last executing test programs: 54.124882131s ago: executing program 32 (id=148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1e0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 49.892942148s ago: executing program 33 (id=224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000380)="0e0412b60f0c0df0f2747782bb714a7661", 0xfdef) 49.07910011s ago: executing program 0 (id=242): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x2000c10, &(0x7f0000000300), 0xff, 0x23f, &(0x7f0000000380)="$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") setxattr$system_posix_acl(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000400000000000400000000000000100000000000000020"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000000d4c0)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000000d500)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f000000d540)='./mnt\x00', &(0x7f000000d580)='overlay\x00', 0x0, &(0x7f000000d5c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 48.897958308s ago: executing program 0 (id=247): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 48.790663559s ago: executing program 0 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfa) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x5, 0xeeee0000, 0x0, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xffffffffbffffc02, 0x0, 0x2, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x27800000000, 0x0, 0x1, r2, 0x5}) 48.605738818s ago: executing program 0 (id=270): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x12148c5, &(0x7f0000000000)={[{@utf8no}, {@fat=@flush}, {@shortname_mixed}, {@fat=@debug}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlateno}, {@uni_xlate}]}, 0x0, 0x2d9, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x3b37cc6, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 48.410391238s ago: executing program 34 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0xffff62ab, 0x0, 0x0, 0xfffffffe, 0x4, 0xa}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.400988219s ago: executing program 0 (id=264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 48.392070849s ago: executing program 0 (id=266): unshare(0x2040400) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c80), 0x1, 0x4bc, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2002, 0xa) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/224, 0xe0) fallocate(0xffffffffffffffff, 0x10, 0x1, 0x434f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000012c0)={0xc, r0, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 48.29314375s ago: executing program 35 (id=266): unshare(0x2040400) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c80), 0x1, 0x4bc, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2002, 0xa) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/224, 0xe0) fallocate(0xffffffffffffffff, 0x10, 0x1, 0x434f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000012c0)={0xc, r0, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 47.441839345s ago: executing program 3 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.776613892s ago: executing program 3 (id=284): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 46.437000487s ago: executing program 3 (id=286): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0xa03, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x7ff, 0x7, 0x8, 0xc, 0x0, 0x9, 0x7, 0x4, 0x15, 0x1, 0x3, 0x9}, {0x80000002, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0xf2, 0xf9, 0x1, 0xff, 0x7}], 0x8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.11043885s ago: executing program 3 (id=290): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@umask={'umask', 0x3d, 0x200}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@shortname_lower}, {@utf8no}, {@numtail}]}, 0x3, 0x27c, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 46.015509879s ago: executing program 3 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x208800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x10) 45.789217942s ago: executing program 3 (id=309): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x0) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) preadv2(r0, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/181, 0xb5}], 0x2, 0xa, 0xfffff53a, 0x0) 45.730155658s ago: executing program 36 (id=309): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x0) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) preadv2(r0, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/181, 0xb5}], 0x2, 0xa, 0xfffff53a, 0x0) 43.053705158s ago: executing program 9 (id=351): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x474c, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000003c0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000400)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/33, 0x11}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 42.558219788s ago: executing program 9 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x7, 0x40, 0x0, 0x6, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x2, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.212513953s ago: executing program 9 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 42.072093677s ago: executing program 9 (id=361): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@umask={'umask', 0x3d, 0x200}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@shortname_lower}, {@utf8no}, {@numtail}]}, 0x3, 0x27c, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 41.966592188s ago: executing program 9 (id=363): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x10, 0x10, &(0x7f0000000900)="0000ffffffffa000", &(0x7f0000000940)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 41.673030497s ago: executing program 9 (id=365): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x801) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0xe0000003}) epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 41.659475379s ago: executing program 37 (id=365): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x801) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0xe0000003}) epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 39.773404449s ago: executing program 6 (id=384): setresuid(0xee00, 0xee00, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffffa) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, r2}) close(r0) 39.618109314s ago: executing program 6 (id=386): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002280)={0x1, &(0x7f00000022c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) kcmp(r0, r0, 0x3, 0xffffffffffffffff, r1) 39.586722428s ago: executing program 6 (id=387): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000002380)={@void, @val={0x1, 0x0, 0x9, 0x6, 0x16, 0xc}, @ipv4=@icmp={{0x7, 0x4, 0x0, 0x7, 0x24, 0x68, 0x0, 0xfb, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@end, @generic={0x82, 0x3, '0'}, @end]}}, @address_reply={0x12, 0x0, 0x0, 0xffffffff}}}, 0x2e) 39.127672924s ago: executing program 6 (id=397): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xa04080, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006340)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000006380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x1000000, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x4, 0x0, 0x0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 38.264908311s ago: executing program 6 (id=406): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x60, &(0x7f00000000c0)}, 0x10) 37.440871604s ago: executing program 6 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000004c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001800)={0x1, &(0x7f0000001840)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000001880)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 37.434087295s ago: executing program 38 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000004c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001800)={0x1, &(0x7f0000001840)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000001880)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 27.295391907s ago: executing program 2 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2, r0}, 0xc) 27.275927949s ago: executing program 2 (id=565): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x4000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000400)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0xfffffffe, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000000540), 0x800001d, 0x1c) 27.160980961s ago: executing program 2 (id=567): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000240), 0x2, 0x259, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x1) pwrite64(r0, &(0x7f0000000dc0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000209000/0x400000)=nil) 26.880763619s ago: executing program 2 (id=571): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0xfe, 0x250, &(0x7f0000000500)="$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") syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x26}, 0x28) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 26.254193593s ago: executing program 2 (id=579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x28) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 25.647984274s ago: executing program 2 (id=586): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000180)={0x0, [{0x2, 0x108, 0x4, &(0x7f0000000340)="7a94aeec405fd29049960151d527c55942a23845a61c9bda6f947680ecbdfa5d09"}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x40007ff, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x3, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x161, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4002, 0x548803b5, 0x300000, 0x4000000000000001}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.546458904s ago: executing program 39 (id=586): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000180)={0x0, [{0x2, 0x108, 0x4, &(0x7f0000000340)="7a94aeec405fd29049960151d527c55942a23845a61c9bda6f947680ecbdfa5d09"}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x40007ff, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x3, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x161, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4002, 0x548803b5, 0x300000, 0x4000000000000001}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.4352457s ago: executing program 7 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000100)='10', 0x2) r1 = syz_create_resource$futex(&(0x7f0000000140)) r2 = syz_create_resource$futex(0x0) futex(r1, 0x8, 0x0, 0x0, r2, 0x1) 18.921773922s ago: executing program 7 (id=719): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir\x00', 0x0, 0x42) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) openat(0xffffffffffffff9c, &(0x7f0000000600)='mnt/encrypted_dir/file\x00', 0x42, 0x180) 18.780041336s ago: executing program 7 (id=721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 18.711163743s ago: executing program 7 (id=722): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000000c0)=0xfffffffd, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xe7, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 18.667883647s ago: executing program 7 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18.596202525s ago: executing program 7 (id=725): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000900)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x8ce4) 17.491098776s ago: executing program 1 (id=751): r0 = epoll_create(0x3fd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x10000008}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x101042, 0x5) ioctl(r1, 0x2272, 0x0) 17.460937569s ago: executing program 1 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000006f40), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000006f80)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006fc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007040)={&(0x7f0000007080)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007140)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 17.392558946s ago: executing program 1 (id=755): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x28a) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010003904f57de7f5ab71b7af000003e4", @ANYRES32=r3, @ANYBLOB="0300000061100700200012800800010073697400140002800800140009"], 0x40}}, 0x24008044) 17.340571881s ago: executing program 1 (id=766): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x50) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 17.05862322s ago: executing program 1 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16.348304992s ago: executing program 1 (id=759): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8840, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r1 = syz_open_pts(r0, 0x141601) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x1, 0x20f, &(0x7f0000000500)="$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") ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x6, 0x17, 0x0, 0x1, 0x16, "80249b536148bfe26e3088fd0cd6b978c9b962", 0x3ff, 0xa}) write(r1, &(0x7f00000001c0)="d5", 0xfffffedf) 6.291988546s ago: executing program 5 (id=849): r0 = inotify_init() syz_io_uring_setup(0x141c, &(0x7f0000001300)={0x0, 0x62b7, 0x800, 0x101, 0x1ed}, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x8082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001600)={'syzkaller0\x00', 0xca02}) readv(r1, &(0x7f0000001640)=[{&(0x7f0000001680)=""/84, 0x54}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.124631813s ago: executing program 5 (id=851): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="e1", 0x1}, {&(0x7f0000001c80)="7201", 0x2}], 0x2}}], 0x2, 0x4000000) 6.04878389s ago: executing program 5 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x11, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.163997509s ago: executing program 5 (id=863): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.57238131s ago: executing program 40 (id=725): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000900)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x8ce4) 3.035960554s ago: executing program 4 (id=879): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 2.48867195s ago: executing program 5 (id=881): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001900)={0x14, 0x0, &(0x7f00000018c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.48838447s ago: executing program 4 (id=882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 1.857870343s ago: executing program 4 (id=884): syz_mount_image$exfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x0, &(0x7f0000000880)=ANY=[], 0xfd, 0x1501, &(0x7f0000000f40)="$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") openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003640)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000003680), 0x208e24b) ftruncate(r0, 0x1) mknod$loop(0x0, 0x0, 0x0) 1.121605307s ago: executing program 4 (id=887): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000580)=r2, 0x4) 1.107882479s ago: executing program 41 (id=759): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8840, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r1 = syz_open_pts(r0, 0x141601) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x1, 0x20f, &(0x7f0000000500)="$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") ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x6, 0x17, 0x0, 0x1, 0x16, "80249b536148bfe26e3088fd0cd6b978c9b962", 0x3ff, 0xa}) write(r1, &(0x7f00000001c0)="d5", 0xfffffedf) 1.09186108s ago: executing program 4 (id=889): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ff99f06, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x60600, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x9a, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x404, 0x554, 0x80000001, 0x11004, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1, 0x33a0, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x2, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r1}, 0x38) 1.084130711s ago: executing program 8 (id=890): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1a10c10, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000780)="$eJzs3U9rK1UUAPAz+ddUFwniRhEc0IWr8urWTaM8QexKiaBuDL4+kKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP+g/n6b3t57z52TOUOyyskXr+0On+0lcXz6W7TbSdS2YivOkuhGLSrfRSMAgMfjLMvizywimsX/ycqRjdrdZQUA3KXi87/w0LkAAPfj408/+7C3vf30ozRtxyudk3E/iYjdk3G/WO89j69iFDvxJDpxHpFdKMbvf7D9NBpprhtv7h6N++O583t/xPokfjM60V0cv5kWyvh+RP63GS9EGr3nzeqoTry8OP7tBfHRb8Vbb8zkvxGd+PXL2ItRPIs8dhr/7Waavpd9f/rN5/ll8vikFv21yb7SekRWv7eiAAAAAAAAAAAAAAAAAAAAAADw6G2kaVK075n078mnyv479fPJ+kZa6c735yniL/oFF/2Bsihb9Bxl8UPVX+dJmqZZuXEa34hXG35YAAAAAAAAAAAAAAAAAAAAAHIHXx8OB6PRzv6NB/XhYFR1A6i+1v9fD9yamXk9DoeD+vID11a/1my3gTzXKzdHoxG3cFuuH8TP63k+S/b8WOb7709emxb3kzK8KsytvoqX3r3IMC2Xqps8HCTXXatdFe6n2aVWrJxGkszNTGo72tnPJo/EeTZf0/aSm9m6hbuRP6OtFxcu/ZVl2WrnvPN7UaNyJpm02FgtjWY5WPq0tC/X4pflBy59y6jf9D0HAAAAAAAAAAAAAAAAAABYbP6L0/9wfGVo7c6SAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB7Nv39/2rQjoj5mUuDozL4qj3loBX7Bw/8EgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+DsAAP//tERGig==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000ac0)={@map=r0, 0x2, 0x35, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ftruncate(r0, 0x0) 168.725773ms ago: executing program 8 (id=891): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000540), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000580)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000a00)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 168.251313ms ago: executing program 4 (id=892): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 83.362242ms ago: executing program 8 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000005c0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) 40.835756ms ago: executing program 8 (id=901): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x1, 0x0, 0x0, &(0x7f0000000740)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000032c0)={0x1, 0x0, [{0xeeef1ff8, 0x39, &(0x7f0000000980)=""/57}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000800)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000840)) 38.038487ms ago: executing program 8 (id=902): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x2c, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000e00)=ANY=[], 0x0) syz_emit_ethernet(0xd81, 0x0, 0x0) 8.62746ms ago: executing program 5 (id=894): syz_emit_ethernet(0x86, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000800, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5531, &(0x7f0000006140)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc795CwNhHEAflu+Av6LxLj3Ku7gGB7BpTsNB/ASHMAFXsGdK86AO49gqKEdEJQFTYdivjxPAqWTzo+ZBBYzk7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzSj2q9+Prpzee+Obv6Wt8j4t/WPLMBAAAALtlW60XzYdbeP0vtL1LTq3RfRER5ceVe16MYn2WOUk715/kvp89Xf43hW0STsP+OSXodvI2IXy9vNXsAAAB4/DbL1bxdrbdvs3sPiCG1mzbl83eZ8oqIqGY/M6WV+7zXOZLG6ff9EB9yxKWNrZhmCmu33B5ypV2l+bsfd+2mJ5eivZQXux0HmW3uAADAgEZnl2FXIQAAAAzp/b0HQG7XHc8VcTjKPB4FTs76P+mSBgAAAPyPinsPAAAAAOiq/tixQ7P+H6j+X921/t/TVPtP/T8AAADop63/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC1tq/Vis1zN++bs6n7yzAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAn+3z9QcgjoBuCEIgMcBCr9fS0g0xgCIG/gSkKL2W0Cs/2gy0qhC3sKHMXRCMCCGBwtb/oXMrdSlbhxuCxAzy2c45PyQOGtl3yecjPb+vHcvv+3xSlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBq/N42TbNPJ47g49mD7zlrWP9zTZ+5tPlrOWhZHdSa9GF6p7kTd5hIBAADgSBtVd5Kyvg8hPE63VrI+7kzq/7Q8J6v5f3guj8t6fm/dX/Zl7Z+133978tLOQJ18nOyiV9aHg7P782od+kwXxPP/8vP8xkT5s5dk8oHEH45eHKeT+xl9d//+++1JeKKObAGA/+NM2RdB+fdQ1vebTAyAY6NVKbzL+j/pNJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB3Go/BMGUchhOXWNM483L6zdlB/b/PRctku3r27Gb6ZXjO7RBpCuLI+HJytdTbz7eat29dWh8PBjfqDV0MITY3+bjH9ax/PcHIIjdwfwSEFcfFhz0s+ixE0+EsJAICFcnLG89KiZXX943RrJTsWLYXw94+76/83KnGYsf5/8snFB9WxqvV//1BmeTT0Nq5/0bt56/Zb69dXrw6uDj57+1z/nf75SxcuXOpNnpX0PDEBAADg6bSLVq3/46X96/+nK3GYsf7/8vv+19WxEvX/gaaLfk1nAgAAcLy98Npff0YHHI/a7fDV6sbGjX6+3dk/l28bSPU/O1G0av2fLDWdFQAAAFCH8Sjatf5/uRKHGdf/n/3p5V+q10xCCKeK9f8za58PL9c3nblWx78TNz1HAAAAmnWqaNX1/3Ty/n+888pDHEJ48/U8Lr4GcKb6P/ng25+rY1Xf/z9f3xTnUtzN78ek74bQ6jadEQAAAEfZyaJlxf4f6dbKp7+e/qjt/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAuv0TAAD//yOtPBY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000005740)='./file1\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$selinux_load(r0, &(0x7f00000002c0)={0xf97cff8c, 0x8}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000060c0)='./file1\x00', 0x46042, 0x179) write$P9_RREADDIR(r1, &(0x7f0000006100)={0xb, 0x29, 0x1, {0xe0}}, 0xb) 0s ago: executing program 8 (id=904): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.098937][ T1272] device veth0_vlan entered promiscuous mode [ 49.149472][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.166942][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.175043][ T1315] netlink: 52 bytes leftover after parsing attributes in process `syz.7.327'. [ 49.189486][ T1317] loop6: detected capacity change from 0 to 512 [ 49.196319][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.203449][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.242472][ T1317] EXT4-fs (loop6): orphan cleanup on readonly fs [ 49.257265][ T1317] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 49.269332][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.293048][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.300801][ T1317] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 49.309968][ T1318] netlink: 52 bytes leftover after parsing attributes in process `syz.7.327'. [ 49.324410][ T1317] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.328: attempt to clear invalid blocks 2 len 1 [ 49.350297][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.366133][ T1317] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.328: invalid indirect mapped block 1819239214 (level 0) [ 49.367567][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.388324][ T1317] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.328: invalid indirect mapped block 1819239214 (level 1) [ 49.412131][ T1313] loop8: detected capacity change from 0 to 40427 [ 49.418891][ T1317] EXT4-fs (loop6): 1 truncate cleaned up [ 49.424561][ T1317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 49.448777][ T1313] F2FS-fs (loop8): invalid crc value [ 49.450107][ T1272] device veth1_macvtap entered promiscuous mode [ 49.468478][ T1325] loop7: detected capacity change from 0 to 512 [ 49.492095][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.508084][ T1313] F2FS-fs (loop8): Found nat_bits in checkpoint [ 49.526576][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.535280][ T1325] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 49.545261][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.564927][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.576772][ T1325] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.583820][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.596046][ T1020] EXT4-fs (loop6): unmounting filesystem. [ 49.611208][ T1325] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.646515][ T1313] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 49.656965][ T1325] Quota error (device loop7): write_blk: dquota write failed [ 49.681435][ T1325] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 49.696952][ T1325] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.330: Failed to acquire dquot type 0 [ 49.728721][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 49.816411][ T1346] syz.8.326: attempt to access beyond end of device [ 49.816411][ T1346] loop8: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 49.846984][ T1346] syz.8.326: attempt to access beyond end of device [ 49.846984][ T1346] loop8: rw=2049, sector=49152, nr_sectors = 296 limit=40427 [ 50.006792][ T1110] syz-executor: attempt to access beyond end of device [ 50.006792][ T1110] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.014675][ T28] audit: type=1400 audit(1793911704.366:686): avc: denied { bind } for pid=1350 comm="syz.7.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.054939][ T28] audit: type=1400 audit(1793911704.396:687): avc: denied { setopt } for pid=1350 comm="syz.7.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.081031][ T28] audit: type=1400 audit(1793911704.406:688): avc: denied { write } for pid=1350 comm="syz.7.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.094893][ T1355] loop6: detected capacity change from 0 to 512 [ 50.113334][ T1355] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 50.211216][ T1364] loop8: detected capacity change from 0 to 16 [ 50.224977][ T1364] erofs: (device loop8): mounted with root inode @ nid 36. [ 50.237325][ T1364] syz.8.337: attempt to access beyond end of device [ 50.237325][ T1364] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 50.251317][ T1364] syz.8.337: attempt to access beyond end of device [ 50.251317][ T1364] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 50.265210][ T1364] syz.8.337: attempt to access beyond end of device [ 50.265210][ T1364] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 50.278434][ T1364] syz.8.337: attempt to access beyond end of device [ 50.278434][ T1364] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 50.279122][ T1366] kvm: pic: level sensitive irq not supported [ 50.292444][ T1366] kvm: pic: non byte read [ 50.303208][ T1368] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 50.307659][ T1366] kvm: pic: non byte read [ 50.312593][ T1368] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 50.322859][ T1366] kvm: pic: non byte read [ 50.329578][ T1366] kvm: pic: non byte read [ 50.335928][ T1366] kvm: pic: non byte read [ 50.340959][ T1366] kvm: pic: single mode not supported [ 50.340971][ T1366] kvm: pic: level sensitive irq not supported [ 50.346629][ T1366] kvm: pic: non byte read [ 50.357660][ T1366] kvm: pic: level sensitive irq not supported [ 50.357756][ T1366] kvm: pic: non byte read [ 50.369516][ T1366] kvm: pic: level sensitive irq not supported [ 50.369573][ T1366] kvm: pic: non byte read [ 50.380608][ T1366] kvm: pic: single mode not supported [ 50.380618][ T1366] kvm: pic: level sensitive irq not supported [ 50.386288][ T1366] kvm: pic: non byte read [ 50.426707][ T300] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 50.509533][ T28] audit: type=1400 audit(1793911704.866:689): avc: denied { read } for pid=1383 comm="syz.6.346" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.566158][ T28] audit: type=1400 audit(1793911704.866:690): avc: denied { open } for pid=1383 comm="syz.6.346" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.607878][ T300] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.635196][ T300] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.664276][ T300] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.707481][ T300] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.727674][ T300] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 50.747075][ T300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.789085][ T300] usb 8-1: config 0 descriptor?? [ 51.201572][ T300] input: HID 17ef:6047 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:17EF:6047.0001/input/input5 [ 51.289839][ T300] lenovo 0003:17EF:6047.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 51.432554][ T1417] loop5: detected capacity change from 0 to 512 [ 51.454311][ T1417] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.470119][ T1417] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 51.479272][ T1417] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 51.493982][ T1417] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.356: attempt to clear invalid blocks 2 len 1 [ 51.513785][ T1417] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.356: invalid indirect mapped block 1819239214 (level 0) [ 51.542321][ T1417] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.356: invalid indirect mapped block 1819239214 (level 1) [ 51.580467][ T1417] EXT4-fs (loop5): 1 truncate cleaned up [ 51.586234][ T1417] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 51.609397][ T803] EXT4-fs (loop5): unmounting filesystem. [ 51.641080][ T1425] ip_tables: iptables: counters copy to user failed while replacing table [ 51.654634][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.670537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.682325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.685384][ T1427] loop9: detected capacity change from 0 to 256 [ 51.705066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.724541][ T28] audit: type=1400 audit(1793911706.076:691): avc: denied { mount } for pid=1426 comm="syz.9.361" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.749532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.758447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.766830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.776811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.785893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.866637][ T1432] loop8: detected capacity change from 0 to 512 [ 51.873276][ T1432] EXT4-fs: Ignoring removed nobh option [ 51.882584][ T1432] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 51.893188][ T1432] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (33925!=0) [ 51.902492][ T1432] EXT4-fs (loop8): group descriptors corrupted! [ 51.950237][ T671] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.199498][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.206569][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.214040][ T1437] device bridge_slave_0 entered promiscuous mode [ 52.221070][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.228914][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.236387][ T1437] device bridge_slave_1 entered promiscuous mode [ 52.299827][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.306898][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.314177][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.321248][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.345491][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.353129][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.360774][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.378600][ T8] device bridge_slave_1 left promiscuous mode [ 52.384745][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.392367][ T8] device bridge_slave_0 left promiscuous mode [ 52.398611][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.406488][ T8] device veth1_macvtap left promiscuous mode [ 52.412607][ T8] device veth0_vlan left promiscuous mode [ 52.520046][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.528253][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.535299][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.542647][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.552720][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.559804][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.567312][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.575595][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.588786][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.600318][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.608566][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.616006][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.623959][ T1437] device veth0_vlan entered promiscuous mode [ 52.635091][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.644470][ T1437] device veth1_macvtap entered promiscuous mode [ 52.655631][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.684785][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.712737][ T1451] FAULT_INJECTION: forcing a failure. [ 52.712737][ T1451] name failslab, interval 1, probability 0, space 0, times 0 [ 52.725506][ T1451] CPU: 0 PID: 1451 Comm: syz.8.370 Not tainted syzkaller #0 [ 52.732808][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 52.742864][ T1451] Call Trace: [ 52.746143][ T1451] [ 52.749076][ T1451] __dump_stack+0x21/0x24 [ 52.753421][ T1451] dump_stack_lvl+0x110/0x170 [ 52.758119][ T1451] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.763152][ T1451] dump_stack+0x15/0x24 [ 52.767307][ T1451] should_fail_ex+0x3bf/0x510 [ 52.771995][ T1451] __should_failslab+0xac/0xf0 [ 52.776802][ T1451] should_failslab+0x9/0x20 [ 52.781325][ T1451] __kmem_cache_alloc_node+0x3d/0x2d0 [ 52.786713][ T1451] ? mempool_kmalloc+0x1d/0x30 [ 52.791505][ T1451] ? kasan_save_alloc_info+0x1f/0x30 [ 52.796816][ T1451] ? mempool_kmalloc+0x1d/0x30 [ 52.801597][ T1451] __kmalloc+0xa4/0x1e0 [ 52.805752][ T1451] mempool_kmalloc+0x1d/0x30 [ 52.810345][ T1451] ? __cfi_mempool_kmalloc+0x10/0x10 [ 52.815636][ T1451] mempool_init_node+0x1f4/0x4b0 [ 52.820584][ T1451] ? __cfi_mempool_kfree+0x10/0x10 [ 52.825703][ T1451] ? __cfi_mempool_kmalloc+0x10/0x10 [ 52.830998][ T1451] mempool_init+0x3d/0x50 [ 52.835339][ T1451] crypt_ctr+0x1d5e/0x3710 [ 52.839773][ T1451] ? __cfi_crypt_ctr+0x10/0x10 [ 52.844557][ T1451] ? kasan_save_alloc_info+0x1f/0x30 [ 52.849850][ T1451] ? __kasan_kmalloc+0x95/0xb0 [ 52.854633][ T1451] ? dm_split_args+0x89/0x570 [ 52.859323][ T1451] ? dm_split_args+0x4d2/0x570 [ 52.864102][ T1451] dm_table_add_target+0x601/0xcc0 [ 52.869245][ T1451] table_load+0x2ce/0x750 [ 52.873611][ T1451] ? __cfi_table_load+0x10/0x10 [ 52.878486][ T1451] ? __kasan_check_write+0x14/0x20 [ 52.883612][ T1451] dm_ctl_ioctl+0x95f/0xd00 [ 52.888151][ T1451] ? __cfi_table_load+0x10/0x10 [ 52.893019][ T1451] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 52.898060][ T1451] ? security_file_ioctl+0x95/0xc0 [ 52.903195][ T1451] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 52.908233][ T1451] __se_sys_ioctl+0x12f/0x1b0 [ 52.912923][ T1451] __x64_sys_ioctl+0x7b/0x90 [ 52.917520][ T1451] x64_sys_call+0x58b/0x9a0 [ 52.922029][ T1451] do_syscall_64+0x4c/0xa0 [ 52.926445][ T1451] ? clear_bhb_loop+0x30/0x80 [ 52.931159][ T1451] ? clear_bhb_loop+0x30/0x80 [ 52.935837][ T1451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.941735][ T1451] RIP: 0033:0x7f1768b9fb19 [ 52.946164][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.965878][ T1451] RSP: 002b:00007f1769a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.974357][ T1451] RAX: ffffffffffffffda RBX: 00007f1768e25fa0 RCX: 00007f1768b9fb19 [ 52.982347][ T1451] RDX: 00002000000005c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 52.990322][ T1451] RBP: 00007f1768c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 52.998306][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.006301][ T1451] R13: 00007f1768e26038 R14: 00007f1768e25fa0 R15: 00007ffccedd3518 [ 53.014282][ T1451] [ 53.020908][ T1451] device-mapper: table: 252:1: crypt: Cannot allocate crypt request mempool (-ENOMEM) [ 53.031569][ T1451] device-mapper: ioctl: error adding target to table [ 53.189639][ T1473] process 'syz.1.372' launched './file0' with NULL argv: empty string added [ 53.245127][ T307] usb 8-1: USB disconnect, device number 2 [ 53.348500][ T1457] loop5: detected capacity change from 0 to 40427 [ 53.369606][ T1457] F2FS-fs (loop5): invalid crc value [ 53.396222][ T1457] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.476065][ T1457] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 53.695710][ T1457] syz.5.381: attempt to access beyond end of device [ 53.695710][ T1457] loop5: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 53.718136][ T1457] syz.5.381: attempt to access beyond end of device [ 53.718136][ T1457] loop5: rw=2049, sector=49152, nr_sectors = 2576 limit=40427 [ 53.755038][ T1489] loop8: detected capacity change from 0 to 2048 [ 53.782037][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 53.782050][ T28] audit: type=1400 audit(1793911708.136:693): avc: denied { create } for pid=1490 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.808420][ T1489] loop8: p1 < > p3 p4 < p5 > [ 53.816923][ T1489] loop8: p3 size 467968 extends beyond EOD, truncated [ 53.828121][ T1489] loop8: p5 size 467968 extends beyond EOD, truncated [ 53.843798][ T28] audit: type=1400 audit(1793911708.176:694): avc: denied { bind } for pid=1490 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.867393][ T28] audit: type=1400 audit(1793911708.176:695): avc: denied { name_bind } for pid=1490 comm="syz.1.380" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 53.893866][ T803] syz-executor: attempt to access beyond end of device [ 53.893866][ T803] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.897030][ T28] audit: type=1400 audit(1793911708.176:696): avc: denied { node_bind } for pid=1490 comm="syz.1.380" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 53.935773][ T28] audit: type=1400 audit(1793911708.176:697): avc: denied { ioctl } for pid=1490 comm="syz.1.380" path="socket:[23084]" dev="sockfs" ino=23084 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.987140][ T1110] __loop_clr_fd: partition scan of loop8 failed (rc=-16) [ 53.987185][ T349] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.988234][ T409] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.994353][ T349] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.003881][ T321] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.013766][ T671] I/O error, dev loop8, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.035815][ T671] I/O error, dev loop8, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.055967][ T28] audit: type=1400 audit(1793911708.176:698): avc: denied { connect } for pid=1490 comm="syz.1.380" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.085507][ T409] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.094784][ T349] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 54.103015][ T409] Buffer I/O error on dev loop8p3, logical block 1, async page read [ 54.106832][ T321] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.111798][ T671] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 54.128408][ T349] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.153765][ T28] audit: type=1326 audit(1793911708.496:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.6.386" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55999fb19 code=0x7ffc0000 [ 54.176603][ T321] Buffer I/O error on dev loop8p5, logical block 1, async page read [ 54.185028][ T349] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 54.211264][ T349] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 54.220724][ T1509] ip_tables: iptables: counters copy to user failed while replacing table [ 54.221107][ T671] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 54.243177][ T349] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 54.251592][ T349] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 54.259708][ T28] audit: type=1326 audit(1793911708.496:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.6.386" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55999fb19 code=0x7ffc0000 [ 54.284658][ T671] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 54.299058][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.317773][ T28] audit: type=1326 audit(1793911708.496:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.6.386" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55999fb19 code=0x7ffc0000 [ 54.365817][ T1515] loop1: detected capacity change from 0 to 256 [ 54.376058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 54.406481][ T28] audit: type=1326 audit(1793911708.496:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.6.386" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55999fb19 code=0x7ffc0000 [ 54.441388][ T1515] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 54.442808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.476402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 54.497263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.505463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.513839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.522462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.537451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.803578][ T1540] kvm: pic: level sensitive irq not supported [ 54.803653][ T1540] kvm: pic: non byte read [ 54.816255][ T1540] kvm: pic: single mode not supported [ 54.816266][ T1540] kvm: pic: level sensitive irq not supported [ 54.837104][ T1540] kvm: pic: level sensitive irq not supported [ 54.843536][ T1540] kvm: pic: level sensitive irq not supported [ 54.857090][ T1540] kvm: pic: single mode not supported [ 54.863204][ T1540] kvm: pic: level sensitive irq not supported [ 54.870434][ T1535] loop6: detected capacity change from 0 to 40427 [ 54.905317][ T1535] F2FS-fs (loop6): invalid crc value [ 54.927927][ T1535] F2FS-fs (loop6): Found nat_bits in checkpoint [ 55.020009][ T1535] F2FS-fs (loop6): Start checkpoint disabled! [ 55.033481][ T1535] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 55.051680][ T1535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 55.303684][ T1520] loop5: detected capacity change from 0 to 131072 [ 55.304304][ T1556] loop1: detected capacity change from 0 to 16 [ 55.312101][ T1520] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 55.327797][ T1520] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 55.337601][ T1556] erofs: (device loop1): mounted with root inode @ nid 36. [ 55.347231][ T1520] F2FS-fs (loop5): invalid crc value [ 55.377286][ T1520] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.390635][ T1554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 55.435299][ T1520] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 55.442787][ T1520] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 55.481751][ T1020] syz-executor: attempt to access beyond end of device [ 55.481751][ T1020] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 55.495996][ T1020] syz-executor: attempt to access beyond end of device [ 55.495996][ T1020] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 55.566976][ T456] kworker/u4:5: attempt to access beyond end of device [ 55.566976][ T456] loop6: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 55.595923][ T456] kworker/u4:5: attempt to access beyond end of device [ 55.595923][ T456] loop6: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 55.629934][ T456] kworker/u4:5: attempt to access beyond end of device [ 55.629934][ T456] loop6: rw=1, sector=73728, nr_sectors = 4096 limit=40427 [ 55.630694][ T1569] loop7: detected capacity change from 0 to 16 [ 55.654999][ T456] kworker/u4:5: attempt to access beyond end of device [ 55.654999][ T456] loop6: rw=1, sector=81920, nr_sectors = 2232 limit=40427 [ 55.672596][ T43] kworker/u4:2: attempt to access beyond end of device [ 55.672596][ T43] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 55.683124][ T1569] erofs: (device loop7): mounted with root inode @ nid 36. [ 55.688815][ T1441] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 55.772235][ T1571] ip_tables: iptables: counters copy to user failed while replacing table [ 55.786317][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.793403][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.800751][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.807810][ T1571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.816029][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.841095][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.850208][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.868857][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.877988][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.891841][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.900180][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.909064][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.917444][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.933637][ T1441] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 55.966730][ T1441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.974753][ T1441] usb 2-1: Product: syz [ 55.987010][ T1441] usb 2-1: Manufacturer: syz [ 55.991644][ T1441] usb 2-1: SerialNumber: syz [ 56.034009][ T1575] ip_tables: iptables: counters copy to user failed while replacing table [ 56.064400][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.099101][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 56.116985][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.127313][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 56.145637][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.163303][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.180314][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.198419][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.208659][ T1441] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.216100][ T1441] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.223154][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.236028][ T1441] usb 2-1: USB disconnect, device number 2 [ 56.356831][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.411564][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.418951][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.426350][ T1584] device bridge_slave_0 entered promiscuous mode [ 56.435228][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.442439][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.448007][ T671] udevd[671]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.451523][ T1584] device bridge_slave_1 entered promiscuous mode [ 56.515966][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.523042][ T1584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.530368][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.537424][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.560661][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.568373][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.575560][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.585202][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.593594][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.600658][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.609805][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.618136][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.625195][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.640132][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.649428][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.664131][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.673016][ T43] device bridge_slave_1 left promiscuous mode [ 56.679280][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.687377][ T43] device bridge_slave_0 left promiscuous mode [ 56.693576][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.701819][ T43] device veth0_vlan left promiscuous mode [ 56.812458][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.820600][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.828202][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.836777][ T1584] device veth0_vlan entered promiscuous mode [ 56.847358][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.856600][ T1584] device veth1_macvtap entered promiscuous mode [ 56.870362][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.880581][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.066766][ T1611] FAULT_INJECTION: forcing a failure. [ 57.066766][ T1611] name failslab, interval 1, probability 0, space 0, times 0 [ 57.086884][ T1611] CPU: 0 PID: 1611 Comm: syz.8.423 Not tainted syzkaller #0 [ 57.094210][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 57.104308][ T1611] Call Trace: [ 57.107602][ T1611] [ 57.110548][ T1611] __dump_stack+0x21/0x24 [ 57.114907][ T1611] dump_stack_lvl+0x110/0x170 [ 57.119618][ T1611] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.124666][ T1611] ? kmalloc_trace+0x40/0xb0 [ 57.129285][ T1611] dump_stack+0x15/0x24 [ 57.133463][ T1611] should_fail_ex+0x3bf/0x510 [ 57.138182][ T1611] __should_failslab+0xac/0xf0 [ 57.142993][ T1611] should_failslab+0x9/0x20 [ 57.147525][ T1611] __kmem_cache_alloc_node+0x3d/0x2d0 [ 57.152921][ T1611] ? kvm_io_bus_register_dev+0x134/0x530 [ 57.158573][ T1611] ? kvm_io_bus_register_dev+0x134/0x530 [ 57.164229][ T1611] __kmalloc+0xa4/0x1e0 [ 57.168403][ T1611] kvm_io_bus_register_dev+0x134/0x530 [ 57.173879][ T1611] ? __cfi_mutex_lock+0x10/0x10 [ 57.178743][ T1611] kvm_ioapic_init+0x823/0xec0 [ 57.183518][ T1611] kvm_arch_vm_ioctl+0x11bc/0x1510 [ 57.188642][ T1611] ? xfd_validate_state+0x70/0x150 [ 57.193772][ T1611] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 57.199238][ T1611] ? save_fpregs_to_fpstate+0x199/0x220 [ 57.204796][ T1611] ? __kasan_check_write+0x14/0x20 [ 57.209909][ T1611] ? __switch_to+0x56f/0x1070 [ 57.214596][ T1611] ? _raw_spin_unlock+0x4c/0x70 [ 57.219451][ T1611] ? finish_task_switch+0x16b/0x7c0 [ 57.224674][ T1611] ? switch_mm_irqs_off+0x2fb/0x960 [ 57.229878][ T1611] ? __schedule+0xcbb/0x1700 [ 57.234513][ T1611] ? release_firmware_map_entry+0x190/0x190 [ 57.240424][ T1611] ? check_preempt_wakeup+0x619/0xbe0 [ 57.245835][ T1611] ? __kasan_check_read+0x11/0x20 [ 57.250864][ T1611] ? preempt_schedule_common+0xbe/0xf0 [ 57.256335][ T1611] ? preempt_schedule+0xbc/0xd0 [ 57.261193][ T1611] ? __cfi_preempt_schedule+0x10/0x10 [ 57.266593][ T1611] ? ttwu_do_wakeup+0x468/0x490 [ 57.271462][ T1611] ? __asan_set_shadow_00+0xe/0x10 [ 57.276589][ T1611] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 57.281460][ T1611] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 57.287105][ T1611] ? try_to_wake_up+0x6c6/0x1250 [ 57.292054][ T1611] kvm_vm_ioctl+0x78a/0xb00 [ 57.296571][ T1611] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 57.301615][ T1611] ? futex_wake+0x5fa/0x8e0 [ 57.306148][ T1611] ? ioctl_has_perm+0x1b8/0x4f0 [ 57.311011][ T1611] ? memcpy+0x56/0x70 [ 57.315001][ T1611] ? ioctl_has_perm+0x40f/0x4f0 [ 57.319867][ T1611] ? has_cap_mac_admin+0x370/0x370 [ 57.325008][ T1611] ? vfs_write+0xa51/0xd00 [ 57.329424][ T1611] ? do_futex+0x2bf/0x430 [ 57.333757][ T1611] ? selinux_file_ioctl+0x3ad/0x4c0 [ 57.338994][ T1611] ? __cfi_do_futex+0x10/0x10 [ 57.343691][ T1611] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 57.349264][ T1611] ? mutex_unlock+0x8f/0x230 [ 57.353868][ T1611] ? __fget_files+0x2d1/0x330 [ 57.358559][ T1611] ? security_file_ioctl+0x95/0xc0 [ 57.363680][ T1611] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 57.368724][ T1611] __se_sys_ioctl+0x12f/0x1b0 [ 57.373418][ T1611] __x64_sys_ioctl+0x7b/0x90 [ 57.378018][ T1611] x64_sys_call+0x58b/0x9a0 [ 57.382555][ T1611] do_syscall_64+0x4c/0xa0 [ 57.387017][ T1611] ? clear_bhb_loop+0x30/0x80 [ 57.391700][ T1611] ? clear_bhb_loop+0x30/0x80 [ 57.396381][ T1611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.402281][ T1611] RIP: 0033:0x7f1768b9fb19 [ 57.406696][ T1611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.426336][ T1611] RSP: 002b:00007f1769a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.434757][ T1611] RAX: ffffffffffffffda RBX: 00007f1768e25fa0 RCX: 00007f1768b9fb19 [ 57.442732][ T1611] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 57.450705][ T1611] RBP: 00007f1768c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 57.458681][ T1611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.466662][ T1611] R13: 00007f1768e26038 R14: 00007f1768e25fa0 R15: 00007ffccedd3518 [ 57.474647][ T1611] [ 57.510341][ T1622] loop5: detected capacity change from 0 to 512 [ 57.531753][ T1622] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 57.546783][ T1627] loop7: detected capacity change from 0 to 512 [ 57.556002][ T1627] EXT4-fs (loop7): Test dummy encryption mode enabled [ 57.569077][ T1622] EXT4-fs (loop5): 1 truncate cleaned up [ 57.574794][ T1622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 57.589012][ T1627] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.432: inode has both inline data and extents flags [ 57.602362][ T1627] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.432: couldn't read orphan inode 15 (err -117) [ 57.614477][ T1627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 57.623465][ T803] EXT4-fs (loop5): unmounting filesystem. [ 57.642797][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 57.935651][ T1652] loop8: detected capacity change from 0 to 40427 [ 57.943337][ T1652] F2FS-fs (loop8): invalid crc value [ 57.961864][ T1652] F2FS-fs (loop8): Found nat_bits in checkpoint [ 57.999778][ T1652] F2FS-fs (loop8): Start checkpoint disabled! [ 58.006313][ T1652] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 58.014184][ T1652] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 58.052242][ T1655] F2FS-fs (loop2): invalid crc value [ 58.083550][ T1655] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.121103][ T1655] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 58.240314][ T1663] syz.2.442: attempt to access beyond end of device [ 58.240314][ T1663] loop2: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 58.266320][ T1663] syz.2.442: attempt to access beyond end of device [ 58.266320][ T1663] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 58.310239][ T1663] syz.2.442: attempt to access beyond end of device [ 58.310239][ T1663] loop2: rw=2049, sector=57344, nr_sectors = 12288 limit=40427 [ 58.613279][ T1671] set_capacity_and_notify: 1 callbacks suppressed [ 58.613301][ T1671] loop5: detected capacity change from 0 to 40427 [ 58.628611][ T1671] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 58.635866][ T1671] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 58.654233][ T1671] F2FS-fs (loop5): invalid crc value [ 58.666839][ T1441] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 58.684129][ T1671] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 58.730481][ T1671] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 58.737787][ T1671] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 58.851920][ T1441] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 58.867573][ T1441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.884277][ T1441] usb 2-1: Product: syz [ 58.892890][ T1441] usb 2-1: Manufacturer: syz [ 58.910069][ T1441] usb 2-1: SerialNumber: syz [ 59.129289][ T1441] usb 2-1: USB disconnect, device number 3 [ 59.320183][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 59.320197][ T28] audit: type=1400 audit(1793911713.676:790): avc: denied { setopt } for pid=1688 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.353793][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.370701][ T10] device bridge_slave_1 left promiscuous mode [ 59.376910][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.395008][ T10] device bridge_slave_0 left promiscuous mode [ 59.401392][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.410133][ T10] device veth1_macvtap left promiscuous mode [ 59.418515][ T10] device veth0_vlan left promiscuous mode [ 59.614011][ T1697] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.621210][ T1697] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.628849][ T1697] device bridge_slave_0 entered promiscuous mode [ 59.635798][ T1697] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.643000][ T1697] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.650404][ T1697] device bridge_slave_1 entered promiscuous mode [ 59.692416][ T1697] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.699467][ T1697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.706782][ T1697] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.713809][ T1697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.765683][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.773624][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.788766][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.814562][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.833229][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.857366][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.864425][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.879610][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.905827][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.929408][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.936573][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.971099][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.979604][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.987992][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.996174][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.013750][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.022690][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.035369][ T1697] device veth0_vlan entered promiscuous mode [ 60.042320][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.050537][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.064662][ T1697] device veth1_macvtap entered promiscuous mode [ 60.072003][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.080297][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.088228][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.096473][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.105236][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.120931][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.129303][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.137853][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.146188][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.162150][ T1711] loop1: detected capacity change from 0 to 40427 [ 60.183634][ T1711] F2FS-fs (loop1): invalid crc value [ 60.210438][ T1711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.314579][ T1711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 60.397188][ T28] audit: type=1400 audit(1793911714.756:791): avc: denied { watch watch_reads } for pid=1735 comm="syz.2.464" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.438049][ T1739] Disabled LAPIC found during irq injection [ 60.549218][ T1711] bio_check_eod: 10 callbacks suppressed [ 60.549239][ T1711] syz.1.455: attempt to access beyond end of device [ 60.549239][ T1711] loop1: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 60.584276][ T1711] syz.1.455: attempt to access beyond end of device [ 60.584276][ T1711] loop1: rw=2049, sector=49152, nr_sectors = 2960 limit=40427 [ 60.698748][ T1750] loop8: detected capacity change from 0 to 512 [ 60.746036][ T1750] EXT4-fs (loop8): Test dummy encryption mode enabled [ 60.764374][ T1437] syz-executor: attempt to access beyond end of device [ 60.764374][ T1437] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.787844][ T1750] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.468: inode has both inline data and extents flags [ 60.801393][ T1750] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.468: couldn't read orphan inode 15 (err -117) [ 60.823538][ T1750] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 60.841092][ T1754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.859875][ T1697] EXT4-fs (loop8): unmounting filesystem. [ 60.876181][ T1754] xt_hashlimit: size too large, truncated to 1048576 [ 60.976693][ T1441] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.006465][ T1766] netlink: 24 bytes leftover after parsing attributes in process `syz.8.477'. [ 61.169323][ T1441] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 61.182100][ T1441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.190292][ T1441] usb 8-1: Product: syz [ 61.194514][ T1441] usb 8-1: Manufacturer: syz [ 61.200134][ T1441] usb 8-1: SerialNumber: syz [ 61.231074][ T1767] loop2: detected capacity change from 0 to 40427 [ 61.238691][ T1767] F2FS-fs (loop2): invalid crc value [ 61.255852][ T1767] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.318089][ T1767] F2FS-fs (loop2): Start checkpoint disabled! [ 61.324766][ T1767] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 61.342226][ T1767] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 61.424357][ T1441] usb 8-1: USB disconnect, device number 3 [ 61.464987][ T1780] loop8: detected capacity change from 0 to 40427 [ 61.480382][ T1780] F2FS-fs (loop8): invalid crc value [ 61.504033][ T1780] F2FS-fs (loop8): Found nat_bits in checkpoint [ 61.589869][ T1780] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 61.607455][ T454] kworker/u4:4: attempt to access beyond end of device [ 61.607455][ T454] loop2: rw=1, sector=45096, nr_sectors = 40 limit=40427 [ 61.621886][ T1227] kworker/u4:6: attempt to access beyond end of device [ 61.621886][ T1227] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.643117][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.788422][ T1780] syz.8.482: attempt to access beyond end of device [ 61.788422][ T1780] loop8: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 61.806768][ T28] audit: type=1400 audit(1793911716.156:792): avc: denied { connect } for pid=1801 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.827676][ T1780] syz.8.482: attempt to access beyond end of device [ 61.827676][ T1780] loop8: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 61.849210][ T1805] xt_hashlimit: size too large, truncated to 1048576 [ 61.858623][ T1780] syz.8.482: attempt to access beyond end of device [ 61.858623][ T1780] loop8: rw=2049, sector=57344, nr_sectors = 8 limit=40427 [ 61.884481][ T1807] loop1: detected capacity change from 0 to 512 [ 61.912766][ T1807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.941302][ T1807] EXT4-fs (loop1): 1 truncate cleaned up [ 61.956825][ T1807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.968954][ T28] audit: type=1400 audit(1793911716.326:793): avc: denied { map } for pid=1806 comm="syz.1.490" path="socket:[25379]" dev="sockfs" ino=25379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.006988][ T1437] EXT4-fs (loop1): unmounting filesystem. [ 62.020431][ T28] audit: type=1400 audit(1793911716.346:794): avc: denied { read } for pid=1806 comm="syz.1.490" path="socket:[25379]" dev="sockfs" ino=25379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.068391][ T1697] syz-executor: attempt to access beyond end of device [ 62.068391][ T1697] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.169290][ T1816] loop1: detected capacity change from 0 to 1024 [ 62.196804][ T1816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.220241][ T1816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.249115][ T1437] EXT4-fs (loop1): unmounting filesystem. [ 62.625905][ T1850] loop5: detected capacity change from 0 to 256 [ 62.666600][ T1850] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 62.754388][ T1856] loop2: detected capacity change from 0 to 1024 [ 62.786994][ T1856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.804505][ T1845] loop8: detected capacity change from 0 to 40427 [ 62.822203][ T1845] F2FS-fs (loop8): invalid crc value [ 62.836305][ T1856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.848118][ T1845] F2FS-fs (loop8): Found nat_bits in checkpoint [ 62.881241][ T1584] EXT4-fs (loop2): unmounting filesystem. [ 62.944819][ T1845] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 63.027613][ T28] audit: type=1326 audit(1793911717.386:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.2.512" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0208d9fb19 code=0x0 [ 63.076190][ T1874] syz.8.503: attempt to access beyond end of device [ 63.076190][ T1874] loop8: rw=2049, sector=53248, nr_sectors = 2128 limit=40427 [ 63.121196][ T1876] Disabled LAPIC found during irq injection [ 63.426706][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.600976][ T1903] xt_hashlimit: size too large, truncated to 1048576 [ 63.716759][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.907169][ T19] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 63.934373][ T19] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 63.952220][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 63.968069][ T19] usb 6-1: Product: syz [ 63.975679][ T28] audit: type=1400 audit(1793911718.326:796): avc: denied { write } for pid=1923 comm="syz.2.530" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.977130][ T19] usb 6-1: Manufacturer: syz [ 64.006194][ T19] usb 6-1: SerialNumber: syz [ 64.046606][ T19] usb 6-1: config 0 descriptor?? [ 64.116725][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.228557][ T1937] loop8: detected capacity change from 0 to 1024 [ 64.242646][ T1937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.272993][ T1915] usb 6-1: USB disconnect, device number 3 [ 64.283360][ T1937] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 64.296755][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 64.302996][ T307] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.314408][ T307] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.325092][ T307] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.338263][ T307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.344920][ T307] usb 2-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 64.354402][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.355493][ T1697] EXT4-fs (loop8): unmounting filesystem. [ 64.370636][ T307] usb 2-1: config 0 descriptor?? [ 64.435668][ T1935] loop2: detected capacity change from 0 to 40427 [ 64.443095][ T1935] F2FS-fs (loop2): invalid crc value [ 64.451016][ T1935] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.488951][ T1935] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 64.780133][ T28] audit: type=1400 audit(1793911719.136:797): avc: denied { sqpoll } for pid=1907 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.801885][ T307] wacom 0003:056A:5200.0002: unknown main item tag 0x3 [ 64.813469][ T307] wacom 0003:056A:5200.0002: unknown main item tag 0x6 [ 64.829581][ T307] wacom 0003:056A:5200.0002: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 65.025076][ T307] usb 2-1: USB disconnect, device number 4 [ 65.687024][ T1978] loop7: detected capacity change from 0 to 1024 [ 65.712510][ T1978] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.760266][ T1978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 65.791591][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 65.805512][ T1984] loop2: detected capacity change from 0 to 512 [ 65.819791][ T1984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.850831][ T1984] EXT4-fs (loop2): 1 truncate cleaned up [ 65.856544][ T1984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.901503][ T28] audit: type=1400 audit(1793911720.256:798): avc: denied { map } for pid=1983 comm="syz.2.559" path="/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.952228][ T28] audit: type=1400 audit(1793911720.306:799): avc: denied { ioctl } for pid=1983 comm="syz.2.559" path="/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop2" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.958449][ T1584] EXT4-fs (loop2): unmounting filesystem. [ 66.114932][ T1988] loop8: detected capacity change from 0 to 40427 [ 66.130731][ T1988] F2FS-fs (loop8): invalid crc value [ 66.161821][ T2011] loop7: detected capacity change from 0 to 1024 [ 66.173778][ T1988] F2FS-fs (loop8): Found nat_bits in checkpoint [ 66.177852][ T2011] EXT4-fs: Ignoring removed bh option [ 66.206800][ T2011] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 66.234936][ T1988] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 66.247710][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 66.278958][ T2022] loop7: detected capacity change from 0 to 128 [ 66.413267][ T1988] bio_check_eod: 6 callbacks suppressed [ 66.413285][ T1988] syz.8.548: attempt to access beyond end of device [ 66.413285][ T1988] loop8: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 66.478536][ T1988] syz.8.548: attempt to access beyond end of device [ 66.478536][ T1988] loop8: rw=2049, sector=49152, nr_sectors = 1544 limit=40427 [ 66.555215][ T2036] loop2: detected capacity change from 0 to 128 [ 66.581526][ T2036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.603817][ T2036] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.657008][ T1697] syz-executor: attempt to access beyond end of device [ 66.657008][ T1697] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.711792][ T28] audit: type=1400 audit(1793911721.066:800): avc: denied { read } for pid=2040 comm="syz.1.570" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.760502][ T28] audit: type=1400 audit(1793911721.066:801): avc: denied { open } for pid=2040 comm="syz.1.570" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.795074][ T28] audit: type=1400 audit(1793911721.066:802): avc: denied { ioctl } for pid=2040 comm="syz.1.570" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.901930][ T1584] EXT4-fs (loop2): unmounting filesystem. [ 66.944221][ T2049] loop2: detected capacity change from 0 to 128 [ 66.964226][ T2053] FAULT_INJECTION: forcing a failure. [ 66.964226][ T2053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.977708][ T2053] CPU: 0 PID: 2053 Comm: syz.8.568 Not tainted syzkaller #0 [ 66.985030][ T2053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 66.995109][ T2053] Call Trace: [ 66.998413][ T2053] [ 67.001365][ T2053] __dump_stack+0x21/0x24 [ 67.005727][ T2053] dump_stack_lvl+0x110/0x170 [ 67.010521][ T2053] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.015570][ T2053] ? __this_cpu_preempt_check+0x13/0x20 [ 67.021197][ T2053] dump_stack+0x15/0x24 [ 67.025379][ T2053] should_fail_ex+0x3bf/0x510 [ 67.030084][ T2053] should_fail+0xb/0x10 [ 67.034268][ T2053] should_fail_usercopy+0x1a/0x20 [ 67.039347][ T2053] _copy_from_user+0x1e/0xc0 [ 67.043977][ T2053] ____sys_sendmsg+0x31a/0x9c0 [ 67.048800][ T2053] ? __sys_sendmsg_sock+0x40/0x40 [ 67.053892][ T2053] ? import_iovec+0x7c/0xb0 [ 67.058425][ T2053] ___sys_sendmsg+0x2a2/0x360 [ 67.063138][ T2053] ? __sys_sendmsg+0x290/0x290 [ 67.067936][ T2053] ? __cfi_futex_wait+0x10/0x10 [ 67.072827][ T2053] ? __fdget+0x19c/0x220 [ 67.077106][ T2053] __sys_sendmmsg+0x2cc/0x4e0 [ 67.081813][ T2053] ? __cfi___sys_sendmmsg+0x10/0x10 [ 67.087068][ T2053] ? fpregs_restore_userregs+0x128/0x260 [ 67.092746][ T2053] __x64_sys_sendmmsg+0xa0/0xb0 [ 67.097632][ T2053] x64_sys_call+0x3f5/0x9a0 [ 67.102189][ T2053] do_syscall_64+0x4c/0xa0 [ 67.106660][ T2053] ? clear_bhb_loop+0x30/0x80 [ 67.111379][ T2053] ? clear_bhb_loop+0x30/0x80 [ 67.116095][ T2053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.122032][ T2053] RIP: 0033:0x7efe7019fb19 [ 67.126465][ T2053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.146113][ T2053] RSP: 002b:00007efe71052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.154548][ T2053] RAX: ffffffffffffffda RBX: 00007efe70425fa0 RCX: 00007efe7019fb19 [ 67.162567][ T2053] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 67.170559][ T2053] RBP: 00007efe70237b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.178552][ T2053] R10: 0000000000008890 R11: 0000000000000246 R12: 0000000000000000 [ 67.186545][ T2053] R13: 00007efe70426038 R14: 00007efe70425fa0 R15: 00007fff8e486eb8 [ 67.194534][ T2053] [ 67.208417][ T2049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.237342][ T2049] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.313087][ T28] audit: type=1326 audit(1793911721.666:803): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.8.576" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7019fb19 code=0x7ffc0000 [ 67.361640][ T2064] device syzkaller0 entered promiscuous mode [ 67.367913][ T28] audit: type=1326 audit(1793911721.696:804): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.8.576" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7019fb19 code=0x7ffc0000 [ 67.403763][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 1024 [ 67.426980][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 8192 [ 67.432295][ T28] audit: type=1326 audit(1793911721.696:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.8.576" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7019fb19 code=0x7ffc0000 [ 67.471948][ T1584] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 67.498166][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 1024 [ 67.520180][ T28] audit: type=1326 audit(1793911721.696:806): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.8.576" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7efe7019fb19 code=0x7ffc0000 [ 67.527142][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 8192 [ 67.562336][ T1584] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 67.582188][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 1024 [ 67.597507][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 8192 [ 67.612694][ T1584] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 67.631896][ T1584] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /42/file1/lost+found: directory fails checksum at offset 1024 [ 67.692103][ T2073] ------------[ cut here ]------------ [ 67.697680][ T2073] WARNING: CPU: 1 PID: 2073 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 67.708027][ T2073] Modules linked in: [ 67.711941][ T2073] CPU: 1 PID: 2073 Comm: syz.7.581 Not tainted syzkaller #0 [ 67.719263][ T2073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 67.729370][ T2073] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 67.735810][ T2073] Code: e8 43 d0 a6 00 e9 c8 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 2e e9 ff ff 4c 89 ff e8 c8 cf a6 00 e9 21 e9 ff ff e8 0e 34 61 00 <0f> 0b e9 99 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 3c ef [ 67.755478][ T2073] RSP: 0018:ffffc9000c307c30 EFLAGS: 00010283 [ 67.761600][ T2073] RAX: ffffffff81103e12 RBX: ffff8881337e0000 RCX: 0000000000080000 [ 67.769609][ T2073] RDX: ffffc90006edf000 RSI: 000000000000003f RDI: 0000000000000040 [ 67.777652][ T2073] RBP: ffffc9000c307cb0 R08: ffff888130436547 R09: 1ffff11026086ca8 [ 67.785666][ T2073] R10: dffffc0000000000 R11: ffffed1026086ca9 R12: ffff8881474cc000 [ 67.793686][ T2073] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881337e0078 [ 67.801690][ T2073] FS: 00007f6be2efd6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 67.810710][ T2073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.817342][ T2073] CR2: 0000001b31a1bff8 CR3: 0000000121b41000 CR4: 00000000003526a0 [ 67.825338][ T2073] Call Trace: [ 67.828663][ T2073] [ 67.831624][ T2073] kvm_vcpu_ioctl+0x8ed/0xc00 [ 67.836336][ T2073] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.841591][ T2073] ? selinux_file_ioctl+0x3ad/0x4c0 [ 67.846858][ T2073] ? __cfi_do_futex+0x10/0x10 [ 67.851557][ T2073] ? kvm_uevent_notify_change+0x30b/0x3b0 [ 67.857337][ T2073] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 67.862931][ T2073] ? __fget_files+0x2d1/0x330 [ 67.867662][ T2073] ? security_file_ioctl+0x95/0xc0 [ 67.871643][ T2082] loop5: detected capacity change from 0 to 128 [ 67.872832][ T2073] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.884302][ T2073] __se_sys_ioctl+0x12f/0x1b0 [ 67.889043][ T2073] __x64_sys_ioctl+0x7b/0x90 [ 67.893672][ T2073] x64_sys_call+0x58b/0x9a0 [ 67.896165][ T2082] syz.5.584: attempt to access beyond end of device [ 67.896165][ T2082] loop5: rw=2049, sector=171, nr_sectors = 1 limit=128 [ 67.898235][ T2073] do_syscall_64+0x4c/0xa0 [ 67.913012][ T2082] buffer_io_error: 2 callbacks suppressed [ 67.913042][ T2082] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 67.916397][ T2073] ? clear_bhb_loop+0x30/0x80 [ 67.935346][ T2073] ? clear_bhb_loop+0x30/0x80 [ 67.940084][ T2073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.946005][ T2073] RIP: 0033:0x7f6be1f9fb19 [ 67.950474][ T2073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.970149][ T2073] RSP: 002b:00007f6be2efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.978627][ T2073] RAX: ffffffffffffffda RBX: 00007f6be2225fa0 RCX: 00007f6be1f9fb19 [ 67.986632][ T2073] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.994663][ T2073] RBP: 00007f6be2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 68.002694][ T2073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.010743][ T2073] R13: 00007f6be2226038 R14: 00007f6be2225fa0 R15: 00007ffcb0da3c88 [ 68.018775][ T2073] [ 68.021829][ T2073] ---[ end trace 0000000000000000 ]--- [ 68.070730][ T1584] EXT4-fs (loop2): unmounting filesystem. [ 68.251829][ T2090] device syzkaller0 entered promiscuous mode [ 68.314062][ T2097] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 68.352962][ T2097] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.378578][ T2097] capability: warning: `syz.8.592' uses 32-bit capabilities (legacy support in use) [ 68.380858][ T2106] xt_hashlimit: size too large, truncated to 1048576 [ 68.440318][ T1697] EXT4-fs (loop8): unmounting filesystem. [ 68.476641][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.484213][ T2102] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.491747][ T2102] device bridge_slave_0 entered promiscuous mode [ 68.501354][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.508498][ T2102] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.515992][ T2102] device bridge_slave_1 entered promiscuous mode [ 68.580689][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.587790][ T2102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.595062][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.602139][ T2102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.617613][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.624979][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.646095][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.653730][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.676566][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.685740][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.694126][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.701213][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.708614][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.716969][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.725054][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.732127][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.740425][ T1227] device bridge_slave_1 left promiscuous mode [ 68.746560][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.754061][ T1227] device bridge_slave_0 left promiscuous mode [ 68.760215][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.768487][ T1227] device veth1_macvtap left promiscuous mode [ 68.774502][ T1227] device veth0_vlan left promiscuous mode [ 68.869438][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.877499][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.886644][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.894791][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.907796][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.916171][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.929834][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.937829][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.946154][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.953748][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.961837][ T2102] device veth0_vlan entered promiscuous mode [ 68.971794][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.979948][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.989111][ T2102] device veth1_macvtap entered promiscuous mode [ 68.998925][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.006527][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.014814][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.023939][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.032291][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.108257][ T2117] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 69.117496][ T2117] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.139915][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 69.162999][ T2129] xt_hashlimit: size too large, truncated to 1048576 [ 69.346786][ T314] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.359966][ T2128] set_capacity_and_notify: 2 callbacks suppressed [ 69.359981][ T2128] loop4: detected capacity change from 0 to 40427 [ 69.396423][ T2128] F2FS-fs (loop4): invalid crc value [ 69.418872][ T2128] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.465468][ T2128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 69.527632][ T2144] netlink: 'syz.5.600': attribute type 1 has an invalid length. [ 69.535451][ T2144] netlink: 'syz.5.600': attribute type 2 has an invalid length. [ 69.543585][ T2144] netlink: 'syz.5.600': attribute type 1 has an invalid length. [ 69.552120][ T314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.557307][ T2144] netlink: 'syz.5.600': attribute type 2 has an invalid length. [ 69.568792][ T314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.571446][ T2144] netlink: 184 bytes leftover after parsing attributes in process `syz.5.600'. [ 69.596565][ T314] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.621381][ T314] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.640275][ T314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.660298][ T314] usb 9-1: config 0 descriptor?? [ 69.673168][ T2128] syz.4.595: attempt to access beyond end of device [ 69.673168][ T2128] loop4: rw=2049, sector=53248, nr_sectors = 2096 limit=40427 [ 69.697164][ T2128] syz.4.595: attempt to access beyond end of device [ 69.697164][ T2128] loop4: rw=2049, sector=55344, nr_sectors = 2000 limit=40427 [ 69.717725][ T2128] syz.4.595: attempt to access beyond end of device [ 69.717725][ T2128] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 69.733127][ T2128] syz.4.595: attempt to access beyond end of device [ 69.733127][ T2128] loop4: rw=2049, sector=51200, nr_sectors = 8 limit=40427 [ 69.785725][ T2142] loop1: detected capacity change from 0 to 40427 [ 69.803161][ T2142] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.817035][ T2142] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.834331][ T2142] F2FS-fs (loop1): invalid crc value [ 69.841756][ T2102] syz-executor: attempt to access beyond end of device [ 69.841756][ T2102] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.851195][ T2142] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.893072][ T2142] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.900311][ T2142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.909066][ T1913] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.090096][ T314] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 70.098222][ T1913] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 70.103178][ T314] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 70.116564][ T1913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.127177][ T1913] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 70.128645][ T314] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 70.149703][ T1913] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 70.169947][ T1913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.187197][ T2147] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 70.220162][ T2176] loop7: detected capacity change from 0 to 128 [ 70.255626][ T2176] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 70.267883][ T2176] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.377632][ T314] usb 9-1: USB disconnect, device number 2 [ 70.391583][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 70.391597][ T28] audit: type=1400 audit(1793911724.746:815): avc: denied { relabelfrom } for pid=2184 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.422277][ T2187] loop1: detected capacity change from 0 to 256 [ 70.426041][ T28] audit: type=1400 audit(1793911724.756:816): avc: denied { relabelto } for pid=2184 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.457083][ T2187] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 70.474376][ T28] audit: type=1400 audit(1793911724.826:817): avc: denied { setattr } for pid=2186 comm="syz.1.622" name="file0" dev="loop1" ino=1048794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.488661][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 70.529140][ T28] audit: type=1400 audit(1793911724.876:818): avc: denied { mounton } for pid=2188 comm="syz.7.623" path="/proc/150/task" dev="proc" ino=26506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.553878][ T2194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 70.582902][ T2197] loop4: detected capacity change from 0 to 256 [ 70.591812][ T2194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 70.603658][ T2197] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 70.609652][ T2198] loop7: detected capacity change from 0 to 128 [ 70.622819][ T1911] usb 6-1: USB disconnect, device number 4 [ 70.668546][ T2198] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 70.691692][ T2204] loop4: detected capacity change from 0 to 1024 [ 70.716369][ T2204] EXT4-fs: Ignoring removed orlov option [ 70.732438][ T2198] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.779383][ T2204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.798757][ T28] audit: type=1400 audit(1793911725.156:819): avc: denied { rename } for pid=2202 comm="syz.4.628" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.827228][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 70.839964][ T28] audit: type=1400 audit(1793911725.176:820): avc: denied { unlink } for pid=2202 comm="syz.4.628" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.863066][ T2102] EXT4-fs (loop4): unmounting filesystem. [ 70.933017][ T2227] loop8: detected capacity change from 0 to 128 [ 71.055929][ T28] audit: type=1400 audit(1793911725.406:821): avc: denied { mount } for pid=2234 comm="syz.1.640" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.137975][ T2238] loop5: detected capacity change from 0 to 128 [ 71.158469][ T2238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 71.183773][ T2238] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.236715][ T1911] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.246230][ T2238] overlayfs: upper fs does not support tmpfile. [ 71.276766][ T803] EXT4-fs (loop5): unmounting filesystem. [ 71.449364][ T1911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.466762][ T1911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.520643][ T1911] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.568138][ T1911] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.611536][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.630757][ T1911] usb 8-1: config 0 descriptor?? [ 71.665090][ T2254] tap0: tun_chr_ioctl cmd 2148553947 [ 71.708307][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 71.728006][ T2258] netlink: 7 bytes leftover after parsing attributes in process `syz.5.650'. [ 71.910471][ T2272] KVM: debugfs: duplicate directory 2272-4 [ 71.963685][ T28] audit: type=1400 audit(1793911726.316:822): avc: denied { mounton } for pid=2284 comm="syz.5.663" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 72.010561][ T2291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.666'. [ 72.020930][ T2291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'. [ 72.038799][ T1911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 72.058318][ T1911] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 72.068452][ T28] audit: type=1400 audit(1793911726.426:823): avc: denied { read } for pid=2292 comm="syz.1.667" name="bin" dev="tracefs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.091199][ T2297] netlink: 'syz.5.669': attribute type 3 has an invalid length. [ 72.099462][ T2297] netlink: 'syz.5.669': attribute type 3 has an invalid length. [ 72.118715][ T1911] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 72.199452][ T2308] loop1: detected capacity change from 0 to 128 [ 72.271907][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.676'. [ 72.309742][ T1911] usb 8-1: USB disconnect, device number 4 [ 72.314214][ T2316] netlink: 7 bytes leftover after parsing attributes in process `syz.8.676'. [ 72.409010][ T2295] F2FS-fs (loop4): invalid crc value [ 72.471779][ T28] audit: type=1400 audit(1793911726.826:824): avc: denied { getopt } for pid=2328 comm="syz.5.681" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.492918][ T2295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.578536][ T2295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 72.658454][ T2340] overlayfs: null uuid detected in lower fs '/syz5', falling back to xino=off,index=off,nfs_export=off. [ 72.822306][ T2295] syz.4.668: attempt to access beyond end of device [ 72.822306][ T2295] loop4: rw=2049, sector=53248, nr_sectors = 2064 limit=40427 [ 72.862129][ T2343] EXT4-fs: Ignoring removed orlov option [ 72.911035][ T2295] syz.4.668: attempt to access beyond end of device [ 72.911035][ T2295] loop4: rw=2049, sector=55312, nr_sectors = 2032 limit=40427 [ 72.926626][ T2343] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.957295][ T2295] syz.4.668: attempt to access beyond end of device [ 72.957295][ T2295] loop4: rw=2049, sector=49152, nr_sectors = 1904 limit=40427 [ 72.970250][ T803] EXT4-fs (loop5): unmounting filesystem. [ 73.071389][ T2102] syz-executor: attempt to access beyond end of device [ 73.071389][ T2102] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.305181][ T2365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.313735][ T2365] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.327719][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.347190][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.366769][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.402837][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.430834][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.436089][ T2363] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 73.452641][ T2363] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 73.475531][ T2363] F2FS-fs (loop7): invalid crc value [ 73.482044][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.488933][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.503077][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.509767][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.522145][ T2363] F2FS-fs (loop7): Found nat_bits in checkpoint [ 73.541244][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.547961][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.561467][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.568183][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.582954][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.590617][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.604246][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.610962][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.618636][ T2363] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 73.631315][ T2363] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 73.635242][ T2364] EXT4-fs (loop5): Remounting filesystem read-only [ 73.654118][ T2364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.696: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.737366][ T1911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.937760][ T1911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.954188][ T1911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.969169][ T1911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.982628][ T1911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.991939][ T1911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.007801][ T2390] F2FS-fs (loop5): invalid crc value [ 74.013612][ T1911] usb 5-1: config 0 descriptor?? [ 74.031756][ T2390] F2FS-fs (loop5): Found nat_bits in checkpoint [ 74.119032][ T2390] F2FS-fs (loop5): Start checkpoint disabled! [ 74.136707][ T2390] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 74.164247][ T2390] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 74.257152][ T2404] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 74.266792][ T2390] F2FS-fs (loop5): ino:10, start:0, end:8197, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 74.306418][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 74.323850][ T2390] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=16, npages=17 [ 74.346934][ T2390] syz.5.703: attempt to access beyond end of device [ 74.346934][ T2390] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 74.361090][ T2414] FAULT_INJECTION: forcing a failure. [ 74.361090][ T2414] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.376776][ T2414] CPU: 1 PID: 2414 Comm: syz.7.711 Tainted: G W syzkaller #0 [ 74.385573][ T2414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 74.395659][ T2414] Call Trace: [ 74.398957][ T2414] [ 74.401899][ T2414] __dump_stack+0x21/0x24 [ 74.406239][ T2414] dump_stack_lvl+0x110/0x170 [ 74.410925][ T2414] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.415964][ T2414] dump_stack+0x15/0x24 [ 74.420120][ T2414] should_fail_ex+0x3bf/0x510 [ 74.424823][ T2414] should_fail+0xb/0x10 [ 74.428986][ T2414] get_futex_key+0x6a4/0xb10 [ 74.433593][ T2414] ? __cfi_get_futex_key+0x10/0x10 [ 74.438721][ T2414] ? __kasan_kmalloc+0x95/0xb0 [ 74.443516][ T2414] ? futex_setup_timer+0xb0/0xc0 [ 74.448474][ T2414] futex_lock_pi+0x1d6/0x970 [ 74.453072][ T2414] ? __kasan_check_read+0x11/0x20 [ 74.458115][ T2414] ? __cfi_futex_lock_pi+0x10/0x10 [ 74.463240][ T2414] ? __cfi_futex_wake+0x10/0x10 [ 74.468102][ T2414] ? vfs_write+0xa51/0xd00 [ 74.472549][ T2414] do_futex+0x2a2/0x430 [ 74.476713][ T2414] ? __cfi_do_futex+0x10/0x10 [ 74.481391][ T2414] ? __kasan_check_write+0x14/0x20 [ 74.486511][ T2414] ? mutex_unlock+0x8f/0x230 [ 74.491111][ T2414] __se_sys_futex+0x136/0x310 [ 74.495804][ T2414] ? __x64_sys_futex+0x100/0x100 [ 74.500747][ T2414] ? xfd_validate_state+0x70/0x150 [ 74.505868][ T2414] ? __kasan_check_write+0x14/0x20 [ 74.510989][ T2414] __x64_sys_futex+0xe5/0x100 [ 74.515674][ T2414] x64_sys_call+0x7ec/0x9a0 [ 74.520217][ T2414] do_syscall_64+0x4c/0xa0 [ 74.524640][ T2414] ? clear_bhb_loop+0x30/0x80 [ 74.529326][ T2414] ? clear_bhb_loop+0x30/0x80 [ 74.534026][ T2414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.539938][ T2414] RIP: 0033:0x7f6be1f9fb19 [ 74.544369][ T2414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.563978][ T2414] RSP: 002b:00007f6be2efd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.572404][ T2414] RAX: ffffffffffffffda RBX: 00007f6be2225fa0 RCX: 00007f6be1f9fb19 [ 74.580386][ T2414] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000140 [ 74.588359][ T2414] RBP: 00007f6be2037b70 R08: 0000000000000000 R09: 0000000000000001 [ 74.596335][ T2414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.604307][ T2414] R13: 00007f6be2226038 R14: 00007f6be2225fa0 R15: 00007ffcb0da3c88 [ 74.612296][ T2414] [ 74.637608][ T1911] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 74.646167][ T1911] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 74.661592][ T8] kworker/u4:0: attempt to access beyond end of device [ 74.661592][ T8] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 74.678360][ T1911] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 74.847554][ T2433] set_capacity_and_notify: 6 callbacks suppressed [ 74.847571][ T2433] loop7: detected capacity change from 0 to 128 [ 74.904293][ T2433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 74.928640][ T1914] usb 5-1: USB disconnect, device number 5 [ 74.936900][ T2433] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.963782][ T1100] EXT4-fs (loop7): unmounting filesystem. [ 75.054832][ T2425] loop8: detected capacity change from 0 to 40427 [ 75.082224][ T2425] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 75.097770][ T2425] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 75.106349][ T2425] F2FS-fs (loop8): invalid crc value [ 75.115486][ T2444] loop5: detected capacity change from 0 to 2048 [ 75.136174][ T2425] F2FS-fs (loop8): Found nat_bits in checkpoint [ 75.173350][ T2444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.203805][ T2425] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 75.217339][ T2425] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 75.229708][ T803] EXT4-fs (loop5): unmounting filesystem. [ 75.276620][ T2448] x86/PAT: syz.7.724:2448 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 75.304288][ T2458] FAULT_INJECTION: forcing a failure. [ 75.304288][ T2458] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.346421][ T2458] CPU: 0 PID: 2458 Comm: syz.1.729 Tainted: G W syzkaller #0 [ 75.355227][ T2458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 75.365300][ T2458] Call Trace: [ 75.368604][ T2458] [ 75.371557][ T2458] __dump_stack+0x21/0x24 [ 75.375914][ T2458] dump_stack_lvl+0x110/0x170 [ 75.380641][ T2458] ? __cfi_dump_stack_lvl+0x8/0x8 [ 75.385703][ T2458] dump_stack+0x15/0x24 [ 75.389864][ T2458] should_fail_ex+0x3bf/0x510 [ 75.394546][ T2458] should_fail+0xb/0x10 [ 75.398709][ T2458] get_futex_key+0x6a4/0xb10 [ 75.403316][ T2458] ? __cfi_get_futex_key+0x10/0x10 [ 75.408437][ T2458] ? __kasan_kmalloc+0x95/0xb0 [ 75.413221][ T2458] ? futex_setup_timer+0xb0/0xc0 [ 75.418175][ T2458] futex_lock_pi+0x1d6/0x970 [ 75.422789][ T2458] ? __kasan_check_read+0x11/0x20 [ 75.427832][ T2458] ? __cfi_futex_lock_pi+0x10/0x10 [ 75.432962][ T2458] ? __cfi_futex_wake+0x10/0x10 [ 75.437831][ T2458] ? vfs_write+0xa51/0xd00 [ 75.442256][ T2458] do_futex+0x2a2/0x430 [ 75.446421][ T2458] ? __cfi_do_futex+0x10/0x10 [ 75.451098][ T2458] ? __kasan_check_write+0x14/0x20 [ 75.456214][ T2458] ? mutex_unlock+0x8f/0x230 [ 75.460813][ T2458] __se_sys_futex+0x136/0x310 [ 75.465496][ T2458] ? __x64_sys_futex+0x100/0x100 [ 75.470446][ T2458] ? xfd_validate_state+0x70/0x150 [ 75.475576][ T2458] ? __kasan_check_write+0x14/0x20 [ 75.480701][ T2458] __x64_sys_futex+0xe5/0x100 [ 75.485400][ T2458] x64_sys_call+0x7ec/0x9a0 [ 75.489909][ T2458] do_syscall_64+0x4c/0xa0 [ 75.494332][ T2458] ? clear_bhb_loop+0x30/0x80 [ 75.499017][ T2458] ? clear_bhb_loop+0x30/0x80 [ 75.503703][ T2458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.509611][ T2458] RIP: 0033:0x7ff23cd9fb19 [ 75.514035][ T2458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.533669][ T2458] RSP: 002b:00007ff23dcaa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.542116][ T2458] RAX: ffffffffffffffda RBX: 00007ff23d025fa0 RCX: 00007ff23cd9fb19 [ 75.550101][ T2458] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000140 [ 75.558083][ T2458] RBP: 00007ff23ce37b70 R08: 0000000000000000 R09: 0000000000000001 [ 75.566060][ T2458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.574033][ T2458] R13: 00007ff23d026038 R14: 00007ff23d025fa0 R15: 00007ffcb583f388 [ 75.582011][ T2458] [ 75.604742][ T1697] syz-executor: attempt to access beyond end of device [ 75.604742][ T1697] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.827346][ T2483] loop4: detected capacity change from 0 to 16 [ 75.841044][ T2483] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.871487][ T2488] loop1: detected capacity change from 0 to 128 [ 75.884415][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 75.884428][ T28] audit: type=1400 audit(1793911730.236:826): avc: denied { remount } for pid=2482 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.918150][ T2488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.942069][ T2488] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.985632][ T1437] EXT4-fs (loop1): unmounting filesystem. [ 76.226953][ T307] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.359673][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 76.369208][ T2530] loop4: detected capacity change from 0 to 128 [ 76.407852][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.428149][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.438040][ T307] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.454094][ T307] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.463494][ T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.495170][ T307] usb 6-1: config 0 descriptor?? [ 76.909566][ T307] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 76.934585][ T307] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 76.972475][ T307] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 77.189556][ T307] usb 6-1: USB disconnect, device number 5 [ 77.417851][ T2543] loop4: detected capacity change from 0 to 128 [ 77.453872][ T2543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.462549][ T2543] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.494769][ T2102] EXT4-fs (loop4): unmounting filesystem. [ 77.717600][ T2553] loop5: detected capacity change from 0 to 16 [ 77.752769][ T2553] erofs: (device loop5): mounted with root inode @ nid 36. [ 77.896502][ T2560] loop4: detected capacity change from 0 to 2048 [ 77.960285][ T2560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.994494][ T2560] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.306723][ T1911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.414261][ T2567] loop5: detected capacity change from 0 to 40427 [ 78.440158][ T2567] F2FS-fs (loop5): invalid crc value [ 78.489092][ T2567] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.517830][ T1911] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.545907][ T1911] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.576714][ T1911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.583610][ T1911] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 78.584747][ T2567] F2FS-fs (loop5): Start checkpoint disabled! [ 78.600375][ T1911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.611645][ T2567] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 78.627536][ T1911] usb 5-1: config 0 descriptor?? [ 78.633150][ T2567] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 78.859280][ T28] audit: type=1400 audit(1793911733.216:827): avc: denied { create } for pid=2566 comm="syz.5.770" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 78.931846][ T454] kworker/u4:4: attempt to access beyond end of device [ 78.931846][ T454] loop5: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 78.955213][ T2581] netlink: 8 bytes leftover after parsing attributes in process `syz.8.776'. [ 78.978472][ T454] kworker/u4:4: attempt to access beyond end of device [ 78.978472][ T454] loop5: rw=1, sector=77832, nr_sectors = 4088 limit=40427 [ 79.009709][ T454] kworker/u4:4: attempt to access beyond end of device [ 79.009709][ T454] loop5: rw=1, sector=49152, nr_sectors = 8 limit=40427 [ 79.069400][ T454] kworker/u4:4: attempt to access beyond end of device [ 79.069400][ T454] loop5: rw=1, sector=49160, nr_sectors = 4088 limit=40427 [ 79.085919][ T454] kworker/u4:4: attempt to access beyond end of device [ 79.085919][ T454] loop5: rw=1, sector=57344, nr_sectors = 8 limit=40427 [ 79.114397][ T454] kworker/u4:4: attempt to access beyond end of device [ 79.114397][ T454] loop5: rw=1, sector=57352, nr_sectors = 4064 limit=40427 [ 79.130483][ T454] kworker/u4:4: attempt to access beyond end of device [ 79.130483][ T454] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 79.356933][ T1911] usbhid 5-1:0.0: can't add hid device: -71 [ 79.362999][ T1911] usbhid: probe of 5-1:0.0 failed with error -71 [ 79.377601][ T2102] EXT4-fs (loop4): unmounting filesystem. [ 79.390986][ T1911] usb 5-1: USB disconnect, device number 6 [ 80.326289][ T2612] set_capacity_and_notify: 1 callbacks suppressed [ 80.326307][ T2612] loop8: detected capacity change from 0 to 40427 [ 80.379815][ T2612] F2FS-fs (loop8): invalid crc value [ 80.403898][ T2612] F2FS-fs (loop8): Found nat_bits in checkpoint [ 80.517754][ T2612] F2FS-fs (loop8): Start checkpoint disabled! [ 80.529280][ T2612] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 80.566823][ T2612] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 80.894131][ T8] kworker/u4:0: attempt to access beyond end of device [ 80.894131][ T8] loop8: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 80.951911][ T8] kworker/u4:0: attempt to access beyond end of device [ 80.951911][ T8] loop8: rw=1, sector=77832, nr_sectors = 2064 limit=40427 [ 80.965977][ T28] audit: type=1400 audit(1793911735.306:828): avc: denied { mounton } for pid=2618 comm="syz.5.788" path="/120/file0" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.015860][ T8] kworker/u4:0: attempt to access beyond end of device [ 81.015860][ T8] loop8: rw=1, sector=79896, nr_sectors = 2024 limit=40427 [ 81.297812][ T2621] loop8: detected capacity change from 0 to 2048 [ 81.312478][ T28] audit: type=1400 audit(1793911735.666:829): avc: denied { mounton } for pid=2620 comm="syz.8.798" path="/syzcgroup/unified/syz8/file0" dev="cgroup2" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 81.374982][ T28] audit: type=1400 audit(1793911735.726:830): avc: denied { remount } for pid=2620 comm="syz.8.798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.799843][ T2635] FAULT_INJECTION: forcing a failure. [ 81.799843][ T2635] name failslab, interval 1, probability 0, space 0, times 0 [ 81.826935][ T2635] CPU: 1 PID: 2635 Comm: syz.8.806 Tainted: G W syzkaller #0 [ 81.835742][ T2635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 81.845834][ T2635] Call Trace: [ 81.849133][ T2635] [ 81.852095][ T2635] __dump_stack+0x21/0x24 [ 81.856460][ T2635] dump_stack_lvl+0x110/0x170 [ 81.861158][ T2635] ? __cfi_dump_stack_lvl+0x8/0x8 [ 81.866222][ T2635] ? xas_nomem+0x6b/0x1f0 [ 81.870579][ T2635] dump_stack+0x15/0x24 [ 81.874751][ T2635] should_fail_ex+0x3bf/0x510 [ 81.879458][ T2635] ? __proc_create+0x376/0x8f0 [ 81.884249][ T2635] __should_failslab+0xac/0xf0 [ 81.889033][ T2635] should_failslab+0x9/0x20 [ 81.893560][ T2635] kmem_cache_alloc+0x3b/0x320 [ 81.898365][ T2635] __proc_create+0x376/0x8f0 [ 81.903008][ T2635] ? proc_symlink+0x1f0/0x1f0 [ 81.907763][ T2635] proc_create_reg+0x96/0x110 [ 81.912477][ T2635] proc_create_net_data+0x95/0x1a0 [ 81.917620][ T2635] ? __cfi_proc_create_net_data+0x10/0x10 [ 81.923368][ T2635] ? proc_create_seq_private+0x166/0x1c0 [ 81.929039][ T2635] dev_mc_net_init+0x56/0x70 [ 81.933668][ T2635] ops_init+0x2ce/0x470 [ 81.937862][ T2635] setup_net+0x4b4/0xcd0 [ 81.942143][ T2635] ? copy_net_ns+0x5c0/0x5c0 [ 81.946758][ T2635] ? __kasan_kmalloc+0x95/0xb0 [ 81.951550][ T2635] ? copy_net_ns+0x185/0x5c0 [ 81.956176][ T2635] copy_net_ns+0x355/0x5c0 [ 81.960620][ T2635] create_new_namespaces+0x3a8/0x660 [ 81.965951][ T2635] unshare_nsproxy_namespaces+0x120/0x170 [ 81.971703][ T2635] ksys_unshare+0x4d5/0x850 [ 81.976249][ T2635] ? __cfi_ksys_unshare+0x10/0x10 [ 81.981307][ T2635] ? fpregs_restore_userregs+0x128/0x260 [ 81.987017][ T2635] __x64_sys_unshare+0x38/0x40 [ 81.991824][ T2635] x64_sys_call+0x767/0x9a0 [ 81.996365][ T2635] do_syscall_64+0x4c/0xa0 [ 82.000804][ T2635] ? clear_bhb_loop+0x30/0x80 [ 82.005519][ T2635] ? clear_bhb_loop+0x30/0x80 [ 82.010227][ T2635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.016147][ T2635] RIP: 0033:0x7efe7019fb19 [ 82.020785][ T2635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.040426][ T2635] RSP: 002b:00007efe71052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.048880][ T2635] RAX: ffffffffffffffda RBX: 00007efe70425fa0 RCX: 00007efe7019fb19 [ 82.056892][ T2635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 82.064894][ T2635] RBP: 00007efe70237b70 R08: 0000000000000000 R09: 0000000000000000 [ 82.072897][ T2635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.080897][ T2635] R13: 00007efe70426038 R14: 00007efe70425fa0 R15: 00007fff8e486eb8 [ 82.088993][ T2635] [ 82.206960][ T2645] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 82.256543][ T28] audit: type=1400 audit(1793911736.606:831): avc: denied { create } for pid=2642 comm="syz.5.797" name="#2c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.287577][ T2645] overlayfs: failed to resolve './file0': -40 [ 82.308607][ T28] audit: type=1400 audit(1793911736.606:832): avc: denied { link } for pid=2642 comm="syz.5.797" name="#2c" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.350781][ T28] audit: type=1400 audit(1793911736.606:833): avc: denied { rename } for pid=2642 comm="syz.5.797" name="#2d" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.571153][ T2658] loop4: detected capacity change from 0 to 2048 [ 83.471531][ T8] blk_print_req_error: 7 callbacks suppressed [ 83.471550][ T8] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.492096][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 145446) [ 83.504188][ T8] Buffer I/O error on device sda1, logical block 145408 [ 83.511255][ T8] device offline error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.521796][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146469) [ 83.533382][ T8] Buffer I/O error on device sda1, logical block 146431 [ 83.540368][ T8] device offline error, dev sda, sector 1175694 op 0x1:(WRITE) flags 0x0 phys_seg 16 prio class 2 [ 83.550985][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146961) [ 83.562570][ T8] Buffer I/O error on device sda1, logical block 146923 [ 83.569530][ T8] Buffer I/O error on device sda1, logical block 146924 [ 83.576474][ T8] Buffer I/O error on device sda1, logical block 146925 [ 83.583425][ T8] Buffer I/O error on device sda1, logical block 146926 [ 83.590395][ T8] Buffer I/O error on device sda1, logical block 146927 [ 83.597404][ T8] Buffer I/O error on device sda1, logical block 146928 [ 83.604350][ T8] Buffer I/O error on device sda1, logical block 146929 [ 83.611320][ T8] Buffer I/O error on device sda1, logical block 146930 [ 83.618352][ T8] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.628885][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 147494) [ 83.640480][ T8] device offline error, dev sda, sector 1188142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.651004][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 148517) [ 83.662590][ T8] device offline error, dev sda, sector 1192102 op 0x1:(WRITE) flags 0x0 phys_seg 16 prio class 2 [ 83.673207][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 149012) [ 83.684847][ T8] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.695371][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398) [ 83.706954][ T8] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.717472][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144421) [ 83.729056][ T8] device offline error, dev sda, sector 1159374 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 2 [ 83.739589][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144921) [ 83.751196][ T8] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 83.761720][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2029 starting block 141862) [ 83.833532][ T65] Buffer I/O error on dev sda1, logical block 131299, lost sync page write [ 83.856879][ T65] Aborting journal on device sda1-8. [ 83.862318][ T65] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 83.872340][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 83.876186][ T65] JBD2: I/O error when updating journal superblock for sda1-8. [ 83.916773][ T278] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 83.924982][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 83.956995][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 83.963536][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 83.983737][ T278] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 83.992016][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 83.998815][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 84.016831][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.028163][ T278] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 84.049909][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 84.057513][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 84.079562][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.082382][ T2670] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.810: Detected aborted journal [ 84.105255][ T2667] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 84.112263][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 84.118830][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.130050][ T2670] EXT4-fs (sda1): Remounting filesystem read-only [ 84.137871][ T2670] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.810: Detected aborted journal [ 84.156697][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 84.163181][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.168594][ T2665] loop5: detected capacity change from 0 to 40427 [ 84.181131][ T2670] EXT4-fs (sda1): Remounting filesystem read-only [ 84.191411][ T2670] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.810: Detected aborted journal [ 84.202395][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.215160][ T2665] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 84.240318][ T2665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 84.273222][ T2665] F2FS-fs (loop5): invalid crc value [ 84.327642][ T2665] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.336923][ T2680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 84.442711][ T2665] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 84.456705][ T2665] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 84.548658][ T803] bio_check_eod: 5 callbacks suppressed [ 84.548675][ T803] syz-executor: attempt to access beyond end of device [ 84.548675][ T803] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.570287][ T2688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.826'. [ 84.964867][ T456] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.359725][ T2702] ip_tables: iptables: counters copy to user failed while replacing table [ 85.643275][ T2704] Write-error on swap-device (8:0:796646) [ 85.649239][ T2704] Write-error on swap-device (8:0:796654) [ 85.655120][ T2704] Write-error on swap-device (8:0:796662) Nov 5 20:49:00 [ 85.662348][ T2704] Write-error on swap-device (8:0:796670) syzkaller kern.alert kernel: [ 85.643275][ T2704] Write-error on swap-device (8:0:796646) Nov[ 85.676754][ T2704] Write-error on swap-device (8:0:787846) 5 20:49:00 syz[ 85.683044][ T2704] Write-error on swap-device (8:0:787854) kaller kern.aler[ 85.683142][ T2704] Write-error on swap-device (8:0:787862) t kernel: [ 85.649239][ T2704] Write-error on swap-device (8:0:796654) Nov 5 20:49:00 syzkaller kern.alert kernel: [ 85.655120][ T2704] Write-error on swap-device (8:0:796662) Nov 5 20:49:00 syzkaller kern.alert kernel: [ 85.662348][ T2704] Write-error on swap-device (8:0:796670) Nov 5 20:49:00 syzkaller kern.alert kernel: [ 85.676754][ T2704] Write-error on swap-device (8:0:787846) Nov 5 20:49:00 syzkaller kern.alert kernel: [ 85.683044][ T2704] Write-error on swap-device (8:0:787854) Nov 5 20:49:00 syzkaller kern.alert kernel: [ 85.683142][ T2704] Write-error on swap-device (8:0:787862) [ 86.604838][ T2730] device-mapper: table: 252:2: thin-pool: unknown target type [ 86.615668][ T2730] device-mapper: ioctl: error adding target to table [ 86.627461][ T2730] device-mapper: ioctl: The device has no table. [ 86.724569][ T2736] loop5: detected capacity change from 0 to 512 [ 86.794923][ T2736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 86.806587][ T2736] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.818567][ T28] audit: type=1400 audit(1793911741.176:834): avc: denied { create } for pid=2735 comm="syz.5.832" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 86.864232][ T803] EXT4-fs (loop5): unmounting filesystem. [ 86.883698][ T28] audit: type=1400 audit(1793911741.236:835): avc: denied { mounton } for pid=2740 comm="syz.4.834" path="/57/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.907746][ T2741] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.930945][ T2743] ./dev/sda1: Can't open blockdev [ 86.943530][ T28] audit: type=1400 audit(1793911741.276:836): avc: denied { read } for pid=2740 comm="syz.4.834" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.999530][ T28] audit: type=1400 audit(1793911741.276:837): avc: denied { open } for pid=2740 comm="syz.4.834" path="/57/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.023656][ T28] audit: type=1400 audit(1793911741.276:838): avc: denied { getattr } for pid=2740 comm="syz.4.834" name="saved_tgids" dev="tracefs" ino=13706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.048297][ T1785] Bluetooth: hci0: command 0x1003 tx timeout [ 87.054364][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.135882][ T28] audit: type=1400 audit(1793911741.486:839): avc: denied { create } for pid=2749 comm="syz.5.837" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.187309][ T28] audit: type=1400 audit(1793911741.516:840): avc: denied { write } for pid=2749 comm="syz.5.837" name="file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.226838][ T28] audit: type=1400 audit(1793911741.516:841): avc: denied { open } for pid=2749 comm="syz.5.837" path="/138/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.249692][ T28] audit: type=1400 audit(1793911741.516:842): avc: denied { ioctl } for pid=2749 comm="syz.5.837" path="/138/file0" dev="tmpfs" ino=776 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.274251][ T28] audit: type=1400 audit(1793911741.526:843): avc: denied { unlink } for pid=803 comm="syz-executor" name="file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.416473][ T2773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.655422][ T2786] binder: 2784:2786 ioctl c0306201 0 returned -14 [ 87.786690][ T314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.989156][ T314] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 88.008217][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.036512][ T314] usb 5-1: Product: syz [ 88.040748][ T314] usb 5-1: Manufacturer: syz [ 88.045365][ T314] usb 5-1: SerialNumber: syz [ 88.653773][ T2778] futex_wake_op: syz.4.850 tries to shift op by 144; fix this program [ 88.699114][ T314] rtl8150 5-1:1.0: couldn't reset the device [ 88.705277][ T314] rtl8150: probe of 5-1:1.0 failed with error -5 [ 88.731042][ T102] udevd[102]: worker [671] terminated by signal 7 (Bus error) [ 88.739049][ T314] usb 5-1: USB disconnect, device number 7 [ 88.745007][ T102] udevd[102]: worker [671] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 88.793188][ T102] udevd[102]: worker [409] terminated by signal 7 (Bus error) [ 88.809199][ T102] udevd[102]: worker [409] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 88.883507][ T2813] EXT4-fs error: 201 callbacks suppressed [ 88.883523][ T2813] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.867: Detected aborted journal [ 88.919035][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 88.935687][ T278] EXT4-fs: 190 callbacks suppressed [ 88.935700][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 88.958902][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 88.970100][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 88.981155][ T2816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.868: Detected aborted journal [ 88.992192][ T2816] EXT4-fs (sda1): Remounting filesystem read-only [ 88.999994][ T2816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.868: Detected aborted journal [ 89.012034][ T2816] EXT4-fs (sda1): Remounting filesystem read-only [ 89.042795][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 89.054504][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 89.061438][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 89.073035][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 89.077997][ T2777] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.850: Detected aborted journal [ 89.101124][ T2777] EXT4-fs (sda1): Remounting filesystem read-only [ 89.110959][ T2777] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.850: Detected aborted journal [ 89.132176][ T2777] EXT4-fs (sda1): Remounting filesystem read-only [ 89.139125][ T2777] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.850: Detected aborted journal [ 89.156677][ T2777] EXT4-fs (sda1): Remounting filesystem read-only [ 89.170068][ T2819] EXT4-fs (sda1): Remounting filesystem read-only [ 89.323889][ T2829] FAULT_INJECTION: forcing a failure. [ 89.323889][ T2829] name failslab, interval 1, probability 0, space 0, times 0 [ 89.363413][ T2829] CPU: 1 PID: 2829 Comm: syz.8.874 Tainted: G W syzkaller #0 [ 89.372265][ T2829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 89.382361][ T2829] Call Trace: [ 89.385679][ T2829] [ 89.388639][ T2829] __dump_stack+0x21/0x24 [ 89.393002][ T2829] dump_stack_lvl+0x110/0x170 [ 89.397709][ T2829] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.402776][ T2829] ? radix_tree_iter_tag_clear+0x68/0x80 [ 89.408439][ T2829] dump_stack+0x15/0x24 [ 89.412627][ T2829] should_fail_ex+0x3bf/0x510 [ 89.417331][ T2829] __should_failslab+0xac/0xf0 [ 89.422120][ T2829] should_failslab+0x9/0x20 [ 89.426640][ T2829] __kmem_cache_alloc_node+0x3d/0x2d0 [ 89.432056][ T2829] ? tcf_idr_create+0x5e/0x790 [ 89.436845][ T2829] ? kasan_set_track+0x4b/0x70 [ 89.441648][ T2829] ? kasan_save_alloc_info+0x1f/0x30 [ 89.446960][ T2829] ? __kasan_kmalloc+0x95/0xb0 [ 89.451755][ T2829] ? tcf_idr_create+0x5e/0x790 [ 89.456539][ T2829] __kmalloc+0xa4/0x1e0 [ 89.460718][ T2829] tcf_idr_create+0x5e/0x790 [ 89.465345][ T2829] tcf_bpf_init+0x3ad/0x900 [ 89.469899][ T2829] ? __cfi_tcf_bpf_init+0x10/0x10 [ 89.474963][ T2829] ? nla_memcpy+0x5b/0xc0 [ 89.479327][ T2829] ? memcpy+0x56/0x70 [ 89.483345][ T2829] tcf_action_init_1+0x478/0x6f0 [ 89.488312][ T2829] ? __cfi_tcf_action_init_1+0x10/0x10 [ 89.493818][ T2829] ? tc_action_load_ops+0x237/0x540 [ 89.499061][ T2829] tcf_action_init+0x286/0xab0 [ 89.503854][ T2829] ? __cfi_tcf_action_init+0x10/0x10 [ 89.509163][ T2829] ? avc_has_perm_noaudit+0x30a/0x490 [ 89.514585][ T2829] tc_ctl_action+0x417/0xb40 [ 89.519207][ T2829] ? __cfi_tc_ctl_action+0x10/0x10 [ 89.524370][ T2829] ? selinux_capable+0x2b6/0x3b0 [ 89.529344][ T2829] ? netlink_net_capable+0x125/0x160 [ 89.534673][ T2829] ? __cfi_tc_ctl_action+0x10/0x10 [ 89.539815][ T2829] rtnetlink_rcv_msg+0xb28/0xde0 [ 89.544865][ T2829] ? 0xffffffffa00040c0 [ 89.549128][ T2829] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 89.554614][ T2829] ? __kernel_text_address+0xd/0x30 [ 89.559840][ T2829] ? avc_has_perm_noaudit+0x390/0x490 [ 89.565249][ T2829] ? memcpy+0x56/0x70 [ 89.569254][ T2829] ? avc_has_perm_noaudit+0x30a/0x490 [ 89.574666][ T2829] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 89.580410][ T2829] ? kasan_save_alloc_info+0x1f/0x30 [ 89.585716][ T2829] ? avc_has_perm+0x163/0x250 [ 89.590417][ T2829] ? __alloc_skb+0x226/0x4a0 [ 89.595041][ T2829] ? netlink_sendmsg+0x635/0xbd0 [ 89.600004][ T2829] ? ____sys_sendmsg+0x5fb/0x9c0 [ 89.604986][ T2829] ? __cfi_avc_has_perm+0x10/0x10 [ 89.610121][ T2829] ? selinux_nlmsg_lookup+0x396/0x440 [ 89.615524][ T2829] netlink_rcv_skb+0x200/0x450 [ 89.620313][ T2829] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 89.625838][ T2829] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 89.631159][ T2829] ? __netlink_lookup+0x387/0x3b0 [ 89.636241][ T2829] rtnetlink_rcv+0x1c/0x20 [ 89.640694][ T2829] netlink_unicast+0x8c1/0xa60 [ 89.645496][ T2829] netlink_sendmsg+0x8b9/0xbd0 [ 89.650367][ T2829] ? __cfi_netlink_sendmsg+0x10/0x10 [ 89.655695][ T2829] ? security_socket_sendmsg+0x93/0xb0 [ 89.661179][ T2829] ? __cfi_netlink_sendmsg+0x10/0x10 [ 89.666500][ T2829] ____sys_sendmsg+0x5fb/0x9c0 [ 89.671287][ T2829] ? __sys_sendmsg_sock+0x40/0x40 [ 89.676343][ T2829] ? import_iovec+0x7c/0xb0 [ 89.680868][ T2829] ___sys_sendmsg+0x2a2/0x360 [ 89.685588][ T2829] ? __sys_sendmsg+0x290/0x290 [ 89.690381][ T2829] ? vfs_write+0xa51/0xd00 [ 89.694832][ T2829] ? __fdget+0x19c/0x220 [ 89.699103][ T2829] __x64_sys_sendmsg+0x20d/0x2e0 [ 89.704063][ T2829] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 89.709550][ T2829] ? __kasan_check_write+0x14/0x20 [ 89.714681][ T2829] ? fpregs_restore_userregs+0x128/0x260 [ 89.720346][ T2829] ? switch_fpu_return+0xe/0x10 [ 89.725250][ T2829] x64_sys_call+0x171/0x9a0 [ 89.729783][ T2829] do_syscall_64+0x4c/0xa0 [ 89.734228][ T2829] ? clear_bhb_loop+0x30/0x80 [ 89.738946][ T2829] ? clear_bhb_loop+0x30/0x80 [ 89.743653][ T2829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.749605][ T2829] RIP: 0033:0x7efe7019fb19 [ 89.754048][ T2829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.773673][ T2829] RSP: 002b:00007efe71052028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.782127][ T2829] RAX: ffffffffffffffda RBX: 00007efe70425fa0 RCX: 00007efe7019fb19 [ 89.790150][ T2829] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.798208][ T2829] RBP: 00007efe70237b70 R08: 0000000000000000 R09: 0000000000000000 [ 89.806214][ T2829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.814216][ T2829] R13: 00007efe70426038 R14: 00007efe70425fa0 R15: 00007fff8e486eb8 [ 89.822219][ T2829] [ 89.924135][ T2832] xt_hashlimit: size too large, truncated to 1048576 [ 90.636752][ T1785] Bluetooth: hci0: command 0x1003 tx timeout [ 90.642900][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.709497][ T2844] netlink: 'syz.8.878': attribute type 4 has an invalid length. [ 90.788057][ T308] device bridge_slave_1 left promiscuous mode [ 90.794286][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.802014][ T308] device bridge_slave_0 left promiscuous mode [ 90.808352][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.817026][ T308] device veth1_macvtap left promiscuous mode [ 90.823117][ T308] device veth0_vlan left promiscuous mode [ 91.516739][ T1916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 91.707984][ T1916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 91.719031][ T1916] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 91.733803][ T1916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.742989][ T1916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.751148][ T1916] usb 6-1: Product: syz [ 91.755350][ T1916] usb 6-1: Manufacturer: syz [ 91.760124][ T1916] usb 6-1: SerialNumber: syz [ 91.971230][ T2849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 92.588210][ T2849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 92.796369][ T1916] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 92.802973][ T1916] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 92.810730][ T1916] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 93.003337][ T1916] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 93.209871][ T1916] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 93.225344][ T1916] usb 6-1: USB disconnect, device number 6 [ 93.232591][ T1916] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 93.267747][ T1227] device bridge_slave_1 left promiscuous mode [ 93.273867][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.281501][ T1227] device bridge_slave_0 left promiscuous mode [ 93.287738][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.297309][ T1227] device veth1_macvtap left promiscuous mode [ 93.303578][ T1227] device veth0_vlan left promiscuous mode [ 93.579272][ T308] Bluetooth: hci0: Frame reassembly failed (-84) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=0 req=876 state=1 status=67 (errno 9: Bad file descriptor) [ 93.787283][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 93.787298][ T28] audit: type=1400 audit(1793911748.146:853): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[12733]" dev="pipefs" ino=12733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 93.954208][ T1686] EXT4-fs error: 193 callbacks suppressed [ 93.954227][ T1686] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 93.971713][ T1686] EXT4-fs: 109 callbacks suppressed [ 93.971726][ T1686] EXT4-fs (sda1): Remounting filesystem read-only [ 93.983530][ T1686] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 93.999563][ T1686] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 94.010751][ T1686] EXT4-fs (sda1): Remounting filesystem read-only [ 94.019274][ T1686] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 94.053333][ T2909] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.894: Detected aborted journal [ 94.064235][ T2909] EXT4-fs (sda1): Remounting filesystem read-only [ 94.070755][ T2909] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 94.079715][ T2909] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.894: Detected aborted journal [ 94.090790][ T2909] EXT4-fs (sda1): Remounting filesystem read-only [ 94.097268][ T2909] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 94.467281][ T1227] device bridge_slave_1 left promiscuous mode [ 94.473394][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.480919][ T1227] device bridge_slave_0 left promiscuous mode [ 94.487128][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.494999][ T1227] device veth1_macvtap left promiscuous mode [ 94.501063][ T1227] device veth0_vlan left promiscuous mode [ 94.869959][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 94.881211][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 95.586829][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 95.586825][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.695458][ T2880] EXT4-fs (sda1): Remounting filesystem read-only [ 95.706940][ T2880] EXT4-fs (sda1): Remounting filesystem read-only [ 95.754154][ T2880] EXT4-fs (sda1): Remounting filesystem read-only