctl+0xd80/0xd80 [ 160.329408][ T285] ? 0xffffffffa002c000 [ 160.333585][ T285] ? unwind_get_return_address+0x4d/0x90 [ 160.339253][ T285] ? __kasan_check_write+0x14/0x20 [ 160.344476][ T285] ? mutex_unlock+0x8f/0x230 [ 160.349255][ T285] ? __mutex_lock_slowpath+0x10/0x10 [ 160.354557][ T285] nf_getsockopt+0x26d/0x290 [ 160.359173][ T285] ipv6_getsockopt+0x1af3/0x21d0 [ 160.364131][ T285] ? is_bpf_text_address+0x177/0x190 [ 160.369432][ T285] ? ipv6_setsockopt+0x3750/0x3750 [ 160.374728][ T285] ? unwind_get_return_address+0x4d/0x90 [ 160.380384][ T285] ? stack_trace_save+0xf0/0xf0 [ 160.385463][ T285] ? arch_stack_walk+0xee/0x140 [ 160.390359][ T285] ? stack_trace_save+0xa6/0xf0 [ 160.395245][ T285] ? __stack_depot_save+0x34/0x480 [ 160.400385][ T285] ? __kasan_slab_alloc+0xc9/0xe0 [ 160.405426][ T285] ? __kasan_slab_alloc+0xb7/0xe0 [ 160.410565][ T285] ? slab_post_alloc_hook+0x4f/0x2b0 [ 160.416104][ T285] ? kmem_cache_alloc+0xf7/0x260 [ 160.421101][ T285] ? security_file_alloc+0x33/0x120 [ 160.426321][ T285] ? __alloc_file+0xb5/0x2a0 [ 160.430935][ T285] ? alloc_empty_file+0x97/0x180 [ 160.435886][ T285] ? alloc_file+0x59/0x580 [ 160.440419][ T285] ? alloc_file_pseudo+0x180/0x200 [ 160.445549][ T285] ? sock_alloc_file+0xba/0x260 [ 160.450442][ T285] ? __sys_socket+0x12b/0x190 [ 160.455237][ T285] ? __x64_sys_socket+0x7a/0x90 [ 160.460222][ T285] ? x64_sys_call+0x8c5/0x9a0 [ 160.465024][ T285] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.471117][ T285] tcp_getsockopt+0x1fc/0x23a0 [ 160.475900][ T285] ? memcpy+0x56/0x70 [ 160.479897][ T285] ? avc_has_perm_noaudit+0x30a/0x490 [ 160.485291][ T285] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 160.490941][ T285] ? avc_denied+0x1b0/0x1b0 [ 160.495626][ T285] ? avc_has_perm+0x163/0x250 [ 160.500428][ T285] ? avc_has_perm_noaudit+0x490/0x490 [ 160.505820][ T285] ? selinux_socket_getsockopt+0x22f/0x340 [ 160.511645][ T285] ? memcpy+0x56/0x70 [ 160.515657][ T285] ? selinux_socket_getpeername+0x340/0x340 [ 160.521565][ T285] ? alloc_empty_file_noaccount+0x80/0x80 [ 160.527569][ T285] sock_common_getsockopt+0x98/0xb0 [ 160.532797][ T285] ? sock_recv_errqueue+0x5c0/0x5c0 [ 160.538372][ T285] __sys_getsockopt+0x207/0x400 [ 160.543271][ T285] __x64_sys_getsockopt+0xbf/0xd0 [ 160.548320][ T285] x64_sys_call+0x6db/0x9a0 [ 160.552869][ T285] do_syscall_64+0x4c/0xa0 [ 160.557318][ T285] ? clear_bhb_loop+0x50/0xa0 [ 160.562008][ T285] ? clear_bhb_loop+0x50/0xa0 [ 160.566717][ T285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.572623][ T285] RIP: 0033:0x7f8b6745866a [ 160.577054][ T285] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 160.596683][ T285] RSP: 002b:00007ffce45ffa58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 160.605212][ T285] RAX: ffffffffffffffda RBX: 00007ffce45ffae0 RCX: 00007f8b6745866a [ 160.613612][ T285] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 160.621629][ T285] RBP: 0000000000000003 R08: 00007ffce45ffa7c R09: 0000000000000000 [ 160.629627][ T285] R10: 00007ffce45ffae0 R11: 0000000000000212 R12: 00007f8b676a4e00 [ 160.637812][ T285] R13: 00007ffce45ffa7c R14: 0000000000000000 R15: 00007f8b676a6fc0 [ 160.645941][ T285] [ 160.649308][ T3200] CPU: 1 PID: 3200 Comm: syz.9.1029 Tainted: G W syzkaller #0 [ 160.658388][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.668568][ T3200] Call Trace: [ 160.671872][ T3200] [ 160.674863][ T3200] __dump_stack+0x21/0x30 [ 160.679239][ T3200] dump_stack_lvl+0x110/0x170 [ 160.684057][ T3200] ? show_regs_print_info+0x20/0x20 [ 160.689304][ T3200] ? prandom_u32+0x24d/0x290 [ 160.694122][ T3200] dump_stack+0x15/0x20 [ 160.698402][ T3200] should_fail+0x3ab/0x500 [ 160.702867][ T3200] __should_failslab+0xa4/0xe0 [ 160.707672][ T3200] should_failslab+0x9/0x20 [ 160.712198][ T3200] slab_pre_alloc_hook+0x39/0xd0 [ 160.717151][ T3200] ? vm_area_dup+0x26/0x210 [ 160.721671][ T3200] kmem_cache_alloc+0x44/0x260 [ 160.726451][ T3200] vm_area_dup+0x26/0x210 [ 160.730809][ T3200] __split_vma+0xac/0x3e0 [ 160.735175][ T3200] split_vma+0x7c/0xd0 [ 160.739307][ T3200] mprotect_fixup+0x496/0x7d0 [ 160.744118][ T3200] ? change_protection+0x1510/0x1510 [ 160.749722][ T3200] ? security_file_mprotect+0x84/0xa0 [ 160.755144][ T3200] do_mprotect_pkey+0x72c/0xad0 [ 160.760070][ T3200] ? prot_none_test+0x10/0x10 [ 160.764972][ T3200] ? debug_smp_processor_id+0x17/0x20 [ 160.770431][ T3200] __x64_sys_mprotect+0x80/0x90 [ 160.775334][ T3200] x64_sys_call+0x912/0x9a0 [ 160.779866][ T3200] do_syscall_64+0x4c/0xa0 [ 160.784307][ T3200] ? clear_bhb_loop+0x50/0xa0 [ 160.789090][ T3200] ? clear_bhb_loop+0x50/0xa0 [ 160.793880][ T3200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.799878][ T3200] RIP: 0033:0x7f671296ec97 [ 160.804320][ T3200] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.824038][ T3200] RSP: 002b:00007ffcaaf217b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 160.832479][ T3200] RAX: ffffffffffffffda RBX: 00007f67113a76c0 RCX: 00007f671296ec97 [ 160.840474][ T3200] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f6711388000 [ 160.848461][ T3200] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 160.856462][ T3200] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcaaf21910 [ 160.864545][ T3200] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 160.872642][ T3200] [ 160.877319][ T3197] overlayfs: failed to get redirect (-117) [ 160.889636][ T285] Mem-Info: [ 160.894978][ T285] active_anon:2911 inactive_anon:7834 isolated_anon:0 [ 160.894978][ T285] active_file:5164 inactive_file:3755 isolated_file:0 [ 160.894978][ T285] unevictable:0 dirty:331 writeback:0 [ 160.894978][ T285] slab_reclaimable:8786 slab_unreclaimable:75581 [ 160.894978][ T285] mapped:30032 shmem:3035 pagetables:626 bounce:0 [ 160.894978][ T285] kernel_misc_reclaimable:0 [ 160.894978][ T285] free:1540396 free_pcp:27221 free_cma:0 [ 160.940407][ T285] Node 0 active_anon:11644kB inactive_anon:31172kB active_file:20660kB inactive_file:15020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120096kB dirty:1328kB writeback:0kB shmem:12140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4292kB pagetables:2388kB all_unreclaimable? no [ 160.972949][ T285] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982756kB mlocked:0kB bounce:0kB free_pcp:3984kB local_pcp:3984kB free_cma:0kB [ 161.001426][ T285] lowmem_reserve[]: 0 3941 3941 [ 161.006598][ T285] Normal free:3182812kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:11644kB inactive_anon:31172kB active_file:20660kB inactive_file:15020kB unevictable:0kB writepending:1328kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:105452kB local_pcp:52800kB free_cma:0kB [ 161.006617][ T359] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -71 [ 161.025423][ T359] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -71 [ 161.038541][ T285] lowmem_reserve[]: 0 0 0 [ 161.062159][ T285] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 161.077966][ T285] Normal: 2007*4kB (UME) 655*8kB (UME) 316*16kB (UME) 103*32kB (UME) 80*64kB (UME) 143*128kB (UME) 49*256kB (UME) 32*512kB (UME) 20*1024kB (UE) 10*2048kB (UME) 749*4096kB (UM) = 3182836kB [ 161.085443][ T359] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -71 [ 161.097797][ T285] 11954 total pagecache pages [ 161.111434][ T285] 2 pages in swap cache [ 161.115939][ T285] Swap cache stats: add 2, delete 0, find 1/1 [ 161.122049][ T285] Free swap = 124984kB [ 161.126794][ T285] Total swap = 124996kB [ 161.131307][ T285] 2097051 pages RAM [ 161.135521][ T285] 0 pages HighMem/MovableOnly [ 161.140411][ T285] 342338 pages reserved [ 161.144609][ T285] 0 pages cma reserved [ 161.180080][ T30] audit: type=1400 audit(1785155809.243:394): avc: denied { mounton } for pid=3204 comm="syz.9.1032" path="/12/my_configfs/usb_gadget/g1/UDC" dev="configfs" ino=27638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.206619][ T3206] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 161.215392][ T3206] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 161.227541][ T3206] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 161.236079][ T3206] CPU: 0 PID: 3206 Comm: syz.9.1032 Tainted: G W syzkaller #0 [ 161.245335][ T3206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.255611][ T3206] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 161.261672][ T3206] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1e 81 7f fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 05 81 7f fe 41 be 58 11 00 00 4d [ 161.283129][ T3206] RSP: 0018:ffffc900012879e0 EFLAGS: 00010246 [ 161.289369][ T3206] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888136a7e2c0 [ 161.297781][ T3206] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 161.298799][ T30] audit: type=1400 audit(1785155809.273:395): avc: denied { create } for pid=3204 comm="syz.9.1032" name="obex.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 161.305929][ T3206] RBP: ffffc90001287a00 R08: ffff888100059e6f R09: 1ffff1102000b3cd [ 161.305959][ T3206] R10: dffffc0000000000 R11: ffffed102000b3ce R12: dffffc0000000000 [ 161.305975][ T3206] R13: ffff88811a700478 R14: ffff88810b73d160 R15: 0000000000000000 [ 161.305999][ T3206] FS: 00007f67113c86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 161.306019][ T3206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.306036][ T3206] CR2: 0000200000001001 CR3: 0000000126e36000 CR4: 00000000003506b0 [ 161.332210][ T30] audit: type=1400 audit(1785155809.273:396): avc: denied { remove_name } for pid=3204 comm="syz.9.1032" name="c.1" dev="configfs" ino=27635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.335934][ T3206] Call Trace: [ 161.335945][ T3206] [ 161.335954][ T3206] ? dummy_wakeup+0x270/0x270 [ 161.335988][ T3206] usb_gadget_set_selfpowered+0x6c/0x180 [ 161.345943][ T30] audit: type=1400 audit(1785155809.273:397): avc: denied { rmdir } for pid=3204 comm="syz.9.1032" name="c.1" dev="configfs" ino=27635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.352360][ T3206] composite_dev_prepare+0x2e7/0x310 [ 161.444732][ T3206] configfs_composite_bind+0xb4/0x13a0 [ 161.450254][ T3206] ? __kasan_check_write+0x14/0x20 [ 161.455395][ T3206] ? mutex_lock+0x9b/0x1c0 [ 161.460092][ T3206] ? os_desc_qw_sign_store+0x140/0x140 [ 161.465575][ T3206] udc_bind_to_driver+0x1fb/0x770 [ 161.470710][ T3206] ? wait_for_completion_killable_timeout+0x10/0x10 [ 161.477328][ T3206] usb_gadget_probe_driver+0x1fc/0x380 [ 161.482983][ T3206] gadget_dev_desc_UDC_store+0x217/0x330 [ 161.488838][ T3206] configfs_write_iter+0x312/0x400 [ 161.494268][ T3206] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 161.499841][ T3206] vfs_write+0x831/0xfd0 [ 161.504468][ T3206] ? file_end_write+0x1b0/0x1b0 [ 161.509516][ T3206] ? wait_for_completion_killable_timeout+0x10/0x10 [ 161.516312][ T3206] ? __fget_files+0x2e1/0x340 [ 161.521038][ T3206] ? __fdget_pos+0x2d2/0x380 [ 161.525681][ T3206] ? ksys_write+0x70/0x260 [ 161.530130][ T3206] ksys_write+0x14a/0x260 [ 161.534710][ T3206] ? __ia32_sys_read+0x90/0x90 [ 161.539626][ T3206] ? __kasan_check_write+0x14/0x20 [ 161.544787][ T3206] ? switch_fpu_return+0x15d/0x2c0 [ 161.550152][ T3206] __x64_sys_write+0x7b/0x90 [ 161.554947][ T3206] x64_sys_call+0x8ef/0x9a0 [ 161.559629][ T3206] do_syscall_64+0x4c/0xa0 [ 161.564204][ T3206] ? clear_bhb_loop+0x50/0xa0 [ 161.569015][ T3206] ? clear_bhb_loop+0x50/0xa0 [ 161.573806][ T3206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.579905][ T3206] RIP: 0033:0x7f671296ee99 [ 161.584374][ T3206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.604541][ T3206] RSP: 002b:00007f67113c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.613062][ T3206] RAX: ffffffffffffffda RBX: 00007f6712bf6fa0 RCX: 00007f671296ee99 [ 161.621306][ T3206] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 161.629322][ T3206] RBP: 00007f6712a04eaf R08: 0000000000000000 R09: 0000000000000000 [ 161.637502][ T3206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.645579][ T3206] R13: 00007f6712bf7038 R14: 00007f6712bf6fa0 R15: 00007ffcaaf21818 [ 161.653573][ T3206] [ 161.656602][ T3206] Modules linked in: [ 161.660963][ T3206] ---[ end trace 51a523516dc9b33e ]--- [ 161.668283][ T3206] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 161.674454][ T3206] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1e 81 7f fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 05 81 7f fe 41 be 58 11 00 00 4d [ 161.700318][ T3206] RSP: 0018:ffffc900012879e0 EFLAGS: 00010246 [ 161.710020][ T3206] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888136a7e2c0 [ 161.720266][ T3206] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 161.817483][ T3212] block device autoloading is deprecated and will be removed. [ 161.852008][ T3206] RBP: ffffc90001287a00 R08: ffff888100059e6f R09: 1ffff1102000b3cd [ 161.860529][ T3206] R10: dffffc0000000000 R11: ffffed102000b3ce R12: dffffc0000000000 [ 161.869603][ T3206] R13: ffff88811a700478 R14: ffff88810b73d160 R15: 0000000000000000 [ 161.878243][ T3206] FS: 00007f67113c86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 161.917898][ T3206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.926370][ T3206] CR2: 00007f545b4c2580 CR3: 0000000126e36000 CR4: 00000000003506b0 [ 161.935890][ T3206] Kernel panic - not syncing: Fatal exception [ 161.942319][ T3206] Kernel Offset: disabled [ 161.946684][ T3206] Rebooting in 86400 seconds..