last executing test programs: 1m57.551121569s ago: executing program 32 (id=167): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000840)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000c40), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000c80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m53.65265856s ago: executing program 33 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x40000105, 0x4}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m49.17866611s ago: executing program 34 (id=402): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/151, 0x97}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 1m47.03112223s ago: executing program 35 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0x1000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x8001}, 0x1c) listen(r1, 0x8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 1m40.571170854s ago: executing program 36 (id=551): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c80)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000fc0)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) 1m18.190793445s ago: executing program 37 (id=773): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1a6) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000640)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40086610, 0x0) 1m14.838291829s ago: executing program 38 (id=813): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m8.285315083s ago: executing program 39 (id=919): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000940), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000009c0)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/13, 0xd}, 0xfffffff1}], 0x1, 0x45833af96e4a39fb, 0x0) 58.367508472s ago: executing program 40 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280600c0}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0xb6, 0x1) 55.917040744s ago: executing program 41 (id=1054): ptrace(0x10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) 54.628979156s ago: executing program 42 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040)=@x86={0xff, 0x0, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x7, '\x00', 0xfd, 0x8001}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x4, 0x0, [{0x4, 0x85, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x7, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x0, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0x1}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x3d, '\x00', 0x5}, {0x80, 0x34, 0x8, '\x00', 0x9}, {0x99, 0x0, 0x2, '\x00', 0x1}, {0xbe, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x9, 0x8, 0x0, '\x00', 0x2}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0xa5}, {0xb0, 0x7, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x5, '\x00', 0x7f}, {0x1, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) 50.843190775s ago: executing program 43 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001100)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 44.205016978s ago: executing program 44 (id=1316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000b80), &(0x7f0000000bc0)='%+9llu \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xd, &(0x7f0000000cc0)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d80)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4000) 38.892957943s ago: executing program 45 (id=1372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) getsockname$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x28a) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0x36000000}]}}}]}, 0x40}}, 0x24008044) 36.072572213s ago: executing program 5 (id=1420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="0f20d835080000000f22d866b8a4008ee0dbe19f0faeab5fa4ef0000160000162781ef66bafc0cec0f08c7442400fbffffffc74424028000c0fec7442406000000002e0f01ca0f009e005000009a000000001e008b465cb99e020000b8d2f90000ba000000000f30", 0x68}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.017582049s ago: executing program 5 (id=1421): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x19, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000001180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000011c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000001200)={0x4, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) 36.00896313s ago: executing program 5 (id=1422): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0xe9, 0xfffff010}, {0x6, 0xb8, 0x2, 0xefff}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000280)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 36.00149247s ago: executing program 5 (id=1423): r0 = syz_mount_image$f2fs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000001b00)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee01) syz_mount_image$msdos(&(0x7f0000007000), &(0x7f0000007040)='.\x00', 0x61, &(0x7f0000007080)=ANY=[], 0x1, 0x0, &(0x7f00000070c0)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 35.834781847s ago: executing program 5 (id=1425): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x200000, 0x200000, 0x7}) r0 = fsopen(&(0x7f0000000180)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0xffffff70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003a40)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 35.612947321s ago: executing program 5 (id=1426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1287, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x1251, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x0, "50e0004f669c4109861c3894e50b9e461c54e36472fdfbf79378ef685ef5f11f2f1e01263f7d01628dd3eb54f1261ca39657bcb6de9eaec7e9b6394bbedc01d8f88ecbfb535cd4ffc5d0944b38ef5d8b8d3ce1b50ac01aa899172821"}]}}}}}}, 0x0) 35.593805812s ago: executing program 46 (id=1426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1287, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x1251, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x0, "50e0004f669c4109861c3894e50b9e461c54e36472fdfbf79378ef685ef5f11f2f1e01263f7d01628dd3eb54f1261ca39657bcb6de9eaec7e9b6394bbedc01d8f88ecbfb535cd4ffc5d0944b38ef5d8b8d3ce1b50ac01aa899172821"}]}}}}}}, 0x0) 28.313085321s ago: executing program 2 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 28.211777251s ago: executing program 2 (id=1466): unshare(0x2040400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in=@empty, 0x7, 0x4, 0x1, 0x0, 0xe}]}]}, 0xfc}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 28.155430027s ago: executing program 2 (id=1467): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 28.155190407s ago: executing program 2 (id=1468): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x2004800, &(0x7f00000003c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='3', 0x4e) fallocate(r0, 0x0, 0x2, 0x8ffff) 27.101195805s ago: executing program 2 (id=1474): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4800) 27.000208856s ago: executing program 2 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000700)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000780)=@x86={0x6b, 0x4, 0xa, 0x0, 0x0, 0x4, 0x4, 0xa, 0x9, 0xa0, 0xa, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x9, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.95939104s ago: executing program 47 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000700)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000780)=@x86={0x6b, 0x4, 0xa, 0x0, 0x0, 0x4, 0x4, 0xa, 0x9, 0xa0, 0xa, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x9, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.667122845s ago: executing program 3 (id=1536): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 24.659598376s ago: executing program 3 (id=1537): setpriority(0x0, 0x0, 0x2a14b58) r0 = syz_create_resource$futex(&(0x7f0000000140)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000180)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, r1, 0x1) futex(r1, 0x7, 0x2000000, 0x0, 0x0, 0x0) 22.814487996s ago: executing program 3 (id=1546): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000001700)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000001740)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f0000001780)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg$unix(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20}, 0x40) 22.76724858s ago: executing program 3 (id=1548): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140), 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000080)='./file1\x00') setxattr$security_evm(&(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x2) 22.57990643s ago: executing program 3 (id=1562): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x64) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x3ff, 0x12) 21.879747482s ago: executing program 3 (id=1580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000440)={0x40000006}) r3 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0x10000014}) 21.821787867s ago: executing program 48 (id=1580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000440)={0x40000006}) r3 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0x10000014}) 17.662813415s ago: executing program 9 (id=1634): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 17.641452247s ago: executing program 9 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0x26000, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0xc0000025}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2], 0x0, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.626984882s ago: executing program 9 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000011c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001200)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) 16.596758615s ago: executing program 9 (id=1651): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mount$bind(&(0x7f0000000840)='.\x00', &(0x7f0000000880)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000008c0)='./file0/../file0\x00') 16.565276978s ago: executing program 9 (id=1652): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) 16.494595905s ago: executing program 9 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)=@delqdisc={0x30, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) 12.470712789s ago: executing program 6 (id=1709): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 12.273054909s ago: executing program 0 (id=1711): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000009800)='./file0/file2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) 12.220581454s ago: executing program 0 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, r0, 0x0) close(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 11.625437535s ago: executing program 0 (id=1719): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000480)) 11.574670191s ago: executing program 0 (id=1720): syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10e, &(0x7f0000000080), 0x3, 0x470, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002f80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), 0x200c08a, &(0x7f0000003040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000003080), &(0x7f00000030c0)='./file0\x00', 0x14a0, &(0x7f0000003100)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000003180)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000031c0)=""/4132, 0x1024) 11.057786764s ago: executing program 0 (id=1723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000480)="d8df7e23b3b9c6000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53730000c4b9e16dc301f2652e0f0d3c0802", 0x67}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x6, 0x3, 0x400000000011, 0x100, 0x7fd, 0x7, 0x1, 0xc, 0x4, 0x1, 0x100000000, 0xffffffdffffffffb, 0xbab2, 0x9, 0x3, 0x9], 0x3000, 0x102200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.891797711s ago: executing program 0 (id=1727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x841, 0x0, 0x8}]}) 10.826685217s ago: executing program 49 (id=1727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x841, 0x0, 0x8}]}) 10.643337786s ago: executing program 8 (id=1731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x9533, &(0x7f0000000840)=[{&(0x7f0000000880)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10.435457758s ago: executing program 8 (id=1732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0x26000, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0xc0000025}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2], 0x0, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.233872041s ago: executing program 8 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r2, 0x25513}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 9.233591511s ago: executing program 6 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x2) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 9.232728101s ago: executing program 7 (id=1736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 9.159462849s ago: executing program 6 (id=1737): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000900)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000009c0)=ANY=[@ANYBLOB="0380c2000400bbbbbbbbbbbb080045000030000006"], 0x0) 9.159118819s ago: executing program 7 (id=1738): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x148) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000140)="6d920d7c7825", 0x6) 9.158949289s ago: executing program 6 (id=1739): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x74, 0x8}, 0x18) 9.158452969s ago: executing program 7 (id=1740): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x141a42, 0x15) pwrite64(r0, &(0x7f0000000680)='\b', 0x1, 0x29000) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xc4042, 0x1ff) r2 = open(&(0x7f0000000700)='./file1\x00', 0x1c1882, 0x12) sendfile(r1, r2, 0x0, 0x800000009) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz72NwkAUBOCx5fP5dH8u4S4mowPTg7ugCLsTEggohC6oBWSMkGgACL4v2J3VPo30wtO9zddXckpSTvk7SX33m3xmPYePy/leJ8Pf/6bvyqRpbm3b1SLV8qdNfqfnmK5I0Q5JDuNUtyuO18kq/f5BKwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASzsHAAD//+ptCl0=") 9.15491947s ago: executing program 8 (id=1741): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x180c850, &(0x7f0000000140)={[{@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffffd}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@numtail}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@rodir}, {@utf8no}, {@rodir}, {@shortname_lower}]}, 0x1, 0x37c, &(0x7f00000006c0)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNlSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0akbQGP5/D8O33vTfvvdnX7GSSfXl+OdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egpfk89u2xS2eMhAQB7rPv+/+KhUuaNL3aqn7z7A8C+V3z/P79Tnbnx1I+PdY4X9m5cAMDeGXv+f/9I8czoj/qnSr8VAADsV0898+zjJ6sRT+b5XMT6m61aqxaPDstPno+XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8WoxYR77dqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf60unIs74qIy+1u/7FeadWm42DR/3cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HNC3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAD4B5bygcXB/jdpuH/P0tKE8u7+OL32xf5AW739gdJsipR+e/2h2ltZjOwPdOv+PK3aVBy4u1MHAAAAAAAAAAAAAAAAAACAf43m5kzUG43VjebmxbVy0N5obh6IiE7mla8+/nw+xuvcJpgq+igV5UXq4lo9Zf3KKRupUwRZp/N+5qMrgxGX68wOZjFxGLPbFzUah+774d1h5t6sf+Y/h3WymDzB7JZhlIP1w70hDTLTwylve8VOFMHx21zVqyml7c5z6bnxVlGJmPr7L9zOQeoEX1576f8nmkce7mY+Sz0PPLhw9uo7H/yyVm90eu5ofDiz0byZ1urFvycvtu2DrLR+KsU1rJRXwtR4q4hXixdua7Sonn3769P3vP317npP5cxrE+pkvel8stHcrBT/U7pFM72gk7ul1XzjTDa2EqYnLP6dgrnb1pm42I68t1y/cun7n3fbV+mLhI06AAAAAAAAAAAAAAAAAADgjih9VrxQfNh3eqdWjzxRBHN7OzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDOGf/+/FGyNZXYT/NGObrAYpaLZ1Y1mxOG7PU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7j/goAAP//4Vdmww==") socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='cpuset.effective_mems\x00', 0x275a, 0x0) 9.114779693s ago: executing program 6 (id=1742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc40af41aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d64083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e6847e16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f1493c9f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.454419871s ago: executing program 8 (id=1743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000300), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x19) 8.454156761s ago: executing program 7 (id=1744): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000700)='./bus\x00', &(0x7f0000000740), 0x8, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000007c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0) close(0x3) 8.421214105s ago: executing program 7 (id=1745): mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000008dc0)={0x0, 0x0, 0x0}, &(0x7f0000008e00)=0xc) syz_mount_image$exfat(&(0x7f0000008e40), &(0x7f0000008e80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000008ec0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000008f80)="$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") lsetxattr$security_capability(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640), &(0x7f0000000680)=@v3={0x3000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x18, 0x1) 1.191444808s ago: executing program 50 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)=@delqdisc={0x30, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) 1.054811872s ago: executing program 8 (id=1756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0xd38a3768e039983, 0x0, {[0xbbf, 0x8801, 0x8000000000000000, 0x3, 0x5, 0x4, 0x7, 0xa]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.053268662s ago: executing program 6 (id=1757): r0 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 1.051672022s ago: executing program 7 (id=1758): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000003c0)={{}, 0x1, 0x65, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000400), 0x18) 736.363105ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 615.247807ms ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) 581.59879ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 520.794407ms ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) 457.515853ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 394.11856ms ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) 332.740846ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 270.355702ms ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) 209.837789ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 116.816848ms ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) 58.313715ms ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, &(0x7f0000000380)="b9", 0x1) 0s ago: executing program 4 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40002161, 0x0, 0xffffffffffffffef) kernel console output (not intermixed with test programs): t,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,,errors=continue. Quota mode: writeback. [ 95.540171][ T3194] loop8: detected capacity change from 0 to 40427 [ 95.570108][ T3194] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 95.578846][ T3194] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 95.596095][ T3194] F2FS-fs (loop8): invalid crc value [ 95.607298][ T3194] F2FS-fs (loop8): Found nat_bits in checkpoint [ 95.637918][ T3197] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.645318][ T3194] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 95.652462][ T3194] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 95.655248][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.686789][ T3197] device bridge_slave_0 entered promiscuous mode [ 95.701486][ T3197] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.715099][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.748222][ T3197] device bridge_slave_1 entered promiscuous mode [ 95.763388][ T45] device bridge_slave_1 left promiscuous mode [ 95.786370][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.822832][ T45] device bridge_slave_0 left promiscuous mode [ 95.829009][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.843346][ T3208] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.891643][ T45] device veth1_macvtap left promiscuous mode [ 95.902478][ T45] device veth0_vlan left promiscuous mode [ 96.221697][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.221719][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.230493][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.239645][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.247742][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.255795][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.273383][ T3194] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 96.355080][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.373425][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.391128][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.405147][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.419876][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.426958][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.445196][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.460098][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.475967][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.483048][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.504527][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.534569][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.563358][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.602182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.627173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.641638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.652653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.671240][ T3197] device veth0_vlan entered promiscuous mode [ 96.691374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.704641][ T3197] device veth1_macvtap entered promiscuous mode [ 96.731541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.753730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.174251][ T3223] loop6: detected capacity change from 0 to 131072 [ 97.188295][ T3223] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 97.205748][ T3223] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 97.235178][ T3223] F2FS-fs (loop6): Found nat_bits in checkpoint [ 97.308770][ T3223] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 97.320442][ T3223] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 97.334654][ T3260] loop4: detected capacity change from 0 to 512 [ 97.348811][ T3260] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.387217][ T3260] EXT4-fs (loop4): Ignoring removed nobh option [ 97.423988][ T3260] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1091: inode has both inline data and extents flags [ 97.442402][ T3260] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1091: couldn't read orphan inode 15 (err -117) [ 97.465343][ T3260] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobh,max_dir_size_kb=0x0000000000000008,sysvgroups,minixdf,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 97.671132][ T3270] loop4: detected capacity change from 0 to 512 [ 97.732822][ T3270] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.744137][ T3273] loop6: detected capacity change from 0 to 512 [ 97.750475][ T3270] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.758859][ T3270] System zones: 0-1, 15-15, 18-18, 34-34 [ 97.772784][ T3270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.779155][ T3270] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.1096: Bad quota inum: 768, type: 0 [ 97.832973][ T3273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 97.842341][ T3273] System zones: 1-12 [ 97.845789][ T3270] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 97.873724][ T3273] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1092: missing EA_INODE flag [ 97.875638][ T3270] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 97.892145][ T3270] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 97.914054][ T3273] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1092: error while reading EA inode 12 err=-117 [ 97.917795][ T3270] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.1096: iget: bad i_size value: 360287970189639690 [ 97.956672][ T3270] xt_bpf: check failed: parse error [ 97.962498][ T3273] EXT4-fs (loop6): 1 orphan inode deleted [ 97.973665][ T3273] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 98.103882][ T30] audit: type=1400 audit(1793807676.464:436): avc: denied { module_request } for pid=3297 comm="syz.5.1106" kmod="tcp-ulp-tls" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 98.281806][ T3305] FAULT_INJECTION: forcing a failure. [ 98.281806][ T3305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 98.310122][ T3305] CPU: 0 PID: 3305 Comm: syz.5.1109 Not tainted syzkaller #0 [ 98.317550][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 98.327622][ T3305] Call Trace: [ 98.330915][ T3305] [ 98.333861][ T3305] __dump_stack+0x21/0x30 [ 98.338214][ T3305] dump_stack_lvl+0x110/0x170 [ 98.342915][ T3305] ? show_regs_print_info+0x20/0x20 [ 98.348132][ T3305] ? futex_wait+0x5b1/0x8f0 [ 98.352656][ T3305] dump_stack+0x15/0x20 [ 98.356835][ T3305] should_fail+0x3ab/0x500 [ 98.361267][ T3305] get_futex_key+0x143/0xb60 [ 98.365886][ T3305] ? futex_wait_restart+0x250/0x250 [ 98.371111][ T3305] ? __stack_depot_save+0x34/0x480 [ 98.376234][ T3305] ? path_openat+0x284f/0x2f80 [ 98.381015][ T3305] do_futex+0x1b4f/0x2800 [ 98.385360][ T3305] ? kasan_set_track+0x4a/0x70 [ 98.390155][ T3305] ? kmem_cache_free+0x100/0x320 [ 98.395118][ T3305] ? do_sys_openat2+0x6df/0x7f0 [ 98.399999][ T3305] ? x64_sys_call+0x219/0x9a0 [ 98.404714][ T3305] ? do_syscall_64+0x4c/0xa0 [ 98.409321][ T3305] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.415407][ T3305] ? _kstrtoull+0x3bb/0x4c0 [ 98.419938][ T3305] ? futex_exit_release+0x1e0/0x1e0 [ 98.425156][ T3305] ? kstrtouint_from_user+0x1c4/0x220 [ 98.430554][ T3305] ? __kasan_check_write+0x14/0x20 [ 98.435685][ T3305] ? proc_fail_nth_write+0x180/0x200 [ 98.440998][ T3305] ? security_file_permission+0x79/0xa0 [ 98.446574][ T3305] ? file_end_write+0x1b0/0x1b0 [ 98.451447][ T3305] ? __kasan_check_write+0x14/0x20 [ 98.456574][ T3305] ? mutex_unlock+0x8f/0x230 [ 98.461173][ T3305] __se_sys_futex+0x135/0x330 [ 98.465850][ T3305] ? __kasan_check_write+0x14/0x20 [ 98.470960][ T3305] ? __x64_sys_futex+0x100/0x100 [ 98.475892][ T3305] ? ksys_write+0x1fa/0x260 [ 98.480398][ T3305] ? __kasan_check_write+0x14/0x20 [ 98.485510][ T3305] __x64_sys_futex+0xe5/0x100 [ 98.490187][ T3305] x64_sys_call+0x251/0x9a0 [ 98.494689][ T3305] do_syscall_64+0x4c/0xa0 [ 98.499102][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 98.503779][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 98.508455][ T3305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.514348][ T3305] RIP: 0033:0x7fbf82075b19 [ 98.518760][ T3305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.538367][ T3305] RSP: 002b:00007fbf80acd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.546789][ T3305] RAX: ffffffffffffffda RBX: 00007fbf822fbfa0 RCX: 00007fbf82075b19 [ 98.554760][ T3305] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 98.562728][ T3305] RBP: 00007fbf8210db70 R08: 0000200000000040 R09: 0000000000000001 [ 98.570694][ T3305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.578661][ T3305] R13: 00007fbf822fc038 R14: 00007fbf822fbfa0 R15: 00007ffca7232ab8 [ 98.586629][ T3305] [ 98.969884][ T3311] incfs_lookup_dentry err:-5 [ 98.972301][ T3293] loop8: detected capacity change from 0 to 131072 [ 98.975687][ T3311] incfs: Can't find or create .index dir in ./file0 [ 98.984954][ T3293] F2FS-fs (loop8): fault_injection options not supported [ 98.996543][ T3311] incfs: mount failed -5 [ 99.022065][ T3293] F2FS-fs (loop8): invalid crc value [ 99.053015][ T3293] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.122294][ T3293] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 99.162599][ T1400] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=50003, run fsck to fix. [ 99.356848][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.371786][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.388085][ T3326] device bridge_slave_0 entered promiscuous mode [ 99.405015][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.420737][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.445862][ T3326] device bridge_slave_1 entered promiscuous mode [ 99.542178][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.549292][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.556608][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.563656][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.605117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.612826][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.620207][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.641510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.655126][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.662197][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.669939][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.679027][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.686113][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.708518][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.724977][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.741444][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.771412][ T3326] device veth0_vlan entered promiscuous mode [ 99.778515][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.795891][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.804795][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.812983][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.824502][ T3326] device veth1_macvtap entered promiscuous mode [ 99.835965][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.850564][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.881083][ T800] device bridge_slave_1 left promiscuous mode [ 99.890768][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.914856][ T800] device veth1_macvtap left promiscuous mode [ 99.927438][ T800] device veth0_vlan left promiscuous mode [ 99.941911][ T3370] loop8: detected capacity change from 0 to 2048 [ 100.024042][ T3362] loop4: detected capacity change from 0 to 40427 [ 100.034509][ T3370] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,dioread_lock,,errors=continue. Quota mode: none. [ 100.087133][ T3362] F2FS-fs (loop4): invalid crc value [ 100.115756][ T3384] device syzkaller0 entered promiscuous mode [ 100.124414][ T3384] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 100.140072][ T3362] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.189689][ T3362] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.250025][ T30] audit: type=1400 audit(1793807678.606:437): avc: denied { mount } for pid=3401 comm="syz.8.1146" name="/" dev="ramfs" ino=35370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.292063][ T3152] attempt to access beyond end of device [ 100.292063][ T3152] loop4: rw=2049, want=45104, limit=40427 [ 100.306685][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 100.358404][ T3417] overlayfs: failed to clone upperpath [ 100.414103][ T3424] tipc: Started in network mode [ 100.419121][ T3424] tipc: Node identity 626916798788, cluster identity 4711 [ 100.428177][ T3424] tipc: Enabled bearer , priority 10 [ 100.440594][ T3423] tipc: Resetting bearer [ 100.449318][ T3423] tipc: Disabling bearer [ 100.649958][ T30] audit: type=1400 audit(1793807679.006:438): avc: denied { remove_name } for pid=3438 comm="syz.6.1162" name="g1" dev="configfs" ino=17553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.672754][ T30] audit: type=1400 audit(1793807679.006:439): avc: denied { rmdir } for pid=3438 comm="syz.6.1162" name="g1" dev="configfs" ino=17553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.762289][ T744] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.849927][ T3445] loop2: detected capacity change from 0 to 512 [ 100.871617][ T3445] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 100.887137][ T3445] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.077124][ T3461] loop2: detected capacity change from 0 to 128 [ 101.110334][ T3461] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 101.123554][ T744] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 101.132429][ T3461] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.132830][ T744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.239195][ T30] audit: type=1400 audit(1793807679.596:440): avc: denied { ioctl } for pid=3468 comm="syz.2.1173" path="/10/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.239276][ T3469] incfs_lookup_dentry err:-13 [ 101.314757][ T3478] af_packet: packet size is too long (4294967292 > 2016) [ 101.386285][ T30] audit: type=1326 audit(1793807679.736:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.6.1162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde82894b19 code=0x7fc00000 [ 101.438182][ T30] audit: type=1326 audit(1793807679.736:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.6.1162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde82894b19 code=0x7fc00000 [ 101.466726][ T744] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, d6:ce:4d:3e:1d:f9 [ 101.508367][ T30] audit: type=1326 audit(1793807679.746:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.6.1162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde82894b19 code=0x7fc00000 [ 101.515264][ T3493] ip_tables: iptables: counters copy to user failed while replacing table [ 101.568500][ T30] audit: type=1326 audit(1793807679.746:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.6.1162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde82894b19 code=0x7fc00000 [ 101.594645][ T30] audit: type=1326 audit(1793807679.746:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.6.1162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde82894b19 code=0x7fc00000 [ 101.632616][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1186'. [ 101.647205][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.654474][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.676392][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1186'. [ 101.954638][ T6] usb 6-1: USB disconnect, device number 4 [ 101.960938][ T6] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 101.973853][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1198'. [ 101.991192][ T3545] device gretap1 entered promiscuous mode [ 102.004112][ T3524] loop6: detected capacity change from 0 to 40427 [ 102.076676][ T3524] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 102.088409][ T3524] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 102.113347][ T3524] F2FS-fs (loop6): invalid crc value [ 102.121946][ T3524] F2FS-fs (loop6): Found nat_bits in checkpoint [ 102.180264][ T3524] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 102.187870][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 102.196846][ T3524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 102.208770][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 102.272710][ T3582] loop4: detected capacity change from 0 to 256 [ 102.308809][ T3587] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 102.355661][ T3582] exfat: Deprecated parameter 'utf8' [ 102.361102][ T3582] exfat: Deprecated parameter 'utf8' [ 102.397429][ T3582] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 102.529534][ T3614] loop6: detected capacity change from 0 to 256 [ 102.607098][ T6] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.625097][ T6] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.636138][ T3614] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x997a2ed9, utbl_chksum : 0xe619d30d) [ 102.645884][ T3629] loop5: detected capacity change from 0 to 512 [ 102.677811][ T3614] exFAT-fs (loop6): error, broken FAT chain. [ 102.693790][ T3614] exFAT-fs (loop6): Filesystem has been set read-only [ 102.712271][ T3614] exFAT-fs (loop6): error, failed to bmap (inode : ffff88812dc5b8e0 iblock : 8, err : -5) [ 102.783521][ T3627] hid-generic 0000:0000:0000.0011: pid 3627 passed too short report [ 102.935800][ T3667] loop5: detected capacity change from 0 to 512 [ 102.975936][ T3667] EXT4-fs (loop5): Ignoring removed bh option [ 102.998324][ T3674] FAULT_INJECTION: forcing a failure. [ 102.998324][ T3674] name failslab, interval 1, probability 0, space 0, times 0 [ 103.005060][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xd27e, nop [ 103.025029][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0xfeed [ 103.039530][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x535b [ 103.047107][ T3674] CPU: 0 PID: 3674 Comm: syz.4.1238 Not tainted syzkaller #0 [ 103.052420][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x9e84 [ 103.056040][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 103.056055][ T3674] Call Trace: [ 103.056063][ T3674] [ 103.067309][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x8ff2 [ 103.074425][ T3674] __dump_stack+0x21/0x30 [ 103.074454][ T3674] dump_stack_lvl+0x110/0x170 [ 103.074474][ T3674] ? show_regs_print_info+0x20/0x20 [ 103.078265][ T3650] kvm [3649]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0xe960 [ 103.080686][ T3674] dump_stack+0x15/0x20 [ 103.117039][ T3674] should_fail+0x3ab/0x500 [ 103.121475][ T3674] __should_failslab+0xa4/0xe0 [ 103.126251][ T3674] should_failslab+0x9/0x20 [ 103.130766][ T3674] slab_pre_alloc_hook+0x39/0xd0 [ 103.135722][ T3674] kmem_cache_alloc_trace+0x48/0x270 [ 103.141029][ T3674] ? selinux_key_alloc+0x56/0x190 [ 103.146077][ T3674] selinux_key_alloc+0x56/0x190 [ 103.150970][ T3674] security_key_alloc+0x74/0xa0 [ 103.155844][ T3674] key_alloc+0x72c/0xef0 [ 103.160114][ T3674] key_create_or_update+0x8d3/0x9c0 [ 103.165334][ T3674] ? key_type_put+0x20/0x20 [ 103.169863][ T3674] ? lookup_user_key_possessed+0x40/0x40 [ 103.175517][ T3674] ? __kasan_check_write+0x14/0x20 [ 103.180647][ T3674] ? _copy_from_user+0x95/0xd0 [ 103.185518][ T3674] __se_sys_add_key+0x34b/0x410 [ 103.190389][ T3674] ? __x64_sys_add_key+0xd0/0xd0 [ 103.193736][ T3669] loop8: detected capacity change from 0 to 40427 [ 103.195337][ T3674] ? ksys_write+0x1fa/0x260 [ 103.195361][ T3674] ? __kasan_check_write+0x14/0x20 [ 103.211390][ T3674] __x64_sys_add_key+0xbf/0xd0 [ 103.214628][ T3669] F2FS-fs (loop8): invalid crc value [ 103.216169][ T3674] x64_sys_call+0x713/0x9a0 [ 103.225649][ T3669] F2FS-fs (loop8): Found nat_bits in checkpoint [ 103.225969][ T3674] do_syscall_64+0x4c/0xa0 [ 103.236614][ T3674] ? clear_bhb_loop+0x50/0xa0 [ 103.241317][ T3674] ? clear_bhb_loop+0x50/0xa0 [ 103.246015][ T3674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.251926][ T3674] RIP: 0033:0x7f6f44c1bb19 [ 103.256363][ T3674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.256610][ T3669] F2FS-fs (loop8): Start checkpoint disabled! [ 103.276116][ T3674] RSP: 002b:00007f6f43673028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 103.276142][ T3674] RAX: ffffffffffffffda RBX: 00007f6f44ea1fa0 RCX: 00007f6f44c1bb19 [ 103.276156][ T3674] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 103.276169][ T3674] RBP: 00007f6f44cb3b70 R08: ffffffffffffffff R09: 0000000000000000 [ 103.276182][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.283060][ T3669] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 103.290654][ T3674] R13: 00007f6f44ea2038 R14: 00007f6f44ea1fa0 R15: 00007fffc4b426d8 [ 103.290675][ T3674] [ 103.377933][ T8] attempt to access beyond end of device [ 103.377933][ T8] loop8: rw=2049, want=40976, limit=40427 [ 103.391849][ T3686] overlayfs: failed to clone upperpath [ 103.417884][ T3688] loop5: detected capacity change from 0 to 2048 [ 103.454221][ T3688] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 103.488096][ T3688] EXT4-fs (loop5): Unrecognized mount option "obj_type=auto_da_alloc" or missing value [ 103.498198][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 103.498215][ T30] audit: type=1326 audit(1793807681.866:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.539067][ T30] audit: type=1326 audit(1793807681.896:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.564378][ T30] audit: type=1326 audit(1793807681.896:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.591946][ T30] audit: type=1326 audit(1793807681.896:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.617303][ T30] audit: type=1326 audit(1793807681.896:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.642360][ T30] audit: type=1326 audit(1793807681.896:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.668740][ T30] audit: type=1326 audit(1793807681.896:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.693678][ T30] audit: type=1326 audit(1793807681.896:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.718415][ T30] audit: type=1326 audit(1793807681.946:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f44c1bb19 code=0x7ffc0000 [ 103.744118][ T30] audit: type=1326 audit(1793807681.946:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.1245" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f44c1b882 code=0x7ffc0000 [ 103.812296][ T3706] netlink: 2144 bytes leftover after parsing attributes in process `syz.8.1249'. [ 103.882153][ T3711] xt_hashlimit: size too large, truncated to 1048576 [ 104.041220][ T3721] loop8: detected capacity change from 0 to 2048 [ 104.082480][ T3721] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,max_dir_size_kb=0x0000000000000056,,errors=continue. Quota mode: none. [ 104.099096][ T3721] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.212005][ T763] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set [ 104.226755][ T763] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 104.239171][ T763] EXT4-fs (loop8): This should not happen!! Data will be lost [ 104.239171][ T763] [ 104.249741][ T763] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 125 with error 28 [ 104.262386][ T763] EXT4-fs (loop8): This should not happen!! Data will be lost [ 104.262386][ T763] [ 104.272305][ T763] EXT4-fs (loop8): Total free blocks count 0 [ 104.278448][ T763] EXT4-fs (loop8): Free/Dirty block details [ 104.284528][ T763] EXT4-fs (loop8): free_blocks=0 [ 104.289504][ T763] EXT4-fs (loop8): dirty_blocks=2864 [ 104.294873][ T763] EXT4-fs (loop8): Block reservation details [ 104.300849][ T763] EXT4-fs (loop8): i_reserved_data_blocks=179 [ 104.413683][ T3744] loop4: detected capacity change from 0 to 128 [ 104.451077][ T3750] ip_tables: iptables: counters copy to user failed while replacing table [ 104.473516][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 104.481745][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.490043][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 104.498217][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.507274][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.515555][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.524031][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.532152][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.578208][ T3763] overlayfs: failed to clone upperpath [ 104.798163][ T3821] xt_hashlimit: size too large, truncated to 1048576 [ 104.882268][ T1508] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 104.932023][ T3834] FAULT_INJECTION: forcing a failure. [ 104.932023][ T3834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.945599][ T3834] CPU: 1 PID: 3834 Comm: syz.5.1304 Not tainted syzkaller #0 [ 104.952996][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 104.963072][ T3834] Call Trace: [ 104.966375][ T3834] [ 104.969333][ T3834] __dump_stack+0x21/0x30 [ 104.973698][ T3834] dump_stack_lvl+0x110/0x170 [ 104.978403][ T3834] ? show_regs_print_info+0x20/0x20 [ 104.983621][ T3834] ? 0xffffffffa0018000 [ 104.987797][ T3834] dump_stack+0x15/0x20 [ 104.991972][ T3834] should_fail+0x3ab/0x500 [ 104.996411][ T3834] should_fail_alloc_page+0x55/0x80 [ 105.001623][ T3834] prepare_alloc_pages+0x13f/0x590 [ 105.006750][ T3834] ? __alloc_pages_bulk+0xab0/0xab0 [ 105.011965][ T3834] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 105.017619][ T3834] __alloc_pages+0x11d/0x460 [ 105.022225][ T3834] ? unlock_page_memcg+0x114/0x130 [ 105.027354][ T3834] ? zone_watermark_fast+0x250/0x250 [ 105.032669][ T3834] ? page_remove_rmap+0xc6d/0xf40 [ 105.037707][ T3834] ? page_add_file_rmap+0x700/0x700 [ 105.042917][ T3834] ? mark_page_accessed+0x3a8/0x8e0 [ 105.048215][ T3834] __get_free_pages+0x10/0x30 [ 105.052867][ T3834] __tlb_remove_page_size+0x18a/0x310 [ 105.058237][ T3834] unmap_page_range+0x1059/0x1e00 [ 105.063240][ T3834] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 105.069542][ T3834] ? lru_cache_add+0x7e0/0x7e0 [ 105.074299][ T3834] ? schedule_preempt_disabled+0x20/0x20 [ 105.079910][ T3834] unmap_vmas+0x26d/0x380 [ 105.084225][ T3834] ? unmap_page_range+0x1e00/0x1e00 [ 105.089443][ T3834] ? __kasan_check_write+0x14/0x20 [ 105.094574][ T3834] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 105.100010][ T3834] exit_mmap+0x412/0x8b0 [ 105.104229][ T3834] ? vm_brk+0x30/0x30 [ 105.108191][ T3834] ? mutex_unlock+0x8f/0x230 [ 105.112759][ T3834] ? uprobe_clear_state+0x2c6/0x320 [ 105.117940][ T3834] __mmput+0x92/0x300 [ 105.121896][ T3834] mmput+0x50/0x150 [ 105.125687][ T3834] do_exit+0xacc/0x29a0 [ 105.129821][ T3834] ? put_task_struct+0x90/0x90 [ 105.134560][ T3834] ? __kasan_check_write+0x14/0x20 [ 105.139646][ T3834] ? _raw_spin_lock_irq+0x95/0xf0 [ 105.144644][ T3834] do_group_exit+0x149/0x310 [ 105.149209][ T3834] ? __kasan_check_write+0x14/0x20 [ 105.154311][ T3834] ? recalc_sigpending+0x1ac/0x230 [ 105.159424][ T3834] get_signal+0x64f/0x1430 [ 105.163821][ T3834] arch_do_signal_or_restart+0xe2/0x1100 [ 105.169561][ T3834] ? __kasan_check_write+0x14/0x20 [ 105.174656][ T3834] ? _raw_spin_lock+0x94/0xf0 [ 105.179324][ T3834] ? _raw_spin_trylock_bh+0x150/0x150 [ 105.184702][ T3834] ? get_sigframe_size+0x10/0x10 [ 105.189625][ T3834] ? __se_sys_futex+0x135/0x330 [ 105.194489][ T3834] ? pick_file+0x2c0/0x2c0 [ 105.198922][ T3834] exit_to_user_mode_loop+0xa7/0xe0 [ 105.204131][ T3834] exit_to_user_mode_prepare+0x87/0xd0 [ 105.209595][ T3834] syscall_exit_to_user_mode+0x1a/0x30 [ 105.215045][ T3834] do_syscall_64+0x58/0xa0 [ 105.219442][ T3834] ? clear_bhb_loop+0x50/0xa0 [ 105.224110][ T3834] ? clear_bhb_loop+0x50/0xa0 [ 105.228786][ T3834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.234654][ T3834] RIP: 0033:0x7fbf82075b19 [ 105.239048][ T3834] Code: Unable to access opcode bytes at RIP 0x7fbf82075aef. [ 105.246393][ T3834] RSP: 002b:00007fbf80acd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.255347][ T3834] RAX: 0000000000000001 RBX: 00007fbf822fbfa8 RCX: 00007fbf82075b19 [ 105.263301][ T3834] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf822fbfac [ 105.271257][ T3834] RBP: 00007fbf822fbfa0 R08: 0034b2d39ab600b6 R09: 0000000000000000 [ 105.279225][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.287182][ T3834] R13: 00007fbf822fc038 R14: 00007ffca72329d0 R15: 00007ffca7232ab8 [ 105.295149][ T3834] [ 105.312842][ T3845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 105.317485][ T3847] loop4: detected capacity change from 0 to 512 [ 105.328070][ T3845] device ip6erspan0 entered promiscuous mode [ 105.348065][ T3847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.360578][ T3847] EXT4-fs (loop4): 1 truncate cleaned up [ 105.366330][ T3847] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.372311][ T291] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 105.391546][ T3152] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.412666][ T3152] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.433043][ T3152] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.453855][ T3152] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.474790][ T3152] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.495680][ T3152] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.515880][ T3152] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.536975][ T3152] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.557156][ T3152] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.578083][ T3152] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.622307][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.652423][ T291] usb 9-1: Using ep0 maxpacket: 16 [ 105.672363][ T1508] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.683785][ T1508] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 105.706303][ T1508] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 105.715704][ T1508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.772459][ T291] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.774688][ T3859] xt_hashlimit: size too large, truncated to 1048576 [ 105.784272][ T1508] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 105.806114][ T291] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.816070][ T1508] usb 7-1: 1:1 : unsupported format bits 0x1d58c [ 105.823370][ T291] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.836478][ T291] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.843370][ T291] usb 9-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 105.852699][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.862322][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 105.864849][ T291] usb 9-1: config 0 descriptor?? [ 105.950728][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.964310][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.971810][ T3862] device bridge_slave_0 entered promiscuous mode [ 105.982452][ T60] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 105.999550][ T60] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.012917][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.025404][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.034674][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.043896][ T3862] device bridge_slave_1 entered promiscuous mode [ 106.054464][ T60] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 106.071518][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.080720][ T60] usb 6-1: config 0 descriptor?? [ 106.132184][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.139318][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.146628][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.153676][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.183884][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.191766][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.199682][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.216544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.226249][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.233325][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.241287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.249556][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.256631][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.264291][ T1508] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 106.283541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.302968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.321543][ T1508] usb 7-1: USB disconnect, device number 2 [ 106.323200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.348771][ T800] device bridge_slave_1 left promiscuous mode [ 106.355371][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.363405][ T800] device bridge_slave_0 left promiscuous mode [ 106.369570][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.378788][ T291] input: HID 046d:c215 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:046D:C215.0012/input/input12 [ 106.392609][ T800] device veth1_macvtap left promiscuous mode [ 106.398628][ T800] device veth0_vlan left promiscuous mode [ 106.440052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.448385][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.456050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.464401][ T3862] device veth0_vlan entered promiscuous mode [ 106.472178][ T291] logitech 0003:046D:C215.0012: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.8-1/input0 [ 106.477987][ T3862] device veth1_macvtap entered promiscuous mode [ 106.492743][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.509563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.524700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.574198][ T60] input: HID 1e7d:2c24 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1E7D:2C24.0013/input/input13 [ 106.592836][ T322] usb 9-1: USB disconnect, device number 8 [ 106.617630][ T3876] FAULT_INJECTION: forcing a failure. [ 106.617630][ T3876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.631813][ T3876] CPU: 0 PID: 3876 Comm: syz.2.1320 Not tainted syzkaller #0 [ 106.639232][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 106.649289][ T3876] Call Trace: [ 106.652568][ T3876] [ 106.655496][ T3876] __dump_stack+0x21/0x30 [ 106.659830][ T3876] dump_stack_lvl+0x110/0x170 [ 106.664563][ T3876] ? show_regs_print_info+0x20/0x20 [ 106.669762][ T3876] dump_stack+0x15/0x20 [ 106.673914][ T3876] should_fail+0x3ab/0x500 [ 106.678330][ T3876] should_fail_alloc_page+0x55/0x80 [ 106.683552][ T3876] prepare_alloc_pages+0x13f/0x590 [ 106.688668][ T3876] ? __alloc_pages_bulk+0xab0/0xab0 [ 106.693866][ T3876] __alloc_pages+0x11d/0x460 [ 106.698467][ T3876] ? zone_watermark_fast+0x250/0x250 [ 106.703752][ T3876] ? dm_kcopyd_client_create+0x3c8/0x940 [ 106.709383][ T3876] dm_kcopyd_client_create+0x3e4/0x940 [ 106.714845][ T3876] snapshot_ctr+0x9de/0x11f0 [ 106.719436][ T3876] ? kmem_cache_alloc_trace+0x119/0x270 [ 106.724991][ T3876] ? dm_snap_cow+0x40/0x40 [ 106.729402][ T3876] ? dm_split_args+0x4d2/0x570 [ 106.734162][ T3876] dm_table_add_target+0x605/0xc30 [ 106.739274][ T3876] table_load+0x2ce/0x750 [ 106.743600][ T3876] ? dev_wait+0x330/0x330 [ 106.747928][ T3876] ? __kasan_check_write+0x14/0x20 [ 106.753037][ T3876] ? _copy_from_user+0x95/0xd0 [ 106.757803][ T3876] dm_ctl_ioctl+0x8ee/0xca0 [ 106.762302][ T3876] ? dev_wait+0x330/0x330 [ 106.766630][ T3876] ? dm_poll+0x120/0x120 [ 106.770867][ T3876] ? slab_free_freelist_hook+0xc2/0x190 [ 106.776421][ T3876] ? security_file_ioctl+0x84/0xa0 [ 106.781530][ T3876] ? dm_poll+0x120/0x120 [ 106.785766][ T3876] __se_sys_ioctl+0x121/0x1a0 [ 106.790448][ T3876] __x64_sys_ioctl+0x7b/0x90 [ 106.795035][ T3876] x64_sys_call+0x2f/0x9a0 [ 106.799447][ T3876] do_syscall_64+0x4c/0xa0 [ 106.803862][ T3876] ? clear_bhb_loop+0x50/0xa0 [ 106.808544][ T3876] ? clear_bhb_loop+0x50/0xa0 [ 106.813216][ T3876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.819107][ T3876] RIP: 0033:0x7fb9ccab4b19 [ 106.823524][ T3876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.843147][ T3876] RSP: 002b:00007fb9cb50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.851570][ T3876] RAX: ffffffffffffffda RBX: 00007fb9ccd3afa0 RCX: 00007fb9ccab4b19 [ 106.859542][ T3876] RDX: 0000200000000d00 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 106.867514][ T3876] RBP: 00007fb9ccb4cb70 R08: 0000000000000000 R09: 0000000000000000 [ 106.875481][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.883452][ T3876] R13: 00007fb9ccd3b038 R14: 00007fb9ccd3afa0 R15: 00007fffa03fb638 [ 106.891425][ T3876] [ 106.900278][ T3876] device-mapper: table: 253:0: snapshot-merge: Could not create kcopyd client [ 106.909605][ T3876] device-mapper: ioctl: error adding target to table [ 106.912338][ T60] pyra 0003:1E7D:2C24.0013: input,hiddev97,hidraw1: USB HID v0.03 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 107.011541][ T3898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 107.019279][ T3896] loop2: detected capacity change from 0 to 4096 [ 107.116767][ T3896] EXT4-fs (loop2): Ignoring removed orlov option [ 107.143384][ T3896] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 107.372069][ T3914] loop8: detected capacity change from 0 to 1024 [ 107.403540][ T3914] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,i_version,nolazytime,noblock_validity,lazytime,errors=remount-ro,stripe=0x0000000000000005,grpquota,errors=continue,. Quota mode: writeback. [ 107.831452][ T3935] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 107.845324][ T1508] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 107.879120][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.182262][ T322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.340228][ T3954] loop1: detected capacity change from 0 to 512 [ 108.357006][ T751] usb 6-1: USB disconnect, device number 5 [ 108.364576][ T3954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 108.372751][ T1508] usb 9-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 108.382123][ T1508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.382636][ T3954] System zones: 0-7 [ 108.390668][ T1508] usb 9-1: Product: syz [ 108.395097][ T3954] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 108.400132][ T1508] usb 9-1: Manufacturer: syz [ 108.424785][ T1508] usb 9-1: SerialNumber: syz [ 108.432854][ T1508] usb 9-1: config 0 descriptor?? [ 108.473243][ T1508] hub 9-1:0.0: bad descriptor, ignoring hub [ 108.479177][ T1508] hub: probe of 9-1:0.0 failed with error -5 [ 108.490869][ T1508] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 108.499272][ T1508] usb 9-1: Detected SIO [ 108.511604][ T3964] ip_tables: iptables: counters copy to user failed while replacing table [ 108.514335][ T3963] ip_tables: iptables: counters copy to user failed while replacing table [ 108.520745][ T1508] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 108.582381][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.593822][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.603930][ T322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.617160][ T322] usb 3-1: New USB device found, idVendor=045e, idProduct=0003, bcdDevice= 0.00 [ 108.626555][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.635954][ T322] usb 3-1: config 0 descriptor?? [ 109.113467][ T322] hid-generic 0003:045E:0003.0014: unknown main item tag 0x2 [ 109.120922][ T322] hid-generic 0003:045E:0003.0014: item fetching failed at offset 23/24 [ 109.129907][ T322] hid-generic: probe of 0003:045E:0003.0014 failed with error -22 [ 109.314703][ T1508] usb 3-1: USB disconnect, device number 6 [ 109.422827][ T3973] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1357'. [ 109.595051][ T30] kauditd_printk_skb: 474 callbacks suppressed [ 109.595066][ T30] audit: type=1400 audit(1793807943.959:994): avc: denied { mounton } for pid=3980 comm="syz.1.1360" path="/18/file0" dev="ramfs" ino=37680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 109.627293][ T30] audit: type=1400 audit(1793807943.989:995): avc: denied { unmount } for pid=3862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.657795][ T3985] loop1: detected capacity change from 0 to 512 [ 109.831468][ T3987] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 109.840255][ T3987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 109.912272][ T751] Bluetooth: hci0: command 0x1003 tx timeout [ 109.918328][ T3941] Bluetooth: hci0: sending frame failed (-49) [ 110.832272][ T4005] loop1: detected capacity change from 0 to 40427 [ 110.886409][ T4005] F2FS-fs (loop1): invalid crc value [ 110.893296][ T4005] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.914696][ T4005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.929292][ T4005] attempt to access beyond end of device [ 110.929292][ T4005] loop1: rw=2049, want=45104, limit=40427 [ 110.942837][ T4005] attempt to access beyond end of device [ 110.942837][ T4005] loop1: rw=2049, want=45112, limit=40427 [ 110.957947][ T3862] attempt to access beyond end of device [ 110.957947][ T3862] loop1: rw=524288, want=45072, limit=40427 [ 110.969592][ T3862] attempt to access beyond end of device [ 110.969592][ T3862] loop1: rw=0, want=45072, limit=40427 [ 110.990148][ T45] attempt to access beyond end of device [ 110.990148][ T45] loop1: rw=2049, want=45136, limit=40427 [ 111.001376][ T1508] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.168784][ T4011] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.175879][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.183353][ T4011] device bridge_slave_0 entered promiscuous mode [ 111.190277][ T4011] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.197508][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.204912][ T4011] device bridge_slave_1 entered promiscuous mode [ 111.245453][ T4011] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.252507][ T4011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.259742][ T4011] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.266773][ T4011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.286538][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.294435][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.301787][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.312610][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.320774][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.327826][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.336609][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.344828][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.351839][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.365990][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.375552][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.390431][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.401621][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.409728][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.412319][ T1508] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.417205][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.429786][ T1508] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.448775][ T1508] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.455451][ T1508] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 111.464574][ T1508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.465425][ T4011] device veth0_vlan entered promiscuous mode [ 111.479397][ T1508] usb 3-1: config 0 descriptor?? [ 111.486993][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.496280][ T4011] device veth1_macvtap entered promiscuous mode [ 111.505838][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.515326][ T45] device bridge_slave_1 left promiscuous mode [ 111.521428][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.529219][ T45] device bridge_slave_0 left promiscuous mode [ 111.535458][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.543326][ T45] device veth1_macvtap left promiscuous mode [ 111.549373][ T45] device veth0_vlan left promiscuous mode [ 111.589871][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.621869][ T4018] xt_hashlimit: size too large, truncated to 1048576 [ 111.672701][ T4019] xt_hashlimit: size too large, truncated to 1048576 [ 111.845233][ T4027] overlayfs: failed to set xattr on upper [ 111.852094][ T30] audit: type=1400 audit(1793807946.209:996): avc: denied { create } for pid=4026 comm="syz.3.1375" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.885956][ T30] audit: type=1400 audit(1793807946.239:997): avc: denied { unlink } for pid=4011 comm="syz-executor" name="md0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.943229][ T4043] loop3: detected capacity change from 0 to 2048 [ 111.962854][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 111.969870][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 111.977145][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 111.982435][ T322] Bluetooth: hci0: command 0x1001 tx timeout [ 111.984408][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 111.997088][ T3941] Bluetooth: hci0: sending frame failed (-49) [ 112.004437][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 112.011439][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 112.013943][ T4043] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.018579][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 112.029080][ T4043] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.036346][ T1508] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 112.076665][ T1508] saitek 0003:06A3:0CD0.0015: unbalanced collection at end of report description [ 112.086281][ T1508] saitek 0003:06A3:0CD0.0015: parse failed [ 112.092121][ T1508] saitek: probe of 0003:06A3:0CD0.0015 failed with error -22 [ 112.178080][ T1508] usb 3-1: USB disconnect, device number 7 [ 112.698540][ T4057] FAULT_INJECTION: forcing a failure. [ 112.698540][ T4057] name failslab, interval 1, probability 0, space 0, times 0 [ 112.712722][ T4057] CPU: 1 PID: 4057 Comm: syz.2.1383 Not tainted syzkaller #0 [ 112.720131][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 112.730202][ T4057] Call Trace: [ 112.733475][ T4057] [ 112.736391][ T4057] __dump_stack+0x21/0x30 [ 112.740710][ T4057] dump_stack_lvl+0x110/0x170 [ 112.745369][ T4057] ? show_regs_print_info+0x20/0x20 [ 112.750557][ T4057] ? slab_post_alloc_hook+0x6d/0x2b0 [ 112.755851][ T4057] ? __d_lookup_rcu+0x63a/0x6a0 [ 112.760695][ T4057] dump_stack+0x15/0x20 [ 112.764845][ T4057] should_fail+0x3ab/0x500 [ 112.769256][ T4057] __should_failslab+0xa4/0xe0 [ 112.774008][ T4057] should_failslab+0x9/0x20 [ 112.778601][ T4057] slab_pre_alloc_hook+0x39/0xd0 [ 112.783534][ T4057] ? proc_alloc_inode+0x1d/0xb0 [ 112.788375][ T4057] kmem_cache_alloc+0x44/0x260 [ 112.793124][ T4057] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 112.799429][ T4057] proc_alloc_inode+0x1d/0xb0 [ 112.804092][ T4057] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 112.810411][ T4057] new_inode_pseudo+0x62/0x210 [ 112.815165][ T4057] new_inode+0x28/0x1e0 [ 112.819307][ T4057] ? d_hash_and_lookup+0x1f0/0x1f0 [ 112.824400][ T4057] proc_pid_make_inode+0x24/0x1c0 [ 112.829416][ T4057] proc_ns_instantiate+0x52/0xf0 [ 112.834337][ T4057] proc_fill_cache+0x1e2/0x3f0 [ 112.839088][ T4057] ? __kasan_check_write+0x14/0x20 [ 112.844187][ T4057] ? proc_ns_dir_lookup+0x6f0/0x6f0 [ 112.849393][ T4057] ? pid_revalidate+0x1a0/0x1a0 [ 112.854246][ T4057] ? __kasan_check_read+0x11/0x20 [ 112.859265][ T4057] proc_ns_dir_readdir+0x3c2/0x4a0 [ 112.864366][ T4057] iterate_dir+0x25c/0x600 [ 112.868853][ T4057] ? show_softirqs+0x2f0/0x2f0 [ 112.873603][ T4057] __se_sys_getdents64+0xf2/0x250 [ 112.878607][ T4057] ? __x64_sys_getdents64+0x90/0x90 [ 112.883790][ T4057] ? ksys_write+0x1fa/0x260 [ 112.888301][ T4057] ? filldir+0x660/0x660 [ 112.892531][ T4057] ? __kasan_check_write+0x14/0x20 [ 112.897627][ T4057] ? switch_fpu_return+0x15d/0x2c0 [ 112.902740][ T4057] __x64_sys_getdents64+0x7b/0x90 [ 112.907740][ T4057] x64_sys_call+0x592/0x9a0 [ 112.912236][ T4057] do_syscall_64+0x4c/0xa0 [ 112.916651][ T4057] ? clear_bhb_loop+0x50/0xa0 [ 112.921311][ T4057] ? clear_bhb_loop+0x50/0xa0 [ 112.926332][ T4057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.932216][ T4057] RIP: 0033:0x7fb9ccab4b19 [ 112.936732][ T4057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.956327][ T4057] RSP: 002b:00007fb9cb50c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 112.964740][ T4057] RAX: ffffffffffffffda RBX: 00007fb9ccd3afa0 RCX: 00007fb9ccab4b19 [ 112.973041][ T4057] RDX: 00000000000000a6 RSI: 0000200000000040 RDI: 0000000000000004 [ 112.981016][ T4057] RBP: 00007fb9ccb4cb70 R08: 0000000000000000 R09: 0000000000000000 [ 112.989064][ T4057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.997031][ T4057] R13: 00007fb9ccd3b038 R14: 00007fb9ccd3afa0 R15: 00007fffa03fb638 [ 113.005009][ T4057] [ 113.026029][ T60] usb 9-1: USB disconnect, device number 9 [ 113.043821][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 113.056369][ T60] ftdi_sio 9-1:0.0: device disconnected [ 113.092680][ T30] audit: type=1400 audit(1793807947.449:998): avc: denied { nlmsg_write } for pid=4069 comm="syz.2.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 113.156729][ T30] audit: type=1400 audit(1793807947.519:999): avc: denied { lock } for pid=4069 comm="syz.2.1389" path="socket:[38563]" dev="sockfs" ino=38563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 113.196121][ T4082] loop2: detected capacity change from 0 to 256 [ 113.210742][ T4082] exfat: Bad value for 'uid' [ 113.290380][ T4078] loop3: detected capacity change from 0 to 40427 [ 113.327689][ T4093] SELinux: failed to load policy [ 113.331467][ T4078] F2FS-fs (loop3): invalid crc value [ 113.340669][ T4078] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=1048575 w/o reserve_root and reserve_node [ 113.355813][ T4095] loop2: detected capacity change from 0 to 1024 [ 113.377469][ T4078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.399374][ T4095] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 113.411179][ T4078] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 113.443083][ T4078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.499509][ T4112] loop2: detected capacity change from 0 to 1024 [ 113.564274][ T4112] EXT4-fs (loop2): Ignoring removed oldalloc option [ 113.583393][ T4112] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,oldalloc,delalloc,max_dir_size_kb=0x00000000000007b0,nojournal_checksum,stripe=0x0000000000000001,init_itable=0x0000000000001000,grpquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 113.619463][ T4112] EXT4-fs error (device loop2): ext4_lookup:1860: comm syz.2.1402: inode #12: comm syz.2.1402: iget: illegal inode # [ 113.679968][ T4128] loop2: detected capacity change from 0 to 1024 [ 113.744970][ T4128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.764460][ T30] audit: type=1400 audit(1793807948.129:1000): avc: denied { execute } for pid=4127 comm="syz.2.1412" path="/47/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.866963][ T4135] input: syz1 as /devices/virtual/input/input14 [ 113.882255][ T291] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 113.961958][ T4147] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 113.970010][ T4147] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.062257][ T322] Bluetooth: hci0: command 0x1009 tx timeout [ 114.083047][ T4156] loop5: detected capacity change from 0 to 40427 [ 114.105801][ T4156] F2FS-fs (loop5): invalid crc value [ 114.112935][ T4156] F2FS-fs (loop5): Found nat_bits in checkpoint [ 114.134283][ T4156] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 114.141202][ T4156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 114.172698][ T3197] attempt to access beyond end of device [ 114.172698][ T3197] loop5: rw=0, want=45072, limit=40427 [ 114.242304][ T291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.252744][ T291] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.303676][ T45] tipc: Left network mode [ 114.312777][ T800] attempt to access beyond end of device [ 114.312777][ T800] loop5: rw=2049, want=40968, limit=40427 [ 114.324061][ T39] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 114.342404][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.351699][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.359745][ T291] usb 4-1: SerialNumber: syz [ 114.402662][ T291] hub 4-1:1.0: bad descriptor, ignoring hub [ 114.408590][ T291] hub: probe of 4-1:1.0 failed with error -5 [ 114.467910][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.474992][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.482762][ T4165] device bridge_slave_0 entered promiscuous mode [ 114.491161][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.498245][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.505602][ T4165] device bridge_slave_1 entered promiscuous mode [ 114.542022][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.549355][ T4165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.556667][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.563692][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.581780][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.589482][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.597168][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.614040][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.622664][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.630836][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.638139][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.645701][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.654223][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.662530][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.669578][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.682329][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.690480][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.698479][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.706639][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.714417][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.725976][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.735929][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.750347][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.759436][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.761272][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 114.770908][ T39] usb 9-1: config 0 descriptor?? [ 114.778151][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.789704][ T751] usb 4-1: USB disconnect, device number 3 [ 114.790708][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.804058][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.812027][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.821368][ T4165] device veth0_vlan entered promiscuous mode [ 114.829654][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 114.840817][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.848674][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.859476][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.867767][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.879399][ T4165] device veth1_macvtap entered promiscuous mode [ 114.896301][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.904434][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.912788][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.927517][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.935913][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.965592][ T45] device bridge_slave_1 left promiscuous mode [ 114.971785][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.982609][ T45] device bridge_slave_0 left promiscuous mode [ 114.988779][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.997505][ T45] device veth1_macvtap left promiscuous mode [ 115.003748][ T45] device veth0_vlan left promiscuous mode [ 115.017440][ T4181] loop2: detected capacity change from 0 to 2048 [ 115.044207][ T4181] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.059538][ T4181] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 115.074023][ T4181] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 115.086490][ T4181] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.086490][ T4181] [ 115.096833][ T4181] EXT4-fs (loop2): Total free blocks count 0 [ 115.102989][ T4181] EXT4-fs (loop2): Free/Dirty block details [ 115.108892][ T4181] EXT4-fs (loop2): free_blocks=4096 [ 115.114246][ T4181] EXT4-fs (loop2): dirty_blocks=48 [ 115.119545][ T4181] EXT4-fs (loop2): Block reservation details [ 115.125720][ T4181] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 115.138997][ T4186] loop3: detected capacity change from 0 to 128 [ 115.166941][ T4186] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.177799][ T4186] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.252241][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 115.253457][ T39] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 115.270989][ T39] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 115.612331][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.623451][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.633220][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.640712][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.653617][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=0003, bcdDevice= 0.00 [ 115.662663][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.671347][ T60] usb 8-1: config 0 descriptor?? [ 115.849181][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 115.861524][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.861524][ T45] [ 115.992338][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.003494][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.013616][ T6] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 116.022894][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.032349][ T6] usb 4-1: config 0 descriptor?? [ 116.143349][ T60] hid-generic 0003:045E:0003.0017: unknown main item tag 0x2 [ 116.151060][ T60] hid-generic 0003:045E:0003.0017: unknown main item tag 0x2 [ 116.158486][ T60] hid-generic 0003:045E:0003.0017: unbalanced collection at end of report description [ 116.168200][ T60] hid-generic: probe of 0003:045E:0003.0017 failed with error -22 [ 116.344188][ T60] usb 8-1: USB disconnect, device number 2 [ 116.512463][ T6] hid (null): invalid report_size 1236 [ 116.518632][ T6] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 116.525778][ T6] hid-led 0003:27B8:01ED.0018: invalid report_size 1236 [ 116.532764][ T6] hid-led 0003:27B8:01ED.0018: item 0 2 1 7 parsing failed [ 116.540136][ T6] hid-led: probe of 0003:27B8:01ED.0018 failed with error -22 [ 116.718809][ T322] usb 4-1: USB disconnect, device number 4 [ 116.724723][ T6] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 116.931610][ T4201] loop7: detected capacity change from 0 to 40427 [ 117.026686][ T4201] F2FS-fs (loop7): invalid crc value [ 117.033402][ T4201] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 117.054701][ T4201] F2FS-fs (loop7): Start checkpoint disabled! [ 117.061381][ T4201] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 117.125043][ T763] attempt to access beyond end of device [ 117.125043][ T763] loop7: rw=2049, want=40968, limit=40427 [ 117.329734][ T4220] xt_hashlimit: size too large, truncated to 1048576 [ 117.382153][ T4226] loop8: detected capacity change from 0 to 1024 [ 117.422646][ T4226] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 117.435522][ T4226] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 117.503033][ T4226] EXT4-fs error (device loop8): ext4_ext_check_inode:501: inode #11: comm syz.8.1443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 117.534204][ T4226] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1443: couldn't read orphan inode 11 (err -117) [ 117.559106][ T4226] EXT4-fs (loop8): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 117.632675][ T60] usb 9-1: USB disconnect, device number 10 [ 117.659137][ T4226] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.1443: Invalid block bitmap block 0 in block_group 0 [ 117.699771][ T4226] Quota error (device loop8): write_blk: dquota write failed [ 117.712269][ T4226] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 117.732285][ T4226] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.1443: Failed to acquire dquot type 0 [ 117.766415][ T4226] Quota error (device loop8): write_blk: dquota write failed [ 117.781481][ T4226] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 117.811777][ T4226] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.1443: Failed to acquire dquot type 0 [ 119.182204][ C1] sched: RT throttling activated [ 121.239737][ T45] Quota error (device loop8): remove_tree: Getting block too big (0 >= 10) [ 121.253381][ T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 121.732244][ T322] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.752580][ T4269] loop7: detected capacity change from 0 to 40427 [ 121.767506][ T4269] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 121.782840][ T4269] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 121.791872][ T4269] F2FS-fs (loop7): invalid crc value [ 121.802553][ T4279] tipc: Started in network mode [ 121.802579][ T4279] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 121.802583][ T4280] FAULT_INJECTION: forcing a failure. [ 121.802583][ T4280] name failslab, interval 1, probability 0, space 0, times 0 [ 121.802606][ T4280] CPU: 0 PID: 4280 Comm: syz.6.1465 Not tainted syzkaller #0 [ 121.802626][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 121.802635][ T4280] Call Trace: [ 121.802641][ T4280] [ 121.802648][ T4280] __dump_stack+0x21/0x30 [ 121.802672][ T4280] dump_stack_lvl+0x110/0x170 [ 121.802691][ T4280] ? show_regs_print_info+0x20/0x20 [ 121.802708][ T4280] ? selinux_kernfs_init_security+0x143/0x450 [ 121.802729][ T4280] ? selinux_path_notify+0x660/0x660 [ 121.802749][ T4280] dump_stack+0x15/0x20 [ 121.802764][ T4279] tipc: Enabled bearer , priority 10 [ 121.802765][ T4280] should_fail+0x3ab/0x500 [ 121.802786][ T4280] __should_failslab+0xa4/0xe0 [ 121.802807][ T4280] should_failslab+0x9/0x20 [ 121.802825][ T4280] slab_pre_alloc_hook+0x39/0xd0 [ 121.802844][ T4280] ? __kernfs_new_node+0xa6/0x670 [ 121.802864][ T4280] __kmalloc_track_caller+0x6c/0x2c0 [ 121.802883][ T4280] ? number+0xc99/0xef0 [ 121.802899][ T4280] ? __kernfs_new_node+0xa6/0x670 [ 121.802917][ T4280] kstrdup_const+0x55/0x90 [ 121.802938][ T4280] __kernfs_new_node+0xa6/0x670 [ 121.802955][ T4280] ? kernfs_new_node+0x260/0x260 [ 121.802975][ T4280] ? vsnprintf+0x189d/0x1990 [ 121.802996][ T4280] kernfs_new_node+0x150/0x260 [ 121.803017][ T4280] kernfs_create_link+0xa4/0x200 [ 121.803036][ T4280] sysfs_do_create_link_sd+0x8a/0x110 [ 121.803053][ T4280] sysfs_create_link+0x68/0x80 [ 121.803069][ T4280] device_create_sys_dev_entry+0x11b/0x180 [ 121.803092][ T4280] ? device_add_attrs+0x710/0x710 [ 121.803114][ T4280] ? device_create_file+0x10e/0x1c0 [ 121.803136][ T4280] device_add+0xa6a/0xe90 [ 121.803158][ T4280] device_create+0x26c/0x300 [ 121.803180][ T4280] ? is_console_locked+0x9/0x20 [ 121.803199][ T4280] ? csi_J+0x8dd/0xeb0 [ 121.803220][ T4280] ? root_device_unregister+0x80/0x80 [ 121.803242][ T4280] ? reset_terminal+0x5df/0x940 [ 121.803264][ T4280] vcs_make_sysfs+0x35/0x90 [ 121.803281][ T4280] vc_allocate+0x5db/0x700 [ 121.803301][ T4280] ? vc_cons_allocated+0x70/0x70 [ 121.803320][ T4280] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 121.803340][ T4280] ? down+0x5d/0xc0 [ 121.803358][ T4280] con_install+0x9c/0x720 [ 121.803389][ T4280] ? __kasan_check_write+0x14/0x20 [ 121.803409][ T4280] ? mutex_lock+0x9b/0x1c0 [ 121.803431][ T4280] ? wait_for_completion_killable_timeout+0x10/0x10 [ 121.803456][ T4280] ? show_tty_active+0x30/0x30 [ 121.803477][ T4280] ? __kasan_check_write+0x14/0x20 [ 121.803498][ T4280] tty_init_dev+0xd0/0x500 [ 121.803517][ T4280] tty_open+0x9c6/0x1040 [ 121.803536][ T4280] ? tty_compat_ioctl+0x570/0x570 [ 121.803557][ T4280] chrdev_open+0x585/0x5f0 [ 121.803579][ T4280] ? cd_forget+0x170/0x170 [ 121.803600][ T4280] ? fsnotify_perm+0x3e9/0x5b0 [ 121.803623][ T4280] ? cd_forget+0x170/0x170 [ 121.803644][ T4280] do_dentry_open+0x82a/0x1010 [ 121.803669][ T4280] vfs_open+0x73/0x80 [ 121.803690][ T4280] path_openat+0x26e6/0x2f80 [ 121.803712][ T4280] ? __kasan_slab_alloc+0xc9/0xe0 [ 121.803731][ T4280] ? slab_post_alloc_hook+0x4f/0x2b0 [ 121.803754][ T4280] ? __x64_sys_openat+0x136/0x160 [ 121.803771][ T4280] ? x64_sys_call+0x219/0x9a0 [ 121.803790][ T4280] ? do_syscall_64+0x4c/0xa0 [ 121.803813][ T4280] ? do_filp_open+0x400/0x400 [ 121.803834][ T4280] do_filp_open+0x1df/0x400 [ 121.803854][ T4280] ? vfs_tmpfile+0x2d0/0x2d0 [ 121.803879][ T4280] do_sys_openat2+0x15e/0x7f0 [ 121.803897][ T4280] ? __se_sys_futex+0x135/0x330 [ 121.803919][ T4280] ? do_sys_open+0xe0/0xe0 [ 121.803936][ T4280] ? __x64_sys_futex+0x100/0x100 [ 121.803956][ T4280] ? ksys_write+0x1fa/0x260 [ 121.803976][ T4280] __x64_sys_openat+0x136/0x160 [ 121.803995][ T4280] x64_sys_call+0x219/0x9a0 [ 121.804013][ T4280] do_syscall_64+0x4c/0xa0 [ 121.804031][ T4280] ? clear_bhb_loop+0x50/0xa0 [ 121.804050][ T4280] ? clear_bhb_loop+0x50/0xa0 [ 121.804071][ T4280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.804093][ T4280] RIP: 0033:0x7fde8285534e [ 121.804111][ T4280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.804128][ T4280] RSP: 002b:00007fde812ebb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.804150][ T4280] RAX: ffffffffffffffda RBX: 00007fde812ec6c0 RCX: 00007fde8285534e [ 121.804165][ T4280] RDX: 0000000000000002 RSI: 00007fde812ebc00 RDI: ffffffffffffff9c [ 121.804180][ T4280] RBP: 00007fde8292cb70 R08: 0000000000000000 R09: 0000000000000000 [ 121.804193][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.804206][ T4280] R13: 00007fde82b1b038 R14: 00007fde82b1afa0 R15: 00007ffc13dc3e88 [ 121.804224][ T4280] [ 121.833356][ T4269] F2FS-fs (loop7): Found nat_bits in checkpoint [ 121.845358][ T4287] loop2: detected capacity change from 0 to 512 [ 121.877836][ T4269] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 122.300984][ T4269] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 122.322679][ T4287] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.340598][ T4292] loop6: detected capacity change from 0 to 512 [ 122.365914][ T4287] FAULT_INJECTION: forcing a failure. [ 122.365914][ T4287] name failslab, interval 1, probability 0, space 0, times 0 [ 122.380148][ T4287] CPU: 1 PID: 4287 Comm: syz.2.1468 Not tainted syzkaller #0 [ 122.387556][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.397630][ T4287] Call Trace: [ 122.400925][ T4287] [ 122.403869][ T4287] __dump_stack+0x21/0x30 [ 122.408219][ T4287] dump_stack_lvl+0x110/0x170 [ 122.412916][ T4287] ? show_regs_print_info+0x20/0x20 [ 122.418142][ T4287] ? memset+0x35/0x40 [ 122.422143][ T4287] dump_stack+0x15/0x20 [ 122.422910][ T4297] attempt to access beyond end of device [ 122.422910][ T4297] loop7: rw=2049, want=40968, limit=40427 [ 122.426314][ T4287] should_fail+0x3ab/0x500 [ 122.441904][ T4287] __should_failslab+0xa4/0xe0 [ 122.446678][ T4287] should_failslab+0x9/0x20 [ 122.451183][ T4287] slab_pre_alloc_hook+0x39/0xd0 [ 122.456121][ T4287] ? mempool_alloc_slab+0x1d/0x30 [ 122.461144][ T4287] kmem_cache_alloc+0x44/0x260 [ 122.465907][ T4287] ? mempool_free+0x330/0x330 [ 122.470581][ T4287] mempool_alloc_slab+0x1d/0x30 [ 122.475444][ T4287] mempool_alloc+0x167/0x4c0 [ 122.480029][ T4287] ? fat_get_mapped_cluster+0x1e5/0x3e0 [ 122.485569][ T4287] ? mempool_resize+0x880/0x880 [ 122.490412][ T4287] ? __kasan_check_write+0x14/0x20 [ 122.495526][ T4287] ? fat_get_block+0x54b/0xad0 [ 122.500295][ T4287] bio_alloc_bioset+0x124/0x910 [ 122.505141][ T4287] submit_bh_wbc+0x1c2/0x680 [ 122.509726][ T4287] ? fat_block_truncate_page+0x50/0x50 [ 122.515179][ T4287] ll_rw_block+0x1ed/0x250 [ 122.519590][ T4287] __block_write_begin_int+0x6b6/0x14d0 [ 122.525134][ T4287] ? fat_block_truncate_page+0x50/0x50 [ 122.530587][ T4287] ? page_zero_new_buffers+0x3c0/0x3c0 [ 122.536051][ T4287] ? futex_wake+0x64b/0x8f0 [ 122.540550][ T4287] ? wait_for_stable_page+0xdd/0x110 [ 122.545835][ T4287] cont_write_begin+0x598/0x7b0 [ 122.550682][ T4287] ? __stack_depot_save+0x34/0x480 [ 122.555789][ T4287] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 122.561686][ T4287] ? do_futex+0xdd3/0x2800 [ 122.566097][ T4287] ? kmem_cache_free+0x100/0x320 [ 122.571032][ T4287] ? do_sys_openat2+0x6df/0x7f0 [ 122.575880][ T4287] ? x64_sys_call+0x219/0x9a0 [ 122.580552][ T4287] ? do_syscall_64+0x4c/0xa0 [ 122.585134][ T4287] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.591195][ T4287] fat_write_begin+0xa0/0x170 [ 122.595865][ T4287] ? fat_block_truncate_page+0x50/0x50 [ 122.601320][ T4287] pagecache_write_begin+0x91/0xa0 [ 122.606431][ T4287] cont_write_begin+0x263/0x7b0 [ 122.611536][ T4287] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 122.617430][ T4287] ? proc_fail_nth_write+0x180/0x200 [ 122.622720][ T4287] ? proc_fail_nth_read+0x220/0x220 [ 122.627917][ T4287] ? security_file_permission+0x79/0xa0 [ 122.633464][ T4287] fat_write_begin+0xa0/0x170 [ 122.638142][ T4287] ? fat_block_truncate_page+0x50/0x50 [ 122.643598][ T4287] pagecache_write_begin+0x91/0xa0 [ 122.648706][ T4287] generic_cont_expand_simple+0xf0/0x1a0 [ 122.654329][ T4287] ? submit_bh+0x40/0x40 [ 122.658567][ T4287] ? rwsem_write_trylock+0x136/0x300 [ 122.663850][ T4287] ? clear_nonspinnable+0x60/0x60 [ 122.668870][ T4287] ? avc_policy_seqno+0x1b/0x70 [ 122.673716][ T4287] fat_cont_expand+0x69/0x200 [ 122.678387][ T4287] fat_fallocate+0x262/0x320 [ 122.682973][ T4287] vfs_fallocate+0x4b9/0x590 [ 122.687560][ T4287] __x64_sys_fallocate+0xc0/0x110 [ 122.692581][ T4287] x64_sys_call+0x7ec/0x9a0 [ 122.697078][ T4287] do_syscall_64+0x4c/0xa0 [ 122.701489][ T4287] ? clear_bhb_loop+0x50/0xa0 [ 122.706160][ T4287] ? clear_bhb_loop+0x50/0xa0 [ 122.710834][ T4287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.716720][ T4287] RIP: 0033:0x7fb9ccab4b19 [ 122.721133][ T4287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.740733][ T4287] RSP: 002b:00007fb9cb50c028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 122.749142][ T4287] RAX: ffffffffffffffda RBX: 00007fb9ccd3afa0 RCX: 00007fb9ccab4b19 [ 122.757121][ T4287] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 122.765086][ T4287] RBP: 00007fb9ccb4cb70 R08: 0000000000000000 R09: 0000000000000000 [ 122.773054][ T4287] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 122.781021][ T4287] R13: 00007fb9ccd3b038 R14: 00007fb9ccd3afa0 R15: 00007fffa03fb638 [ 122.788989][ T4287] [ 122.802445][ T322] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.807532][ T4287] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 122.822381][ T322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.830525][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1473'. [ 122.830587][ T322] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 122.839920][ T4301] tipc: Resetting bearer [ 122.872427][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.875169][ T3326] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 122.891882][ T4301] tipc: Disabling bearer [ 122.897769][ T322] usb 4-1: config 0 descriptor?? [ 122.907246][ T3326] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 122.936695][ T4292] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 122.952612][ T4292] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.993438][ T39] tipc: Node number set to 4269801488 [ 123.016491][ T763] tipc: Disabling bearer [ 123.022043][ T763] tipc: Left network mode [ 123.159241][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.172327][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.180019][ T4314] device bridge_slave_0 entered promiscuous mode [ 123.190420][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.197560][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.205249][ T4314] device bridge_slave_1 entered promiscuous mode [ 123.348162][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.355289][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.362596][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.369636][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.383158][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.390234][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.402275][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.409341][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.417660][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.426988][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.437184][ T30] audit: type=1400 audit(1793807957.799:1001): avc: denied { setattr } for pid=4350 comm="syz.6.1489" name="nfnetlink_queue" dev="proc" ino=4026532656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.437342][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.473888][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.480977][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.488265][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.495693][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.508496][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.516649][ T4355] input: syz1 as /devices/virtual/input/input15 [ 123.529610][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.539660][ T322] chicony 0003:04F2:1421.0019: unknown main item tag 0x0 [ 123.551461][ T322] chicony 0003:04F2:1421.0019: unbalanced collection at end of report description [ 123.572586][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.576580][ T322] chicony 0003:04F2:1421.0019: Chicony hid parse failed: -22 [ 123.587744][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.599576][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.605540][ T322] chicony: probe of 0003:04F2:1421.0019 failed with error -22 [ 123.623095][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.636096][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.643214][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.696962][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.727213][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.734494][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.788110][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.810181][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.825316][ T1508] usb 4-1: USB disconnect, device number 5 [ 123.861006][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.883104][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.894498][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.912025][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.928732][ T763] device bridge_slave_1 left promiscuous mode [ 123.940324][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.952879][ T4392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.961872][ T763] device bridge_slave_0 left promiscuous mode [ 123.969346][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.988948][ T763] device veth1_macvtap left promiscuous mode [ 124.001733][ T763] device veth0_vlan left promiscuous mode [ 124.092259][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 124.135148][ T4314] device veth0_vlan entered promiscuous mode [ 124.158156][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.169524][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.181028][ T4314] device veth1_macvtap entered promiscuous mode [ 124.194469][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.202895][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.213177][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.236156][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.258982][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.361755][ T4434] loop9: detected capacity change from 0 to 1024 [ 124.462371][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.463453][ T4434] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.474363][ T6] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.526236][ T6] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.551898][ T6] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.589044][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 124.608806][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.693570][ T4467] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 124.734324][ T30] audit: type=1400 audit(1793807959.099:1002): avc: denied { write } for pid=4468 comm="syz.6.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.803306][ T30] audit: type=1400 audit(1793807959.169:1003): avc: denied { connect } for pid=4474 comm="syz.6.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.909416][ T30] audit: type=1400 audit(1793807959.269:1004): avc: denied { watch_reads } for pid=4488 comm="syz.9.1528" path="/13/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.915407][ T4491] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 125.043877][ T4503] loop8: detected capacity change from 0 to 4096 [ 125.125017][ T4503] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 125.152451][ T6] hid (null): unknown global tag 0xc [ 125.158459][ T6] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 125.165480][ T6] lg-g15 0003:046D:C222.001A: unknown global tag 0xc [ 125.172246][ T6] lg-g15 0003:046D:C222.001A: item 0 0 1 12 parsing failed [ 125.179668][ T6] lg-g15: probe of 0003:046D:C222.001A failed with error -22 [ 125.308773][ T4508] ip_tables: iptables: counters copy to user failed while replacing table [ 125.318435][ T4508] ip_tables: iptables: counters copy to user failed while replacing table [ 125.358809][ T751] usb 8-1: USB disconnect, device number 3 [ 125.714518][ T4533] tipc: Started in network mode [ 125.719550][ T4533] tipc: Node identity d281ff9209be, cluster identity 4711 [ 125.726910][ T4533] tipc: Enabled bearer , priority 10 [ 125.734553][ T4532] tipc: Resetting bearer [ 125.742090][ T4532] tipc: Disabling bearer [ 127.204455][ T4536] loop7: detected capacity change from 0 to 16 [ 127.223997][ T4539] loop3: detected capacity change from 0 to 1024 [ 127.250590][ T4536] erofs: (device loop7): mounted with root inode @ nid 36. [ 127.279617][ T30] audit: type=1400 audit(1793807961.639:1005): avc: denied { rmdir } for pid=4534 comm="syz.7.1547" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.279766][ T4536] attempt to access beyond end of device [ 127.279766][ T4536] loop7: rw=0, want=34359214088, limit=16 [ 127.313532][ T4536] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 127.323685][ T4539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.346269][ T4539] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #12: block 7: comm syz.3.1548: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 127.429136][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.456512][ T4564] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.475932][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.498293][ T4564] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.503323][ T30] audit: type=1400 audit(1793807961.869:1006): avc: denied { getopt } for pid=4572 comm="syz.7.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.526938][ T4011] EXT4-fs error (device loop3): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 127.530474][ T4577] overlayfs: failed to clone upperpath [ 127.570173][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.599195][ T4583] loop6: detected capacity change from 0 to 128 [ 127.605460][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.605684][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.651032][ T4011] EXT4-fs error (device loop3): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 127.671924][ T30] audit: type=1400 audit(1793807962.029:1007): avc: denied { bind } for pid=4584 comm="syz.8.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.680208][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.696209][ T30] audit: type=1400 audit(1793807962.029:1008): avc: denied { name_bind } for pid=4584 comm="syz.8.1568" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 127.727274][ T30] audit: type=1400 audit(1793807962.029:1009): avc: denied { node_bind } for pid=4584 comm="syz.8.1568" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 127.748119][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.771087][ T4583] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.782096][ T4583] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.794390][ T4011] EXT4-fs error (device loop3): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.817283][ T4011] EXT4-fs error (device loop3): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 127.837734][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.852571][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.867953][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.883109][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.897811][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.925920][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.940837][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.943523][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 127.956158][ T4011] EXT4-fs warning (device loop3): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.203370][ T4618] loop7: detected capacity change from 0 to 128 [ 128.218978][ T30] audit: type=1400 audit(1793807962.579:1010): avc: denied { setopt } for pid=4619 comm="syz.9.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.332130][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.339523][ T4621] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.347499][ T4621] device bridge_slave_0 entered promiscuous mode [ 128.355149][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.362658][ T4621] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.370099][ T4621] device bridge_slave_1 entered promiscuous mode [ 128.407126][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.414172][ T4621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.421401][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.428430][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.446041][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.454468][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.461984][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.479201][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.487646][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.494725][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.503351][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.511788][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.518979][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.536140][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.544719][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.560580][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.577687][ T4621] device veth0_vlan entered promiscuous mode [ 128.585518][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.594220][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.601799][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.624173][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.634341][ T4621] device veth1_macvtap entered promiscuous mode [ 128.647344][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.667959][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.762069][ T4644] loop8: detected capacity change from 0 to 128 [ 128.763430][ T4646] FAULT_INJECTION: forcing a failure. [ 128.763430][ T4646] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.783693][ T4646] CPU: 0 PID: 4646 Comm: syz.0.1591 Not tainted syzkaller #0 [ 128.783954][ T4644] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 128.791099][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 128.791115][ T4646] Call Trace: [ 128.791121][ T4646] [ 128.791129][ T4646] __dump_stack+0x21/0x30 [ 128.820913][ T4646] dump_stack_lvl+0x110/0x170 [ 128.825618][ T4646] ? show_regs_print_info+0x20/0x20 [ 128.830838][ T4646] dump_stack+0x15/0x20 [ 128.835017][ T4646] should_fail+0x3ab/0x500 [ 128.839464][ T4646] should_fail_usercopy+0x1a/0x20 [ 128.844515][ T4646] strncpy_from_user+0x24/0x2d0 [ 128.849391][ T4646] setxattr+0x116/0x360 [ 128.853578][ T4646] ? path_setxattr+0x290/0x290 [ 128.858365][ T4646] ? mnt_want_write_file+0x232/0x420 [ 128.863683][ T4646] __se_sys_fsetxattr+0x168/0x1e0 [ 128.868736][ T4646] __x64_sys_fsetxattr+0xbf/0xd0 [ 128.873703][ T4646] x64_sys_call+0x19b/0x9a0 [ 128.878226][ T4646] do_syscall_64+0x4c/0xa0 [ 128.882662][ T4646] ? clear_bhb_loop+0x50/0xa0 [ 128.887366][ T4646] ? clear_bhb_loop+0x50/0xa0 [ 128.892061][ T4646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.897969][ T4646] RIP: 0033:0x7f8b37871b19 [ 128.902405][ T4646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.922031][ T4646] RSP: 002b:00007f8b362c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 128.930481][ T4646] RAX: ffffffffffffffda RBX: 00007f8b37af7fa0 RCX: 00007f8b37871b19 [ 128.938477][ T4646] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000003 [ 128.946465][ T4646] RBP: 00007f8b37909b70 R08: 0000000000000002 R09: 0000000000000000 [ 128.954457][ T4646] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 128.962444][ T4646] R13: 00007f8b37af8038 R14: 00007f8b37af7fa0 R15: 00007ffe95b9e708 [ 128.970445][ T4646] [ 129.025936][ T30] audit: type=1400 audit(1793807963.389:1011): avc: denied { write } for pid=4650 comm="syz.8.1593" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 129.089291][ T30] audit: type=1400 audit(1793807963.389:1012): avc: denied { open } for pid=4650 comm="syz.8.1593" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 129.152926][ T4657] loop9: detected capacity change from 0 to 1024 [ 129.181923][ T4655] netlink: 'syz.7.1595': attribute type 27 has an invalid length. [ 129.248330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 129.286285][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.310957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 129.317137][ T4657] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,norecovery,min_batch_time=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000080,nodelalloc,noquota,acl,auto_da_alloc=0x0000000000000343,usrquota,barrier=0x0000000000000007,barrier=0x000000000000,errors=continue. Quota mode: writeback. [ 129.319563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.358444][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.367006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.376917][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.385259][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.471821][ T4657] EXT4-fs (loop9): Remounting file system with no journal so ignoring journalled data option [ 129.518447][ T4681] loop7: detected capacity change from 0 to 512 [ 129.530131][ T4657] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 129.554517][ T4683] loop6: detected capacity change from 0 to 512 [ 129.563276][ T4657] EXT4-fs (loop9): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 129.585130][ T4681] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.625695][ T4679] EXT4-fs (loop9): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000006,block_validity,minixdf,grpjquota=,sysvgroups,. Quota mode: writeback. [ 129.648936][ T4250] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 129.662092][ T4683] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.691564][ T4250] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.709639][ T4683] EXT4-fs (loop6): 1 truncate cleaned up [ 129.720412][ T763] device bridge_slave_1 left promiscuous mode [ 129.753279][ T4695] loop7: detected capacity change from 0 to 2048 [ 129.760007][ T4683] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 129.762057][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.795736][ T763] device bridge_slave_0 left promiscuous mode [ 129.808059][ T4695] loop7: p3 < > p4 < > [ 129.813861][ T4695] loop7: partition table partially beyond EOD, truncated [ 129.827625][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.854286][ T763] device veth1_macvtap left promiscuous mode [ 129.869184][ T4695] loop7: p3 start 4284289 is beyond EOD, truncated [ 129.875933][ T763] device veth0_vlan left promiscuous mode [ 129.965907][ T961] udevd[961]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 130.010994][ T4717] loop6: detected capacity change from 0 to 256 [ 130.021425][ T4717] exfat: Deprecated parameter 'utf8' [ 130.027532][ T4717] exfat: Deprecated parameter 'namecase' [ 130.033537][ T4717] exfat: Deprecated parameter 'namecase' [ 130.040257][ T4716] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 130.060774][ T4716] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 130.095099][ T4717] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 130.135092][ T4717] device-mapper: table: 253:1: snapshot: COW device cannot be the same as origin device [ 130.153315][ T4717] device-mapper: ioctl: error adding target to table [ 130.182239][ T751] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 130.252332][ T4738] FAULT_INJECTION: forcing a failure. [ 130.252332][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 130.265028][ T4738] CPU: 0 PID: 4738 Comm: syz.9.1623 Not tainted syzkaller #0 [ 130.272434][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 130.282676][ T4738] Call Trace: [ 130.286146][ T4738] [ 130.289344][ T4738] __dump_stack+0x21/0x30 [ 130.293688][ T4738] dump_stack_lvl+0x110/0x170 [ 130.298549][ T4738] ? show_regs_print_info+0x20/0x20 [ 130.303845][ T4738] ? file_end_write+0x1b0/0x1b0 [ 130.308896][ T4738] dump_stack+0x15/0x20 [ 130.313058][ T4738] should_fail+0x3ab/0x500 [ 130.317487][ T4738] __should_failslab+0xa4/0xe0 [ 130.322262][ T4738] should_failslab+0x9/0x20 [ 130.326775][ T4738] slab_pre_alloc_hook+0x39/0xd0 [ 130.331727][ T4738] ? getname_flags+0xba/0x510 [ 130.336414][ T4738] kmem_cache_alloc+0x44/0x260 [ 130.341187][ T4738] getname_flags+0xba/0x510 [ 130.345697][ T4738] ? __kasan_check_write+0x14/0x20 [ 130.350817][ T4738] ? switch_fpu_return+0x15d/0x2c0 [ 130.355948][ T4738] __x64_sys_mkdirat+0x7c/0xa0 [ 130.360724][ T4738] x64_sys_call+0x37e/0x9a0 [ 130.365236][ T4738] do_syscall_64+0x4c/0xa0 [ 130.369666][ T4738] ? clear_bhb_loop+0x50/0xa0 [ 130.374354][ T4738] ? clear_bhb_loop+0x50/0xa0 [ 130.379037][ T4738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.384940][ T4738] RIP: 0033:0x7f279f82bb19 [ 130.389374][ T4738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.409163][ T4738] RSP: 002b:00007f279e283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 130.417586][ T4738] RAX: ffffffffffffffda RBX: 00007f279fab1fa0 RCX: 00007f279f82bb19 [ 130.425744][ T4738] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 130.433727][ T4738] RBP: 00007f279f8c3b70 R08: 0000000000000000 R09: 0000000000000000 [ 130.441719][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.449960][ T4738] R13: 00007f279fab2038 R14: 00007f279fab1fa0 R15: 00007fff0aa81418 [ 130.457943][ T4738] [ 131.107826][ T4743] device erspan1 entered promiscuous mode [ 132.221341][ T4748] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.230223][ T4748] FAT-fs (loop7): Filesystem has been set read-only [ 132.230226][ T751] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 132.230274][ T751] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 132.255667][ T751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.280918][ T4756] ip_tables: iptables: counters copy to user failed while replacing table [ 132.359412][ T4760] set_capacity_and_notify: 2 callbacks suppressed [ 132.359429][ T4760] loop6: detected capacity change from 0 to 8192 [ 132.385953][ T4760] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.522914][ T751] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 132.777587][ T60] usb 9-1: USB disconnect, device number 11 [ 132.954314][ T4777] loop6: detected capacity change from 0 to 40427 [ 133.002608][ T4783] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.012778][ T4777] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 133.032771][ T4777] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 133.055396][ T4777] F2FS-fs (loop6): invalid crc value [ 133.079259][ T4777] F2FS-fs (loop6): Found nat_bits in checkpoint [ 133.132937][ T4797] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1647'. [ 133.142440][ T4777] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 133.149490][ T4777] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 133.556228][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.556253][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.572251][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.583153][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.598460][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.612241][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.627562][ T4777] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 133.963120][ T4802] loop0: detected capacity change from 0 to 131072 [ 134.003900][ T4802] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 134.022270][ T4802] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.031047][ T4802] F2FS-fs (loop0): invalid crc value [ 134.061269][ T4802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.138601][ T4802] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.151341][ T4802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 134.159321][ T4444] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 134.200970][ T4834] loop7: detected capacity change from 0 to 16 [ 134.216886][ T4834] erofs: Bad value for 'cache_strategy' [ 134.286585][ T4834] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1659'. [ 134.542334][ T4444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.557528][ T4444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.578468][ T4444] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.595313][ T4444] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.619097][ T4444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.633604][ T4444] usb 7-1: config 0 descriptor?? [ 134.772487][ T30] audit: type=1326 audit(1793807969.139:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.8.1671" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d8d2db19 code=0x7fc00000 [ 134.812855][ T4870] loop0: detected capacity change from 0 to 16 [ 134.898184][ T4870] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.925533][ T4870] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 89 [ 134.943413][ T4870] erofs: (device loop0): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 134.952739][ T4870] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 134.962461][ T4870] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 134.972276][ T4870] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 134.982869][ T4870] attempt to access beyond end of device [ 134.982869][ T4870] loop0: rw=524288, want=136, limit=16 [ 134.994416][ T4870] attempt to access beyond end of device [ 134.994416][ T4870] loop0: rw=524288, want=128, limit=16 [ 135.005652][ T4870] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 135.018934][ T4870] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 135.104346][ T4444] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 135.119254][ T4444] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 135.385940][ T60] usb 7-1: USB disconnect, device number 3 [ 135.568038][ T30] audit: type=1326 audit(1793807969.929:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.8.1671" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d8d2db19 code=0x7fc00000 [ 135.738579][ T4898] loop0: detected capacity change from 0 to 40427 [ 135.772500][ T4898] F2FS-fs (loop0): invalid crc value [ 135.790188][ T4898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.834526][ T8] tipc: Left network mode [ 135.893580][ T4898] F2FS-fs (loop0): Start checkpoint disabled! [ 135.921827][ T4898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 136.217670][ T763] attempt to access beyond end of device [ 136.217670][ T763] loop0: rw=2049, want=40976, limit=40427 [ 136.299040][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1689'. [ 136.363062][ T8] device bridge_slave_1 left promiscuous mode [ 136.371267][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.394564][ T8] device bridge_slave_0 left promiscuous mode [ 136.410883][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.441047][ T8] device veth1_macvtap left promiscuous mode [ 136.457318][ T8] device veth0_vlan left promiscuous mode [ 136.513032][ T4921] loop8: detected capacity change from 0 to 1024 [ 136.548465][ T4921] EXT4-fs (loop8): Ignoring removed bh option [ 136.572343][ T4921] EXT4-fs (loop8): Unrecognized mount option "fsmagic=0x0000000000000000" or missing value [ 136.963708][ T30] audit: type=1326 audit(1793807971.329:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.8.1706" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d8d2db19 code=0x0 [ 137.200681][ T4936] overlayfs: failed to clone upperpath [ 137.377924][ T30] audit: type=1400 audit(1793807971.739:1016): avc: denied { setopt } for pid=4948 comm="syz.6.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.405161][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xd27e, nop [ 137.427766][ T30] audit: type=1400 audit(1793807971.769:1017): avc: denied { map } for pid=4950 comm="syz.0.1703" path="socket:[44033]" dev="sockfs" ino=44033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 137.434684][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0xfeed [ 137.479880][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x535b [ 137.491180][ T4955] loop0: detected capacity change from 0 to 256 [ 137.511357][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x9e84 [ 137.535392][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x8ff2 [ 137.546345][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.551273][ T4937] kvm [4935]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0xe960 [ 137.566366][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.594235][ T4955] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.688500][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.707387][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.878091][ T4974] kvm [4972]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 137.912463][ T4974] kvm [4972]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 138.456545][ T4989] loop0: detected capacity change from 0 to 512 [ 138.486381][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 138.533270][ T4989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.573231][ T4989] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1720: invalid indirect mapped block 32768 (level 2) [ 138.659807][ T4989] EXT4-fs (loop0): 1 orphan inode deleted [ 138.701353][ T4989] EXT4-fs (loop0): 1 truncate cleaned up [ 138.742694][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.793798][ T4989] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 138.812919][ T4989] overlayfs: failed to set xattr on upper [ 138.833318][ T4989] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1479: inode #12: block 7: comm syz.0.1720: path /: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 138.925916][ T4621] EXT4-fs error (device loop0): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 17 [ 138.964359][ T4621] EXT4-fs error (device loop0): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 17 [ 138.995654][ T5002] smpboot: CPU 1 is now offline [ 139.105730][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 139.152108][ T961] udevd[961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 139.373154][ T8] device bridge_slave_1 left promiscuous mode [ 139.395888][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.404471][ T5014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.433710][ T8] device bridge_slave_0 left promiscuous mode [ 139.463416][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.504271][ T8] device veth1_macvtap left promiscuous mode [ 139.536153][ T8] device veth0_vlan left promiscuous mode [ 139.915756][ T5023] loop7: detected capacity change from 0 to 512 [ 139.965455][ T961] udevd[961]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 139.983166][ T5023] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.042920][ T5023] EXT4-fs (loop7): 1 truncate cleaned up [ 140.065499][ T5023] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 140.394322][ T961] udevd[961]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 140.434773][ T961] udevd[961]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 140.787567][ T5035] device erspan1 entered promiscuous mode [ 140.870369][ T5044] loop8: detected capacity change from 0 to 256 [ 140.878362][ T5046] loop7: detected capacity change from 0 to 128 [ 140.923541][ T5046] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 140.934945][ T5044] FAT-fs (loop8): Directory bread(block 64) failed [ 140.941461][ T5044] FAT-fs (loop8): Directory bread(block 65) failed [ 140.985664][ T5049] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 141.003936][ T5046] attempt to access beyond end of device [ 141.003936][ T5046] loop7: rw=34817, want=155, limit=128 [ 141.015036][ T5044] FAT-fs (loop8): Directory bread(block 66) failed [ 141.021792][ T5044] FAT-fs (loop8): Directory bread(block 67) failed [ 141.049494][ T5049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 141.082288][ T5044] FAT-fs (loop8): Directory bread(block 68) failed [ 141.088824][ T5044] FAT-fs (loop8): Directory bread(block 69) failed [ 141.123349][ T5044] FAT-fs (loop8): Directory bread(block 70) failed [ 141.130004][ T5044] FAT-fs (loop8): Directory bread(block 71) failed [ 141.161578][ T5044] FAT-fs (loop8): Directory bread(block 72) failed [ 141.170057][ T763] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.187146][ T5044] FAT-fs (loop8): Directory bread(block 73) failed [ 141.609914][ T5060] loop7: detected capacity change from 0 to 256 [ 141.674372][ T5060] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 148.968178][ T5085] input: syz0 as /devices/virtual/input/input16 [ 149.213918][ T8] device bridge_slave_1 left promiscuous mode [ 149.220051][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.252850][ T8] device bridge_slave_0 left promiscuous mode [ 149.258990][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.293017][ T8] device veth1_macvtap left promiscuous mode [ 149.299028][ T8] device veth0_vlan left promiscuous mode SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1728 state=3 status=67 (errno 32: Broken pipe) [ 150.008597][ T30] audit: type=1400 audit(1793807984.369:1018): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14703]" dev="pipefs" ino=14703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 150.762747][ T8] device bridge_slave_1 left promiscuous mode [ 150.768877][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.776472][ T8] device bridge_slave_0 left promiscuous mode [ 150.782770][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.790751][ T8] device veth1_macvtap left promiscuous mode [ 150.796939][ T8] device veth0_vlan left promiscuous mode [ 150.983640][ T8] tipc: Left network mode [ 151.312640][ T8] device bridge_slave_1 left promiscuous mode [ 151.318764][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.326431][ T8] device bridge_slave_0 left promiscuous mode [ 151.332628][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.340303][ T8] device veth1_macvtap left promiscuous mode [ 151.346522][ T8] device veth0_vlan left promiscuous mode