last executing test programs: 44.26038742s ago: executing program 32 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) close(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 35.305307575s ago: executing program 33 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000380), &(0x7f00000003c0)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) 34.27685282s ago: executing program 34 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r4, &(0x7f0000000740)}, 0x20) 33.425972507s ago: executing program 1 (id=291): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syslog(0x1, 0x0, 0x0) 33.414139518s ago: executing program 1 (id=292): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x4, 0x0, [{0x4000009b, 0x0, 0x300000dfe}, {0x256, 0x0, 0x6}, {0x32b, 0x0, 0x16e000000}, {0x33e, 0x0, 0x2}]}) 33.29240327s ago: executing program 1 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0xa1ff, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 33.19607324s ago: executing program 1 (id=298): syz_mount_image$vfat(&(0x7f0000003080), &(0x7f0000000080)='./file0\x00', 0x12148c5, &(0x7f0000001680)={[{@utf8no}, {}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@showexec}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@utf8}, {@fat=@usefree}]}, 0x0, 0x2de, &(0x7f0000000880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000003500)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000003540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000003680)='.\x00', &(0x7f00000036c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 33.125354377s ago: executing program 1 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000700)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000840)=0x1, 0x4) 32.973960833s ago: executing program 1 (id=310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000840)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[], 0x5eaa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000008c0)={0x0, 0x80000, 0x80000000, 0x2, 0x1b, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000900)={0x3, 0xffffffff, 0x8, 0x5, 0x8, "3526a951b4aed27ef693333468f10600000050"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000940)=0x1) 32.973884453s ago: executing program 35 (id=310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000840)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[], 0x5eaa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000008c0)={0x0, 0x80000, 0x80000000, 0x2, 0x1b, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000900)={0x3, 0xffffffff, 0x8, 0x5, 0x8, "3526a951b4aed27ef693333468f10600000050"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000940)=0x1) 26.576648266s ago: executing program 6 (id=487): setns(0xc9, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r1, 0x20, &(0x7f0000000bc0)={&(0x7f0000000c00)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000001640)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r2, &(0x7f0000001c00)={0x0, 0x9533, &(0x7f0000001c40)=[{&(0x7f0000001c80)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 26.53588081s ago: executing program 6 (id=490): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffe, 0x401, 0x6, 0x3, 0x7, "5c6509e6e507e83b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) 26.523310882s ago: executing program 6 (id=492): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x1, 0x14fd, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x42, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000001f00)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000003ac0)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x1000000000000081) 26.327704512s ago: executing program 6 (id=502): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x12148c5, &(0x7f0000002940)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@utf8}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x0, 0x2d9, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 26.171376697s ago: executing program 6 (id=509): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x610400, &(0x7f0000001400)={[{@norecovery}, {@acl}, {@i_version}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@mb_optimize_scan}, {@init_itable_val={'init_itable', 0x3d, 0xb11}}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x80342, 0x168) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf2) pwritev2(r1, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1, 0x6ae, 0x0, 0x0) pwrite64(r0, &(0x7f00000012c0)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000001340)='a', 0x1d7efb9a, 0x9000) 25.687091257s ago: executing program 6 (id=515): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x175) 25.616654894s ago: executing program 36 (id=515): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x175) 17.781368914s ago: executing program 9 (id=651): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') faccessat2(r2, &(0x7f00000000c0)='\x00', 0x1, 0x1300) 17.708513602s ago: executing program 9 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.399409223s ago: executing program 9 (id=663): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @adapter={0x7ff, 0x1, 0x3, 0x6, 0x8}}]}) r2 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000280)=0x430f, 0x8) 17.33268542s ago: executing program 9 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0xc08) 17.3324449s ago: executing program 9 (id=666): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80401c, &(0x7f0000000180)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000280)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f000000d000)='.\x00', 0x282101, 0x50) unshare(0x22020600) r1 = openat(0xffffffffffffff9c, &(0x7f000000d040)='./file2\x00', 0x103042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f000000d0c0)={r0}) 17.318251242s ago: executing program 9 (id=667): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f0000000080)='./sys\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r2, 0xfffffffffffffffd, 0x58) 17.298856143s ago: executing program 37 (id=667): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f0000000080)='./sys\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r2, 0xfffffffffffffffd, 0x58) 16.924473362s ago: executing program 8 (id=673): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 16.574834847s ago: executing program 8 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x382, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socket(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 16.552959229s ago: executing program 8 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000600)=0x6) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.408668315s ago: executing program 8 (id=678): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000800)="$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") mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x1214040, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') 16.300277096s ago: executing program 8 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000140)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 16.130016713s ago: executing program 8 (id=683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) syz_open_procfs$namespace(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x30000000}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 16.129857773s ago: executing program 38 (id=683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) syz_open_procfs$namespace(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x30000000}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 15.110638657s ago: executing program 7 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001fb000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.956590803s ago: executing program 7 (id=697): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syslog(0x1, 0x0, 0x0) 14.88196736s ago: executing program 7 (id=700): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @private=0xa010100}}) poll(&(0x7f0000000180)=[{r0, 0x80}], 0x1, 0x8001) 14.799986639s ago: executing program 7 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0xc08) 14.68731091s ago: executing program 7 (id=706): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 14.096610311s ago: executing program 7 (id=713): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000240)='27', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) 14.096392871s ago: executing program 39 (id=713): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000240)='27', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) 9.538401406s ago: executing program 3 (id=792): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000530a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.488506201s ago: executing program 3 (id=795): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r2, 0x0, 0x0) 9.454946464s ago: executing program 3 (id=797): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r3, &(0x7f0000000240), 0x9) 9.421980398s ago: executing program 3 (id=800): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f00000027c0)="$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") mkdir(&(0x7f0000003d40)='./bus\x00', 0x0) mount$incfs(&(0x7f0000003d80)='./bus\x00', &(0x7f0000003dc0)='./bus\x00', &(0x7f0000003e00), 0x1804002, 0x0) chdir(&(0x7f0000003e40)='./bus\x00') symlink(&(0x7f0000003e80)='./bus\x00', &(0x7f0000003ec0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) 9.268741683s ago: executing program 3 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffe2c, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x1, 0xe, 0x1}, {0x7, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 9.154733485s ago: executing program 3 (id=804): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.154630725s ago: executing program 40 (id=804): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.984870279s ago: executing program 5 (id=823): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000540)={0x80042, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x1}, 0x10) 5.050723974s ago: executing program 4 (id=826): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000780), 0x2804000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) connect$unix(r1, &(0x7f0000000800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.050512864s ago: executing program 5 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 5.045506245s ago: executing program 2 (id=834): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000800000003000000000000004959ff"], 0xff04) 4.01895786s ago: executing program 0 (id=828): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x78df, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000003c0), 0x0}, 0x20) 4.01861502s ago: executing program 4 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) 4.01620165s ago: executing program 5 (id=838): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000180)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000001540)='.\x00', 0x8000, 0x8) getdents(r0, &(0x7f0000001580)=""/184, 0xb8) 4.01589001s ago: executing program 2 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000e80)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000ec0)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101041, 0x15) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000b00)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) 3.987530853s ago: executing program 0 (id=831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000ac0)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000b00)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000b40)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x5}}}}}}, 0x0) 2.864078367s ago: executing program 2 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00000d4000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xad7e0000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.863826058s ago: executing program 4 (id=833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xa6, &(0x7f0000000440)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000600), &(0x7f0000000640)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000680)="e1", 0x1, 0x20000000, 0x0, 0x0) 2.863121198s ago: executing program 5 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x52) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) dup(r1) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 2.863010448s ago: executing program 0 (id=836): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0xb3, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200000924"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000002c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f0000000300)=ANY=[]) 2.83673876s ago: executing program 4 (id=837): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000530a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.624283814s ago: executing program 4 (id=839): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.624124284s ago: executing program 5 (id=840): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_create_resource$futex(&(0x7f0000000040)=0x1) futex(r2, 0x86, 0x2, 0x0, r2, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 1.621408214s ago: executing program 2 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c00)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000cc0)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) 297.22203ms ago: executing program 0 (id=841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000011c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001200)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) 296.97467ms ago: executing program 2 (id=842): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001440)={{0x6, 0x1000, 0xffed, 0xa001}, 'syz1\x00', 0x4e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) dup3(r1, r0, 0x0) 296.79299ms ago: executing program 4 (id=843): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write(0xffffffffffffffff, &(0x7f0000000340)="aefc00001a0025f01d85bc", 0xb) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, '\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) r1 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x44) 296.63835ms ago: executing program 5 (id=844): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f00000027c0)="$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") mkdir(&(0x7f0000003d40)='./bus\x00', 0x0) mount$incfs(&(0x7f0000003d80)='./bus\x00', &(0x7f0000003dc0)='./bus\x00', &(0x7f0000003e00), 0x1804002, 0x0) chdir(&(0x7f0000003e40)='./bus\x00') symlink(&(0x7f0000003e80)='./bus\x00', &(0x7f0000003ec0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) 248.226205ms ago: executing program 0 (id=845): rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x22) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000440)={[0x4]}, 0x0, 0x8) 8.272139ms ago: executing program 0 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) 0s ago: executing program 2 (id=856): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000002480)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000002500)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000002540)='M', 0x1) recvmsg$unix(r1, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x10022) kernel console output (not intermixed with test programs): 00 R09: 0000000000000000 [ 31.607077][ T648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.615040][ T648] R13: 00007f69c590d038 R14: 00007f69c590cfa0 R15: 00007ffc4f343ba8 [ 31.623008][ T648] [ 31.630497][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.639024][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.651015][ T624] device veth1_macvtap entered promiscuous mode [ 31.662814][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.670831][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.676122][ T638] F2FS-fs (loop0): invalid crc value [ 31.679948][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.690677][ T638] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.717420][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.733512][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.749923][ T658] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.760124][ T638] F2FS-fs (loop0): Start checkpoint disabled! [ 31.772059][ T638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 31.772747][ T658] futex_wake_op: syz.2.124 tries to shift op by -1; fix this program [ 31.810893][ T638] attempt to access beyond end of device [ 31.810893][ T638] loop0: rw=2049, want=45128, limit=40427 [ 31.825693][ T463] device bridge_slave_1 left promiscuous mode [ 31.833801][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.860055][ T463] device bridge_slave_0 left promiscuous mode [ 31.862661][ T306] attempt to access beyond end of device [ 31.862661][ T306] loop0: rw=2049, want=40992, limit=40427 [ 31.878054][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.897980][ T463] device veth1_macvtap left promiscuous mode [ 31.904076][ T463] device veth0_vlan left promiscuous mode [ 31.979703][ T674] FAULT_INJECTION: forcing a failure. [ 31.979703][ T674] name failslab, interval 1, probability 0, space 0, times 0 [ 31.992741][ T674] CPU: 0 PID: 674 Comm: syz.0.128 Not tainted syzkaller #0 [ 32.000251][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 32.010419][ T674] Call Trace: [ 32.013694][ T674] [ 32.016621][ T674] __dump_stack+0x21/0x30 [ 32.020937][ T674] dump_stack_lvl+0x110/0x170 [ 32.025603][ T674] ? show_regs_print_info+0x20/0x20 [ 32.030803][ T674] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 32.036616][ T674] ? __stack_depot_save+0x441/0x480 [ 32.041795][ T674] dump_stack+0x15/0x20 [ 32.045943][ T674] should_fail+0x3ab/0x500 [ 32.050636][ T674] __should_failslab+0xa4/0xe0 [ 32.054626][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 32.055429][ T674] should_failslab+0x9/0x20 [ 32.055454][ T674] slab_pre_alloc_hook+0x39/0xd0 [ 32.072423][ T674] ? __d_alloc+0x2d/0x690 [ 32.076760][ T674] kmem_cache_alloc+0x44/0x260 [ 32.081559][ T674] ? replace_fd+0x160/0x160 [ 32.086086][ T674] __d_alloc+0x2d/0x690 [ 32.090352][ T674] ? _raw_spin_lock+0x94/0xf0 [ 32.095023][ T674] d_alloc_pseudo+0x1d/0x70 [ 32.099524][ T674] alloc_file_pseudo+0xe0/0x200 [ 32.104381][ T674] ? alloc_empty_file_noaccount+0x80/0x80 [ 32.110099][ T674] __anon_inode_getfd+0x26b/0x3d0 [ 32.115144][ T674] ? anon_inode_getfd+0x40/0x40 [ 32.119983][ T674] ? _raw_spin_lock_bh+0x94/0xf0 [ 32.124901][ T674] anon_inode_getfd+0x31/0x40 [ 32.129746][ T674] btf_new_fd+0x796/0x930 [ 32.134164][ T674] bpf_btf_load+0x6f/0x90 [ 32.138483][ T674] __sys_bpf+0x577/0x7d0 [ 32.142753][ T674] ? bpf_link_show_fdinfo+0x330/0x330 [ 32.148147][ T674] ? __kasan_check_write+0x14/0x20 [ 32.153284][ T674] ? switch_fpu_return+0x15d/0x2c0 [ 32.158524][ T674] __x64_sys_bpf+0x7c/0x90 [ 32.162973][ T674] x64_sys_call+0x4b9/0x9a0 [ 32.167508][ T674] do_syscall_64+0x4c/0xa0 [ 32.171948][ T674] ? clear_bhb_loop+0x50/0xa0 [ 32.176650][ T674] ? clear_bhb_loop+0x50/0xa0 [ 32.181361][ T674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.187373][ T674] RIP: 0033:0x7f1bbd8bef19 [ 32.191807][ T674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.211451][ T674] RSP: 002b:00007f1bbc30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.219892][ T674] RAX: ffffffffffffffda RBX: 00007f1bbdb3bfa0 RCX: 00007f1bbd8bef19 [ 32.227896][ T674] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 32.235889][ T674] RBP: 00007f1bbd94df6d R08: 0000000000000000 R09: 0000000000000000 [ 32.243883][ T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.251872][ T674] R13: 00007f1bbdb3c038 R14: 00007f1bbdb3bfa0 R15: 00007ffc41018128 [ 32.259962][ T674] [ 32.343108][ T687] loop0: detected capacity change from 0 to 512 [ 32.414688][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.426377][ T39] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.435931][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.447602][ T39] usb 6-1: config 0 descriptor?? [ 32.563084][ T700] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 32.576404][ T700] caller generic_access_phys+0x1e0/0x360 mapping multiple BARs [ 32.784638][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 32.790618][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 32.815721][ T39] usb 6-1: USB disconnect, device number 2 [ 32.872777][ T711] loop1: detected capacity change from 0 to 40427 [ 32.882513][ T711] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 32.907451][ T711] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.917345][ T711] F2FS-fs (loop1): invalid crc value [ 32.925336][ T711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.960978][ T711] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 32.968073][ T711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.284876][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 33.326770][ T729] loop3: detected capacity change from 0 to 128 [ 33.349418][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-diskseq/85.tmp-b7:3' failed: Read-only file system [ 33.362269][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 33.388021][ T729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.406536][ T729] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.427330][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-diskseq/85.tmp-b7:3' failed: Read-only file system [ 33.458685][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 33.531215][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-diskseq/85.tmp-b7:3' failed: Read-only file system [ 33.605956][ T405] udevd[405]: symlink '../../loop3' '/dev/disk/by-diskseq/85.tmp-b7:3' failed: Read-only file system [ 33.644659][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.664645][ T39] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 33.684028][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.702909][ T39] usb 6-1: config 0 descriptor?? [ 34.038395][ T755] loop3: detected capacity change from 0 to 1024 [ 34.059129][ T332] udevd[332]: symlink '../../loop3' '/dev/disk/by-diskseq/87.tmp-b7:3' failed: Read-only file system [ 34.081400][ T332] udevd[332]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 34.103888][ T755] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 34.177178][ T30] kauditd_printk_skb: 7950 callbacks suppressed [ 34.177197][ T30] audit: type=1400 audit(1794279435.725:8156): avc: denied { watch } for pid=753 comm="syz.3.161" path="/33/file0/control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.262655][ T30] audit: type=1400 audit(1794279435.755:8157): avc: denied { remove_name } for pid=753 comm="syz.3.161" name="control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.304437][ T332] udevd[332]: symlink '../../loop3' '/dev/disk/by-diskseq/87.tmp-b7:3' failed: Read-only file system [ 34.314776][ T30] audit: type=1400 audit(1794279435.755:8158): avc: denied { rmdir } for pid=753 comm="syz.3.161" name="control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.344183][ T332] udevd[332]: symlink '../../loop3' '/dev/disk/by-diskseq/87.tmp-b7:3' failed: Read-only file system [ 34.367715][ T30] audit: type=1400 audit(1794279435.865:8159): avc: denied { bind } for pid=761 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.421969][ T30] audit: type=1400 audit(1794279435.905:8160): avc: denied { search } for pid=763 comm="syz.3.165" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.472280][ T30] audit: type=1400 audit(1794279435.905:8161): avc: denied { read write } for pid=763 comm="syz.3.165" name="trace_pipe" dev="tracefs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.495603][ T30] audit: type=1400 audit(1794279435.905:8162): avc: denied { open } for pid=763 comm="syz.3.165" path="/35/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.520803][ T30] audit: type=1400 audit(1794279435.905:8163): avc: denied { mounton } for pid=763 comm="syz.3.165" path="/35/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.593028][ T30] audit: type=1400 audit(1794279436.135:8164): avc: denied { create } for pid=769 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.613369][ T30] audit: type=1400 audit(1794279436.135:8165): avc: denied { setopt } for pid=769 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.665204][ T39] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 34.673938][ T39] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input4 [ 34.701392][ T778] printk: console [ttyS0] disabled [ 34.729322][ T778] printk: console [ttyS0] enabled [ 34.857820][ T39] usb 6-1: USB disconnect, device number 3 [ 34.924689][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.164626][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 35.234625][ T60] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.299391][ T6] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 35.310739][ T6] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.323549][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 35.330290][ T6] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 35.339470][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.348058][ T6] usb 2-1: config 0 descriptor?? [ 35.444635][ T305] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.564662][ T60] usb 1-1: not running at top speed; connect to a high speed hub [ 35.644641][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.654818][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 35.663937][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.694650][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 35.705278][ T60] usb 1-1: Found UVC 1.00 device (046d:0825) [ 35.712549][ T60] usb 1-1: No streaming interface found for terminal 2. [ 35.816218][ T6] input: HID 1e7d:2c24 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2C24.0001/input/input5 [ 35.844686][ T305] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 35.852887][ T305] usb 4-1: config 0 has no interface number 0 [ 35.858993][ T305] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 35.868998][ T305] usb 4-1: config 0 interface 196 has no altsetting 0 [ 35.897149][ T6] pyra 0003:1E7D:2C24.0001: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 35.917848][ T6] usb 1-1: USB disconnect, device number 3 [ 36.044783][ T305] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 36.053879][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.061897][ T305] usb 4-1: Product: syz [ 36.066178][ T305] usb 4-1: Manufacturer: syz [ 36.070794][ T305] usb 4-1: SerialNumber: syz [ 36.076253][ T305] usb 4-1: config 0 descriptor?? [ 36.094689][ T797] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 36.285221][ T60] usb 2-1: USB disconnect, device number 2 [ 36.425264][ T815] netlink: 168 bytes leftover after parsing attributes in process `syz.0.185'. [ 36.556681][ T305] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 36.771976][ T797] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.785451][ T797] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.915129][ T860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer. [ 36.978716][ T867] ip_tables: iptables: counters copy to user failed while replacing table [ 37.022038][ T858] loop2: detected capacity change from 0 to 32768 [ 37.055598][ T405] loop2: p1 p3 < p5 p6 p7 p8 > p4 [ 37.062702][ T405] loop2: p4 start 1426063360 is beyond EOD, truncated [ 37.069919][ T405] loop2: p5 size 46336 extends beyond EOD, truncated [ 37.077685][ T405] loop2: p6 size 134217728 extends beyond EOD, truncated [ 37.087494][ T405] loop2: p7 start 270335 is beyond EOD, truncated [ 37.100356][ T858] loop2: p1 p3 < p5 p6 p7 p8 > p4 [ 37.112557][ T858] loop2: p4 start 1426063360 is beyond EOD, truncated [ 37.120929][ T858] loop2: p5 size 46336 extends beyond EOD, truncated [ 37.132901][ T858] loop2: p6 size 134217728 extends beyond EOD, truncated [ 37.134085][ T876] loop0: detected capacity change from 0 to 128 [ 37.146898][ T858] loop2: p7 start 270335 is beyond EOD, truncated [ 37.205942][ T305] usb 4-1: USB disconnect, device number 3 [ 37.210030][ T876] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.223274][ T876] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.241774][ T876] syz.0.205 (pid 876) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 37.275386][ T305] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 37.298064][ T876] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 37.338286][ T881] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 37.974229][ T891] loop2: detected capacity change from 0 to 131072 [ 38.016634][ T934] input: syz1 as /devices/virtual/input/input6 [ 38.018362][ T898] loop1: detected capacity change from 0 to 131072 [ 38.038942][ T891] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 38.048056][ T891] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.082529][ T936] futex_wake_op: syz.3.223 tries to shift op by 144; fix this program [ 38.090929][ T891] F2FS-fs (loop2): invalid crc value [ 38.131111][ T891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.202865][ T891] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 38.212236][ T891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 38.220763][ T931] loop0: detected capacity change from 0 to 40427 [ 38.240035][ T931] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 38.259733][ T931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 38.285088][ T931] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.339841][ T931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 38.347029][ T931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.412558][ T953] device bridge_slave_0 left promiscuous mode [ 38.428968][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.555824][ T961] loop2: detected capacity change from 0 to 7 [ 38.827302][ T968] loop2: detected capacity change from 0 to 40427 [ 38.857794][ T968] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 38.864382][ T968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 38.883676][ T968] F2FS-fs (loop2): invalid crc value [ 38.890567][ T968] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.925618][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.940843][ T983] program syz.3.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.951197][ T968] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 38.958833][ T968] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.970338][ T986] Zero length message leads to an empty skb [ 39.021826][ T993] loop3: detected capacity change from 0 to 256 [ 39.028567][ T288] attempt to access beyond end of device [ 39.028567][ T288] loop2: rw=2049, want=45112, limit=40427 [ 39.058138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 39.080813][ T993] exfat: Deprecated parameter 'utf8' [ 39.088346][ T999] loop0: detected capacity change from 0 to 2048 [ 39.095514][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.103841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 39.104637][ T993] exfat: Deprecated parameter 'utf8' [ 39.112409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.137760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.146557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.155042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.163431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.180340][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 39.194997][ T993] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 39.251220][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 39.251238][ T30] audit: type=1400 audit(1794279440.795:8201): avc: denied { write } for pid=992 comm="syz.3.242" path=2F34342FE91F7189591E9233614B2F66696C6531 dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.286506][ T30] audit: type=1400 audit(1794279440.795:8202): avc: denied { setattr } for pid=992 comm="syz.3.242" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.304684][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.319630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 39.338020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.353777][ T1007] loop3: detected capacity change from 0 to 256 [ 39.364607][ T60] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.374092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 39.396867][ T60] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.407500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.424982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.443223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.457096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.475433][ T1013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 39.488044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.512527][ T1013] incfs: ino conflict with backing FS 1 [ 39.548215][ T30] audit: type=1400 audit(1794279441.095:8203): avc: denied { remove_name } for pid=636 comm="syz.3.116" name=".index" dev="loop3" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.584519][ T30] audit: type=1400 audit(1794279441.095:8204): avc: denied { rmdir } for pid=636 comm="syz.3.116" name=".index" dev="loop3" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.585281][ T60] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 39.626204][ T1019] xt_hashlimit: size too large, truncated to 1048576 [ 39.645863][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.649480][ T1017] EXT4-fs (loop5): 1 orphan inode deleted [ 39.653908][ T60] usb 2-1: Product: syz [ 39.666818][ T60] usb 2-1: Manufacturer: syz [ 39.674149][ T60] usb 2-1: SerialNumber: syz [ 39.711475][ T1017] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 39.752328][ T1017] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.853873][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.861257][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.869374][ T1024] device bridge_slave_0 entered promiscuous mode [ 39.876909][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.884025][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.892128][ T1024] device bridge_slave_1 entered promiscuous mode [ 39.973592][ T1032] bridge0: port 3(syz_tun) entered blocking state [ 39.981051][ T1032] bridge0: port 3(syz_tun) entered disabled state [ 39.988395][ T1032] device syz_tun entered promiscuous mode [ 39.994457][ T1032] bridge0: port 3(syz_tun) entered blocking state [ 40.000942][ T1032] bridge0: port 3(syz_tun) entered listening state [ 40.015678][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.022788][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.030198][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.037423][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.063691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.071368][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.080772][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.097807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.112634][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.119744][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.126875][ T1048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.128209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.137059][ T1048] xt_hashlimit: size too large, truncated to 1048576 [ 40.143926][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.157441][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.173196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.184881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.207689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.219989][ T1024] device veth0_vlan entered promiscuous mode [ 40.227231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.235926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.250411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.273401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.276227][ T1051] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 40.296931][ T1024] device veth1_macvtap entered promiscuous mode [ 40.306553][ T45] device bridge_slave_1 left promiscuous mode [ 40.316225][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.325060][ T30] audit: type=1400 audit(1794279441.875:8205): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop0" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.353768][ T45] device bridge_slave_0 left promiscuous mode [ 40.361571][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.370564][ T45] device veth1_macvtap left promiscuous mode [ 40.376800][ T45] device veth0_vlan left promiscuous mode [ 40.404713][ T60] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 40.414408][ T60] usb 2-1: clock source 0 is not valid, cannot use [ 40.437595][ T1055] xt_hashlimit: size too large, truncated to 1048576 [ 40.454692][ T60] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 40.456009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.469948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.491325][ T30] audit: type=1400 audit(1794279442.035:8206): avc: denied { mount } for pid=1024 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.709134][ T20] usb 2-1: USB disconnect, device number 3 [ 40.712901][ T1064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.272'. [ 40.734965][ T1064] device gretap1 entered promiscuous mode [ 40.889462][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.896729][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.904364][ T1076] device bridge_slave_0 entered promiscuous mode [ 40.911742][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.919052][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.927158][ T1076] device bridge_slave_1 entered promiscuous mode [ 41.023013][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.030136][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.037454][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.044503][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.071080][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.079196][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.086791][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.097947][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.106258][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.113295][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.122264][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.130956][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.138128][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.155569][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.170282][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.191382][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.202817][ T1076] device veth0_vlan entered promiscuous mode [ 41.209393][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.219019][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.226703][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.247369][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.255998][ T1076] device veth1_macvtap entered promiscuous mode [ 41.268141][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.286166][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.294750][ T30] audit: type=1400 audit(1794279442.845:8207): avc: denied { mounton } for pid=1113 comm="syz.1.286" path="/55/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.317794][ T45] device bridge_slave_1 left promiscuous mode [ 41.324055][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.334482][ T45] device bridge_slave_0 left promiscuous mode [ 41.343193][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.355251][ T45] device veth1_macvtap left promiscuous mode [ 41.367007][ T45] device veth0_vlan left promiscuous mode [ 41.514347][ T1122] kvm: emulating exchange as write [ 41.535206][ T30] audit: type=1400 audit(1794279443.085:8208): avc: denied { remount } for pid=1124 comm="syz.7.274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.570966][ T1127] input: syz0 as /devices/virtual/input/input7 [ 41.578238][ T1125] xt_hashlimit: size too large, truncated to 1048576 [ 41.644692][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.765823][ T30] audit: type=1400 audit(1794279443.315:8209): avc: denied { bind } for pid=1141 comm="syz.7.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.852837][ T1147] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 41.880624][ T30] audit: type=1400 audit(1794279443.425:8210): avc: denied { mounton } for pid=1146 comm="syz.1.298" path="/62/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 41.885435][ T60] usb 7-1: Using ep0 maxpacket: 32 [ 42.034770][ T60] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.048657][ T60] usb 7-1: config 0 has no interface number 0 [ 42.055096][ T60] usb 7-1: config 0 interface 184 has no altsetting 0 [ 42.071056][ T1176] set_capacity_and_notify: 5 callbacks suppressed [ 42.071072][ T1176] loop2: detected capacity change from 0 to 128 [ 42.149773][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.164909][ T20] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.165374][ T1176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.224730][ T60] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.226750][ T1176] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.247183][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.260301][ T60] usb 7-1: Product: syz [ 42.264498][ T60] usb 7-1: Manufacturer: syz [ 42.274617][ T60] usb 7-1: SerialNumber: syz [ 42.284117][ T60] usb 7-1: config 0 descriptor?? [ 42.300381][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.307883][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.317536][ T1188] device bridge_slave_0 entered promiscuous mode [ 42.325176][ T60] smsc75xx v1.0.0 [ 42.334869][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.362186][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.380047][ T1188] device bridge_slave_1 entered promiscuous mode [ 42.482119][ T1205] loop7: detected capacity change from 0 to 512 [ 42.539686][ T1205] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.557358][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.564581][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.571901][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.578982][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.588822][ T1205] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.322: bg 0: block 5: invalid block bitmap [ 42.601602][ T1205] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 42.614795][ T1205] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.322: invalid indirect mapped block 3 (level 2) [ 42.628963][ T1205] EXT4-fs (loop7): 2 truncates cleaned up [ 42.635075][ T1205] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,data_err=abort,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 42.640254][ T1203] loop5: detected capacity change from 0 to 40427 [ 42.665801][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.673404][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.683812][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.708030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.718052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.718190][ T1203] F2FS-fs (loop5): Found nat_bits in checkpoint [ 42.726773][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.739613][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.748303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.757703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.766426][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.773492][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.779812][ T1203] F2FS-fs (loop5): Start checkpoint disabled! [ 42.793376][ T1203] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 42.805451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.813939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.823162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.831555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.833674][ T1203] attempt to access beyond end of device [ 42.833674][ T1203] loop5: rw=2049, want=53256, limit=40427 [ 42.851145][ T1203] attempt to access beyond end of device [ 42.851145][ T1203] loop5: rw=2049, want=53264, limit=40427 [ 42.869599][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.883524][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.897558][ T1188] device veth0_vlan entered promiscuous mode [ 42.905141][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.913452][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.931786][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.936004][ T463] attempt to access beyond end of device [ 42.936004][ T463] loop5: rw=2049, want=41008, limit=40427 [ 42.943370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.962486][ T1188] device veth1_macvtap entered promiscuous mode [ 42.970837][ T1223] netlink: 24 bytes leftover after parsing attributes in process `syz.7.328'. [ 42.981725][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.984849][ T60] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 42.990046][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.001284][ T60] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.009334][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.037991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.054913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.064738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.075049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.107913][ T1227] device syzkaller0 entered promiscuous mode [ 43.140522][ T1232] xt_hashlimit: size too large, truncated to 1048576 [ 43.213030][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.225590][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.240474][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.254121][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.268908][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.282479][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.298320][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.313056][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.330940][ T45] device bridge_slave_1 left promiscuous mode [ 43.337726][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.376424][ T45] device veth1_macvtap left promiscuous mode [ 43.384266][ T1252] loop7: detected capacity change from 0 to 128 [ 43.392640][ T45] device veth0_vlan left promiscuous mode [ 43.410745][ T1252] EXT4-fs (loop7): mounted filesystem without journal. Opts: noquota,nombcache,,errors=continue. Quota mode: none. [ 43.432727][ T1252] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.564498][ T1269] loop7: detected capacity change from 0 to 128 [ 43.590407][ T1269] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 43.600397][ T1269] FAT-fs (loop7): Filesystem has been set read-only [ 43.632496][ T1271] loop7: detected capacity change from 0 to 16 [ 43.676448][ T1271] erofs: (device loop7): mounted with root inode @ nid 36. [ 43.704669][ T60] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 43.715548][ T60] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 43.725277][ T60] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.741310][ T60] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 43.753249][ T60] usb 7-1: USB disconnect, device number 2 [ 43.783222][ T1279] device veth0 entered promiscuous mode [ 43.791879][ T1279] device veth0 left promiscuous mode [ 43.818017][ T1283] loop7: detected capacity change from 0 to 256 [ 43.847860][ T1283] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.858579][ T1283] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 43.868698][ T1283] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 43.936813][ T1285] loop7: detected capacity change from 0 to 128 [ 43.970259][ T1288] loop5: detected capacity change from 0 to 512 [ 43.978927][ T1285] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 44.005231][ T1288] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.016949][ T1288] EXT4-fs (loop5): 1 truncate cleaned up [ 44.022644][ T1288] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.141097][ T1296] loop7: detected capacity change from 0 to 128 [ 44.227880][ T1296] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 44.269939][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 44.269955][ T30] audit: type=1400 audit(1794279445.815:8236): avc: denied { write } for pid=1304 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.296671][ T30] audit: type=1400 audit(1794279445.815:8237): avc: denied { nlmsg_write } for pid=1304 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.325583][ T30] audit: type=1400 audit(1794279445.875:8238): avc: denied { bind } for pid=1310 comm="syz.7.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.345212][ T30] audit: type=1400 audit(1794279445.875:8239): avc: denied { name_bind } for pid=1310 comm="syz.7.362" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 44.371657][ T30] audit: type=1400 audit(1794279445.875:8240): avc: denied { node_bind } for pid=1310 comm="syz.7.362" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 44.442584][ T30] audit: type=1400 audit(1794279445.985:8241): avc: denied { write } for pid=1321 comm="syz.8.369" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.473232][ T30] audit: type=1400 audit(1794279446.015:8242): avc: denied { create } for pid=1321 comm="syz.8.369" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.475117][ T405] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 44.494107][ T30] audit: type=1400 audit(1794279446.015:8243): avc: denied { read write } for pid=1321 comm="syz.8.369" name="dm0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.522464][ T30] audit: type=1400 audit(1794279446.015:8244): avc: denied { open } for pid=1321 comm="syz.8.369" path="/10/dm0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.545176][ T405] loop6: partition table partially beyond EOD, truncated [ 44.546107][ T30] audit: type=1400 audit(1794279446.055:8245): avc: denied { unlink } for pid=1188 comm="syz-executor" name="dm0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.552709][ T405] loop6: p1 start 3405774849 is beyond EOD, truncated [ 44.595202][ T405] loop6: p2 start 53543428 is beyond EOD, truncated [ 44.601921][ T405] loop6: p3 start 4284289 is beyond EOD, truncated [ 44.615657][ T405] loop6: p5 start 3405774849 is beyond EOD, truncated [ 44.623074][ T405] loop6: p6 start 53543428 is beyond EOD, truncated [ 44.641273][ T1318] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 44.646916][ T1318] loop6: partition table partially beyond EOD, truncated [ 44.654686][ T1318] loop6: p1 start 3405774849 is beyond EOD, truncated [ 44.662234][ T1318] loop6: p2 start 53543428 is beyond EOD, truncated [ 44.669698][ T1318] loop6: p3 start 4284289 is beyond EOD, truncated [ 44.677129][ T1318] loop6: p5 start 3405774849 is beyond EOD, truncated [ 44.684044][ T1318] loop6: p6 start 53543428 is beyond EOD, truncated [ 44.773623][ T405] udevd[405]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 44.773869][ T1318] exfat: Unknown parameter 'xœìÛ' [ 44.843072][ T405] udevd[405]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 45.102044][ T1363] FAULT_INJECTION: forcing a failure. [ 45.102044][ T1363] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.125309][ T1363] CPU: 1 PID: 1363 Comm: syz.6.384 Not tainted syzkaller #0 [ 45.132653][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.142751][ T1363] Call Trace: [ 45.146052][ T1363] [ 45.149282][ T1363] __dump_stack+0x21/0x30 [ 45.153636][ T1363] dump_stack_lvl+0x110/0x170 [ 45.158332][ T1363] ? show_regs_print_info+0x20/0x20 [ 45.163553][ T1363] dump_stack+0x15/0x20 [ 45.167816][ T1363] should_fail+0x3ab/0x500 [ 45.172255][ T1363] should_fail_usercopy+0x1a/0x20 [ 45.177290][ T1363] _copy_from_iter+0x220/0x10a0 [ 45.182190][ T1363] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 45.187563][ T1363] ? __kmalloc_track_caller+0x13c/0x2c0 [ 45.193142][ T1363] ? __check_object_size+0x2dd/0x3b0 [ 45.198459][ T1363] netlink_sendmsg+0x72c/0xb80 [ 45.203601][ T1363] ? netlink_getsockopt+0x530/0x530 [ 45.208914][ T1363] ? security_socket_sendmsg+0x82/0xa0 [ 45.214405][ T1363] __sys_sendto+0x46d/0x620 [ 45.218979][ T1363] ? __ia32_sys_getpeername+0x90/0x90 [ 45.224387][ T1363] ? alloc_empty_file_noaccount+0x80/0x80 [ 45.224634][ T6] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 45.230142][ T1363] ? preempt_count_add+0x90/0x1b0 [ 45.230171][ T1363] ? fd_install+0x169/0x2a0 [ 45.230188][ T1363] ? __sys_socket+0x15a/0x190 [ 45.251885][ T1363] __x64_sys_sendto+0xe5/0x100 [ 45.256850][ T1363] x64_sys_call+0x178/0x9a0 [ 45.261349][ T1363] do_syscall_64+0x4c/0xa0 [ 45.265757][ T1363] ? clear_bhb_loop+0x50/0xa0 [ 45.270415][ T1363] ? clear_bhb_loop+0x50/0xa0 [ 45.275075][ T1363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.280963][ T1363] RIP: 0033:0x7fe5b4e2374e [ 45.285363][ T1363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.305233][ T1363] RSP: 002b:00007fe5b38afe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 45.313654][ T1363] RAX: ffffffffffffffda RBX: 00007fe5b38b16c0 RCX: 00007fe5b4e2374e [ 45.321624][ T1363] RDX: 0000000000000020 RSI: 00007fe5b38b0000 RDI: 0000000000000006 [ 45.329576][ T1363] RBP: 0000000000000000 R08: 00007fe5b38aff04 R09: 000000000000000c [ 45.337560][ T1363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 45.345533][ T1363] R13: 00007fe5b38aff58 R14: 00007fe5b38b0000 R15: 0000000000000000 [ 45.353532][ T1363] [ 45.474647][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 45.594696][ T6] usb 9-1: config 87 has an invalid interface number: 229 but max is 1 [ 45.602953][ T6] usb 9-1: config 87 has no interface number 1 [ 45.609566][ T6] usb 9-1: config 87 interface 229 has no altsetting 0 [ 45.620978][ T1393] syz.6.397 (1393) used greatest stack depth: 20840 bytes left [ 45.624723][ T305] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.651643][ T1396] netlink: 27 bytes leftover after parsing attributes in process `syz.6.398'. [ 45.747094][ T1402] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 45.760307][ T1402] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.774657][ T6] usb 9-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 45.801966][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.810074][ T6] usb 9-1: Product: syz [ 45.814354][ T6] usb 9-1: Manufacturer: syz [ 45.819367][ T6] usb 9-1: SerialNumber: syz [ 45.904128][ T1407] syz.5.404 (1407) used greatest stack depth: 20200 bytes left [ 45.994663][ T305] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 46.022153][ T305] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.037384][ T305] usb 8-1: config 0 interface 0 has no altsetting 0 [ 46.047074][ T305] usb 8-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 46.061308][ T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.077748][ T305] usb 8-1: config 0 descriptor?? [ 46.129333][ T1437] xt_hashlimit: size too large, truncated to 1048576 [ 46.136909][ T6] usb 9-1: bad CDC descriptors [ 46.149443][ T6] usb 9-1: USB disconnect, device number 2 [ 46.457848][ T1446] ip_tables: iptables: counters copy to user failed while replacing table [ 46.486658][ T1446] ip_tables: iptables: counters copy to user failed while replacing table [ 46.508679][ T1448] IPv6: sit1: Disabled Multicast RS [ 46.555453][ T305] apple 0003:05AC:0220.0003: ignoring exceeding usage max [ 46.573170][ T305] apple 0003:05AC:0220.0003: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 46.594727][ T305] apple 0003:05AC:0220.0003: No inputs registered, leaving [ 46.605576][ T305] apple 0003:05AC:0220.0003: hidraw0: USB HID v0.11 Joystick [HID 05ac:0220] on usb-dummy_hcd.7-1/input0 [ 46.758139][ T305] usb 8-1: USB disconnect, device number 2 [ 46.818308][ T1476] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 47.031116][ T1495] FAT-fs (loop5): Directory bread(block 64) failed [ 47.038139][ T1495] FAT-fs (loop5): Directory bread(block 65) failed [ 47.045504][ T1495] FAT-fs (loop5): Directory bread(block 66) failed [ 47.052110][ T1495] FAT-fs (loop5): Directory bread(block 67) failed [ 47.058882][ T1495] FAT-fs (loop5): Directory bread(block 68) failed [ 47.065518][ T1495] FAT-fs (loop5): Directory bread(block 69) failed [ 47.072125][ T1495] FAT-fs (loop5): Directory bread(block 70) failed [ 47.078738][ T1495] FAT-fs (loop5): Directory bread(block 71) failed [ 47.085468][ T1495] FAT-fs (loop5): Directory bread(block 72) failed [ 47.092069][ T1495] FAT-fs (loop5): Directory bread(block 73) failed [ 47.210995][ T1507] set_capacity_and_notify: 6 callbacks suppressed [ 47.211005][ T1507] loop5: detected capacity change from 0 to 512 [ 47.270199][ T1509] device bridge1 entered promiscuous mode [ 47.279001][ T1507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.292123][ T1507] EXT4-fs (loop5): 1 truncate cleaned up [ 47.298509][ T1507] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,inlinecrypt,nojournal_checksum,usrquota,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 47.321391][ T1507] EXT4-fs (loop5): shut down requested (2) [ 47.339353][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 47.348476][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 47.357487][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 47.366747][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 47.375619][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 47.384459][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 47.691127][ T1531] loop7: detected capacity change from 0 to 40427 [ 47.749054][ T1531] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 47.759976][ T1531] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 47.769720][ T1531] F2FS-fs (loop7): invalid crc value [ 47.777414][ T1531] F2FS-fs (loop7): Found nat_bits in checkpoint [ 47.816353][ T1531] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 47.823504][ T1531] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 47.851027][ T1076] attempt to access beyond end of device [ 47.851027][ T1076] loop7: rw=2049, want=45104, limit=40427 [ 47.900154][ T1578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1692678547 (1692678547 ns) > initial count (310440980 ns). Using initial count to start timer. [ 47.947273][ T1587] loop6: detected capacity change from 0 to 512 [ 48.007450][ T1587] EXT4-fs (loop6): orphan cleanup on readonly fs [ 48.014722][ T1587] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 48.025163][ T1587] EXT4-fs error (device loop6): __ext4_iget:4950: inode #13: block 16777216: comm syz.6.475: invalid block [ 48.037018][ T1587] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.475: couldn't read orphan inode 13 (err -117) [ 48.049975][ T1587] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 48.072138][ T1596] loop8: detected capacity change from 0 to 128 [ 48.121969][ T1596] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.132958][ T1596] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.150691][ T1601] loop6: detected capacity change from 0 to 128 [ 48.175144][ T1601] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 48.192478][ T45] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 48.258929][ T1609] ip_tables: iptables: counters copy to user failed while replacing table [ 48.295154][ T1613] loop8: detected capacity change from 0 to 128 [ 48.307887][ T1615] loop6: detected capacity change from 0 to 128 [ 48.368077][ T1613] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 48.368102][ T1615] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.368175][ T1615] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.382970][ T1613] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.473878][ T1621] tipc: Started in network mode [ 48.480452][ T1621] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 48.491973][ T1621] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 48.506371][ T1621] tipc: Enabled bearer , priority 10 [ 48.514953][ T1627] sd 0:0:1:0: device reset [ 48.521671][ T1629] loop6: detected capacity change from 0 to 256 [ 48.589458][ T1629] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 48.614750][ T1639] capability: warning: `syz.2.495' uses 32-bit capabilities (legacy support in use) [ 48.657085][ T1644] loop5: detected capacity change from 0 to 128 [ 48.676876][ T1646] netlink: 4 bytes leftover after parsing attributes in process `syz.8.499'. [ 48.701881][ T1651] loop2: detected capacity change from 0 to 16 [ 48.717824][ T1644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 48.726389][ T1644] FAT-fs (loop5): Filesystem has been set read-only [ 48.770790][ T1651] erofs: (device loop2): mounted with root inode @ nid 36. [ 48.815490][ T1659] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 48.851304][ T1664] FAULT_INJECTION: forcing a failure. [ 48.851304][ T1664] name failslab, interval 1, probability 0, space 0, times 0 [ 48.871357][ T1664] CPU: 1 PID: 1664 Comm: syz.2.507 Not tainted syzkaller #0 [ 48.878706][ T1664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 48.889135][ T1664] Call Trace: [ 48.892435][ T1664] [ 48.895387][ T1664] __dump_stack+0x21/0x30 [ 48.899731][ T1664] dump_stack_lvl+0x110/0x170 [ 48.904408][ T1664] ? show_regs_print_info+0x20/0x20 [ 48.909602][ T1664] ? __kasan_kmalloc+0xe6/0x100 [ 48.914460][ T1664] ? kmem_cache_alloc_trace+0x119/0x270 [ 48.920093][ T1664] ? proc_fill_super+0x77/0x760 [ 48.924939][ T1664] ? get_tree_nodev+0xb3/0x160 [ 48.929698][ T1664] ? vfs_get_tree+0x89/0x260 [ 48.934285][ T1664] ? do_new_mount+0x251/0xb40 [ 48.938956][ T1664] ? path_mount+0x640/0xff0 [ 48.943542][ T1664] dump_stack+0x15/0x20 [ 48.947691][ T1664] should_fail+0x3ab/0x500 [ 48.952103][ T1664] __should_failslab+0xa4/0xe0 [ 48.956867][ T1664] should_failslab+0x9/0x20 [ 48.961364][ T1664] slab_pre_alloc_hook+0x39/0xd0 [ 48.966299][ T1664] ? proc_alloc_inode+0x1d/0xb0 [ 48.971142][ T1664] kmem_cache_alloc+0x44/0x260 [ 48.975931][ T1664] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 48.982428][ T1664] proc_alloc_inode+0x1d/0xb0 [ 48.987101][ T1664] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 48.993426][ T1664] new_inode_pseudo+0x62/0x210 [ 48.998271][ T1664] new_inode+0x28/0x1e0 [ 49.002423][ T1664] proc_get_inode+0x24/0x710 [ 49.007019][ T1664] proc_fill_super+0x4e3/0x760 [ 49.011815][ T1664] get_tree_nodev+0xb3/0x160 [ 49.016428][ T1664] ? proc_reconfigure+0x3c0/0x3c0 [ 49.021458][ T1664] proc_get_tree+0x1c/0x20 [ 49.025886][ T1664] vfs_get_tree+0x89/0x260 [ 49.030301][ T1664] do_new_mount+0x251/0xb40 [ 49.034800][ T1664] ? security_capable+0x87/0xb0 [ 49.039680][ T1664] path_mount+0x640/0xff0 [ 49.044207][ T1664] __se_sys_mount+0x320/0x390 [ 49.048880][ T1664] ? __x64_sys_mount+0xd0/0xd0 [ 49.053749][ T1664] ? __kasan_check_write+0x14/0x20 [ 49.058860][ T1664] __x64_sys_mount+0xbf/0xd0 [ 49.063449][ T1664] x64_sys_call+0x6bf/0x9a0 [ 49.067950][ T1664] do_syscall_64+0x4c/0xa0 [ 49.072360][ T1664] ? clear_bhb_loop+0x50/0xa0 [ 49.077068][ T1664] ? clear_bhb_loop+0x50/0xa0 [ 49.081754][ T1664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.087646][ T1664] RIP: 0033:0x7f69c568ff19 [ 49.092062][ T1664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.111666][ T1664] RSP: 002b:00007f69c40de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.120087][ T1664] RAX: ffffffffffffffda RBX: 00007f69c590cfa0 RCX: 00007f69c568ff19 [ 49.128054][ T1664] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 49.136466][ T1664] RBP: 00007f69c571ef6d R08: 0000000000000000 R09: 0000000000000000 [ 49.144431][ T1664] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 49.152659][ T1664] R13: 00007f69c590d038 R14: 00007f69c590cfa0 R15: 00007ffc4f343ba8 [ 49.160636][ T1664] [ 49.166289][ T1664] proc_fill_super: get root inode failed [ 49.278318][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 49.278335][ T30] audit: type=1326 audit(1794279450.825:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.314603][ T20] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 49.323092][ T30] audit: type=1326 audit(1794279450.825:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.384624][ T30] audit: type=1326 audit(1794279450.825:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.420464][ T30] audit: type=1326 audit(1794279450.825:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.464863][ T30] audit: type=1326 audit(1794279450.825:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.499923][ T30] audit: type=1326 audit(1794279450.825:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.554739][ T30] audit: type=1326 audit(1794279450.825:8398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.581481][ T30] audit: type=1326 audit(1794279450.825:8399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.618609][ T60] tipc: Node number set to 1 [ 49.633892][ T30] audit: type=1326 audit(1794279450.835:8400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.667321][ T1686] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.674374][ T1686] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.702361][ T1686] device bridge_slave_0 entered promiscuous mode [ 49.708789][ T30] audit: type=1326 audit(1794279450.835:8401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.5.510" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e9f54874e code=0x7ffc0000 [ 49.744178][ T1686] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.753939][ T1686] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.765611][ T1686] device bridge_slave_1 entered promiscuous mode [ 49.884830][ T20] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 49.902810][ T20] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.915734][ T20] usb 9-1: Product: syz [ 49.919983][ T20] usb 9-1: Manufacturer: syz [ 49.945821][ T20] usb 9-1: SerialNumber: syz [ 49.963979][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.974937][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.996985][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.005888][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.014115][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.021213][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.029888][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.041705][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.054403][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.061512][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.092972][ T45] device bridge_slave_1 left promiscuous mode [ 50.101939][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.119856][ T45] device bridge_slave_0 left promiscuous mode [ 50.134786][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.142345][ T1709] FAULT_INJECTION: forcing a failure. [ 50.142345][ T1709] name failslab, interval 1, probability 0, space 0, times 0 [ 50.155174][ T1709] CPU: 0 PID: 1709 Comm: syz.2.526 Not tainted syzkaller #0 [ 50.162468][ T1709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.172518][ T1709] Call Trace: [ 50.175812][ T1709] [ 50.178738][ T1709] __dump_stack+0x21/0x30 [ 50.183057][ T1709] dump_stack_lvl+0x110/0x170 [ 50.187723][ T1709] ? show_regs_print_info+0x20/0x20 [ 50.192907][ T1709] ? __kasan_check_write+0x14/0x20 [ 50.197994][ T1709] dump_stack+0x15/0x20 [ 50.202140][ T1709] should_fail+0x3ab/0x500 [ 50.206533][ T1709] __should_failslab+0xa4/0xe0 [ 50.211299][ T1709] should_failslab+0x9/0x20 [ 50.215796][ T1709] slab_pre_alloc_hook+0x39/0xd0 [ 50.220836][ T1709] ? __se_sys_userfaultfd+0xc8/0x3c0 [ 50.226107][ T1709] kmem_cache_alloc+0x44/0x260 [ 50.230863][ T1709] __se_sys_userfaultfd+0xc8/0x3c0 [ 50.235999][ T1709] __x64_sys_userfaultfd+0x38/0x40 [ 50.241206][ T1709] x64_sys_call+0x514/0x9a0 [ 50.245694][ T1709] do_syscall_64+0x4c/0xa0 [ 50.250099][ T1709] ? clear_bhb_loop+0x50/0xa0 [ 50.254786][ T1709] ? clear_bhb_loop+0x50/0xa0 [ 50.259440][ T1709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.265366][ T1709] RIP: 0033:0x7f69c568ff19 [ 50.269768][ T1709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.289374][ T1709] RSP: 002b:00007f69c40de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 50.297767][ T1709] RAX: ffffffffffffffda RBX: 00007f69c590cfa0 RCX: 00007f69c568ff19 [ 50.305722][ T1709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001 [ 50.313775][ T1709] RBP: 00007f69c571ef6d R08: 0000000000000000 R09: 0000000000000000 [ 50.321733][ T1709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.329684][ T1709] R13: 00007f69c590d038 R14: 00007f69c590cfa0 R15: 00007ffc4f343ba8 [ 50.337646][ T1709] [ 50.342305][ T45] device veth1_macvtap left promiscuous mode [ 50.348456][ T45] device veth0_vlan left promiscuous mode [ 50.421287][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.429752][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.439454][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.454079][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.467513][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.477310][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.485213][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.493684][ T1686] device veth0_vlan entered promiscuous mode [ 50.507152][ T1686] device veth1_macvtap entered promiscuous mode [ 50.514366][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.530703][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.540218][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.829063][ T1744] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.836151][ T1744] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 50.866480][ T1744] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,data_err=abort,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,,errors=continue. Quota mode: writeback. [ 50.974398][ T1751] EXT4-fs (loop5): Ignoring removed bh option [ 50.974612][ T1750] KVM: debugfs: duplicate directory 1750-4 [ 51.061980][ T1762] FAULT_INJECTION: forcing a failure. [ 51.061980][ T1762] name failslab, interval 1, probability 0, space 0, times 0 [ 51.074797][ T1762] CPU: 1 PID: 1762 Comm: syz.2.544 Not tainted syzkaller #0 [ 51.082104][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.092170][ T1762] Call Trace: [ 51.095446][ T1762] [ 51.098363][ T1762] __dump_stack+0x21/0x30 [ 51.102779][ T1762] dump_stack_lvl+0x110/0x170 [ 51.107433][ T1762] ? show_regs_print_info+0x20/0x20 [ 51.112611][ T1762] ? __kasan_kmalloc+0xe6/0x100 [ 51.117455][ T1762] ? __kasan_kmalloc+0xd4/0x100 [ 51.122305][ T1762] ? __kmalloc+0x13d/0x2c0 [ 51.126753][ T1762] ? fib4_rules_init+0x9b/0x170 [ 51.131612][ T1762] ? fib_net_init+0x123/0x2d0 [ 51.134763][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0e:7a:43:83:b7:19 [ 51.136272][ T1762] ? ops_init+0x2c0/0x470 [ 51.136298][ T1762] ? setup_net+0x331/0xa30 [ 51.149315][ T20] rtl8150 9-1:1.0: eth1: rtl8150 is detected [ 51.150564][ T1762] dump_stack+0x15/0x20 [ 51.165249][ T1762] should_fail+0x3ab/0x500 [ 51.169700][ T1762] __should_failslab+0xa4/0xe0 [ 51.174541][ T1762] should_failslab+0x9/0x20 [ 51.179074][ T1762] slab_pre_alloc_hook+0x39/0xd0 [ 51.184051][ T1762] ? sock_alloc_inode+0x1b/0xb0 [ 51.189017][ T1762] kmem_cache_alloc+0x44/0x260 [ 51.193819][ T1762] ? sockfs_init_fs_context+0xb0/0xb0 [ 51.199240][ T1762] sock_alloc_inode+0x1b/0xb0 [ 51.203950][ T1762] ? sockfs_init_fs_context+0xb0/0xb0 [ 51.209362][ T1762] new_inode_pseudo+0x62/0x210 [ 51.214259][ T1762] sock_create_lite+0x8b/0x4e0 [ 51.219321][ T1762] __netlink_kernel_create+0x11c/0x910 [ 51.224902][ T1762] ? __kmalloc+0x13d/0x2c0 [ 51.229358][ T1762] ? netlink_set_err+0x3f0/0x3f0 [ 51.234331][ T1762] ? memcpy+0x56/0x70 [ 51.238340][ T1762] fib_net_init+0x179/0x2d0 [ 51.242869][ T1762] ? inet_dump_fib+0x870/0x870 [ 51.247658][ T1762] ? ip_fib_net_exit+0x350/0x350 [ 51.252628][ T1762] ? devinet_init_net+0x377/0x5b0 [ 51.257689][ T1762] ops_init+0x2c0/0x470 [ 51.261882][ T1762] setup_net+0x331/0xa30 [ 51.266153][ T1762] ? copy_net_ns+0x5c0/0x5c0 [ 51.270765][ T1762] copy_net_ns+0x355/0x5c0 [ 51.275169][ T1762] create_new_namespaces+0x3a8/0x660 [ 51.280535][ T1762] unshare_nsproxy_namespaces+0x120/0x170 [ 51.286247][ T1762] ksys_unshare+0x4d7/0x810 [ 51.290762][ T1762] ? sighand_ctor+0x60/0x60 [ 51.295268][ T1762] ? __kasan_check_write+0x14/0x20 [ 51.300359][ T1762] ? switch_fpu_return+0x15d/0x2c0 [ 51.305460][ T1762] __x64_sys_unshare+0x38/0x40 [ 51.310223][ T1762] x64_sys_call+0x442/0x9a0 [ 51.314718][ T1762] do_syscall_64+0x4c/0xa0 [ 51.319124][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 51.323785][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 51.328444][ T1762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.334426][ T1762] RIP: 0033:0x7f69c568ff19 [ 51.338822][ T1762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.358431][ T1762] RSP: 002b:00007f69c40de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.366920][ T1762] RAX: ffffffffffffffda RBX: 00007f69c590cfa0 RCX: 00007f69c568ff19 [ 51.374894][ T1762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 51.382954][ T1762] RBP: 00007f69c571ef6d R08: 0000000000000000 R09: 0000000000000000 [ 51.390922][ T1762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.398975][ T1762] R13: 00007f69c590d038 R14: 00007f69c590cfa0 R15: 00007ffc4f343ba8 [ 51.406947][ T1762] [ 51.461438][ T1779] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 51.473019][ T1779] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.372295][ T1792] FAULT_INJECTION: forcing a failure. [ 52.372295][ T1792] name failslab, interval 1, probability 0, space 0, times 0 [ 52.384943][ T1792] CPU: 1 PID: 1792 Comm: syz.7.549 Not tainted syzkaller #0 [ 52.392212][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.402363][ T1792] Call Trace: [ 52.405639][ T1792] [ 52.408567][ T1792] __dump_stack+0x21/0x30 [ 52.412882][ T1792] dump_stack_lvl+0x110/0x170 [ 52.417559][ T1792] ? show_regs_print_info+0x20/0x20 [ 52.422736][ T1792] dump_stack+0x15/0x20 [ 52.426868][ T1792] should_fail+0x3ab/0x500 [ 52.431374][ T1792] __should_failslab+0xa4/0xe0 [ 52.436121][ T1792] should_failslab+0x9/0x20 [ 52.440612][ T1792] slab_pre_alloc_hook+0x39/0xd0 [ 52.445540][ T1792] ? security_inode_alloc+0x33/0x110 [ 52.450852][ T1792] kmem_cache_alloc+0x44/0x260 [ 52.455597][ T1792] security_inode_alloc+0x33/0x110 [ 52.460692][ T1792] inode_init_always+0x72c/0x9b0 [ 52.465634][ T1792] new_inode_pseudo+0x91/0x210 [ 52.470387][ T1792] sock_create_lite+0x8b/0x4e0 [ 52.475136][ T1792] __netlink_kernel_create+0x11c/0x910 [ 52.480597][ T1792] ? __kmalloc+0x13d/0x2c0 [ 52.485029][ T1792] ? netlink_set_err+0x3f0/0x3f0 [ 52.489984][ T1792] ? memcpy+0x56/0x70 [ 52.493953][ T1792] fib_net_init+0x179/0x2d0 [ 52.498457][ T1792] ? inet_dump_fib+0x870/0x870 [ 52.503214][ T1792] ? ip_fib_net_exit+0x350/0x350 [ 52.508145][ T1792] ? devinet_init_net+0x377/0x5b0 [ 52.513165][ T1792] ops_init+0x2c0/0x470 [ 52.517323][ T1792] setup_net+0x331/0xa30 [ 52.521576][ T1792] ? copy_net_ns+0x5c0/0x5c0 [ 52.526170][ T1792] copy_net_ns+0x355/0x5c0 [ 52.530571][ T1792] create_new_namespaces+0x3a8/0x660 [ 52.535942][ T1792] unshare_nsproxy_namespaces+0x120/0x170 [ 52.541728][ T1792] ksys_unshare+0x4d7/0x810 [ 52.546247][ T1792] ? sighand_ctor+0x60/0x60 [ 52.550757][ T1792] ? __kasan_check_write+0x14/0x20 [ 52.555877][ T1792] ? switch_fpu_return+0x15d/0x2c0 [ 52.560978][ T1792] __x64_sys_unshare+0x38/0x40 [ 52.565723][ T1792] x64_sys_call+0x442/0x9a0 [ 52.570205][ T1792] do_syscall_64+0x4c/0xa0 [ 52.574605][ T1792] ? clear_bhb_loop+0x50/0xa0 [ 52.579290][ T1792] ? clear_bhb_loop+0x50/0xa0 [ 52.583968][ T1792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.589856][ T1792] RIP: 0033:0x7f8a12017f19 [ 52.594268][ T1792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.613868][ T1792] RSP: 002b:00007f8a10a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 52.622380][ T1792] RAX: ffffffffffffffda RBX: 00007f8a12294fa0 RCX: 00007f8a12017f19 [ 52.630340][ T1792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 52.638300][ T1792] RBP: 00007f8a120a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 52.646262][ T1792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.654253][ T1792] R13: 00007f8a12295038 R14: 00007f8a12294fa0 R15: 00007ffc01e71798 [ 52.662209][ T1792] [ 52.687642][ T26] usb 9-1: USB disconnect, device number 3 [ 52.694608][ C0] usb 9-1: eth1: intr status -71 [ 52.701316][ T140] usb 9-1: device reset failed [ 53.341169][ T1815] set_capacity_and_notify: 4 callbacks suppressed [ 53.341187][ T1815] loop5: detected capacity change from 0 to 131072 [ 53.380589][ T1815] F2FS-fs (loop5): invalid crc value [ 53.412753][ T1815] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.462254][ T1815] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 53.526034][ T1876] loop9: detected capacity change from 0 to 1024 [ 53.561937][ T1876] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 53.561937][ T1876] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 53.561937][ T1876] [ 53.588876][ T1876] EXT4-fs (loop9): Ignoring removed orlov option [ 53.648238][ T1876] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 53.734607][ T20] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 53.816689][ T1896] ip_tables: iptables: counters copy to user failed while replacing table [ 53.856304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.872751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.891804][ T1903] loop5: detected capacity change from 0 to 128 [ 53.891892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.907224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.917064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.918514][ T1903] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 53.930582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.938539][ T1903] FAT-fs (loop5): Filesystem has been set read-only [ 53.947993][ T1903] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 53.952839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.966003][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.977576][ T20] usb 9-1: Using ep0 maxpacket: 8 [ 54.017599][ T1912] loop5: detected capacity change from 0 to 2048 [ 54.043511][ T1915] process 'syz.7.587' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 54.076189][ T10] smpboot: CPU 1 is now offline [ 54.168867][ T20] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.185320][ T20] usb 9-1: config 179 has no interface number 0 [ 54.201281][ T20] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 54.230594][ T20] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 54.262102][ T20] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.299014][ T20] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 54.326536][ T20] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 54.355880][ T20] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 54.371771][ T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.401447][ T1912] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.412921][ T1866] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.449386][ T1912] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.477312][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 54.477323][ T30] audit: type=1400 audit(1794279456.025:8472): avc: denied { ioctl } for pid=1911 comm="syz.5.585" path="/75/file0/file0/file0" dev="loop5" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.513165][ T1912] fs-verity: sha512 using implementation "sha512-avx2" [ 54.637867][ T1947] loop5: detected capacity change from 0 to 512 [ 54.646235][ T10] ACPI: \_SB_.CP01: Eject incomplete - status 0xf [ 54.667282][ T1947] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.692304][ T1947] EXT4-fs (loop5): 1 truncate cleaned up [ 54.704543][ T1947] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.855253][ T20] usb 9-1: USB disconnect, device number 4 [ 54.864587][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 54.872929][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 54.896491][ T1952] kvm [1951]: vcpu0, guest rIP: 0x912a disabled perfctr wrmsr: 0xc1 data 0x60000000 [ 54.919188][ T1952] kvm [1951]: vcpu0, guest rIP: 0x912a disabled perfctr wrmsr: 0xc2 data 0x60000000 [ 54.955626][ T1952] kvm [1951]: vcpu0, guest rIP: 0x912a ignored wrmsr: 0x11e data 0x60000000 [ 54.979673][ T1952] kvm [1951]: vcpu0, guest rIP: 0x912a disabled perfctr wrmsr: 0x186 data 0x60000000 [ 54.989530][ T1952] kvm [1951]: vcpu0, guest rIP: 0x912a disabled perfctr wrmsr: 0x187 data 0x60000000 [ 55.014576][ C0] bridge0: port 3(syz_tun) entered learning state [ 55.035251][ T1967] sd 0:0:1:0: device reset [ 55.094664][ T307] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 55.254158][ T1970] loop7: detected capacity change from 0 to 40427 [ 55.267942][ T1972] FAULT_INJECTION: forcing a failure. [ 55.267942][ T1972] name failslab, interval 1, probability 0, space 0, times 0 [ 55.287807][ T1970] F2FS-fs (loop7): invalid crc value [ 55.296822][ T1970] F2FS-fs (loop7): Found nat_bits in checkpoint [ 55.303145][ T1972] CPU: 0 PID: 1972 Comm: syz.5.610 Not tainted syzkaller #0 [ 55.310438][ T1972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.320483][ T1972] Call Trace: [ 55.323760][ T1972] [ 55.326941][ T1972] __dump_stack+0x21/0x30 [ 55.331285][ T1972] dump_stack_lvl+0x110/0x170 [ 55.336053][ T1972] ? show_regs_print_info+0x20/0x20 [ 55.341425][ T1972] dump_stack+0x15/0x20 [ 55.345586][ T1972] should_fail+0x3ab/0x500 [ 55.350082][ T1972] __should_failslab+0xa4/0xe0 [ 55.354845][ T1972] should_failslab+0x9/0x20 [ 55.359362][ T1972] slab_pre_alloc_hook+0x39/0xd0 [ 55.364381][ T1972] kmem_cache_alloc_trace+0x48/0x270 [ 55.369651][ T1972] ? flow_indr_dev_setup_offload+0x249/0x630 [ 55.375627][ T1972] flow_indr_dev_setup_offload+0x249/0x630 [ 55.381441][ T1972] ? tcf_block_setup+0x790/0x790 [ 55.386362][ T1972] tcf_block_offload_cmd+0x27b/0x3a0 [ 55.391755][ T1972] ? tcf_proto_destroy+0x260/0x260 [ 55.396874][ T1972] ? rwsem_write_trylock+0x136/0x300 [ 55.402186][ T1972] ? __mutex_lock_slowpath+0x10/0x10 [ 55.407518][ T1972] ? kmem_cache_alloc_trace+0x119/0x270 [ 55.413056][ T1972] ? tcf_block_get_ext+0x68b/0x12f0 [ 55.418241][ T1972] tcf_block_get_ext+0xdd8/0x12f0 [ 55.423251][ T1972] clsact_init+0x234/0x2a0 [ 55.427658][ T1972] ? clsact_chain_head_change+0x30/0x30 [ 55.433187][ T1972] qdisc_create+0x807/0x11a0 [ 55.437763][ T1972] ? qdisc_notify+0x350/0x350 [ 55.442424][ T1972] ? memset+0x35/0x40 [ 55.446390][ T1972] ? dql_init+0xc5/0x1e0 [ 55.450614][ T1972] tc_modify_qdisc+0x8ce/0x1550 [ 55.455452][ T1972] ? qdisc_offload_graft_helper+0x290/0x290 [ 55.461329][ T1972] ? cap_capable+0x1a6/0x230 [ 55.465906][ T1972] ? ns_capable+0x8c/0xf0 [ 55.470218][ T1972] ? netlink_net_capable+0x125/0x160 [ 55.475485][ T1972] ? qdisc_offload_graft_helper+0x290/0x290 [ 55.481369][ T1972] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 55.486289][ T1972] ? 0xffffffffa0032000 [ 55.490428][ T1972] ? rtnetlink_bind+0x80/0x80 [ 55.495183][ T1972] ? avc_has_perm_noaudit+0x398/0x5c0 [ 55.500556][ T1972] ? memcpy+0x56/0x70 [ 55.504534][ T1972] ? avc_has_perm_noaudit+0x313/0x5c0 [ 55.509890][ T1972] ? arch_stack_walk+0xee/0x140 [ 55.514733][ T1972] ? avc_denied+0x1b0/0x1b0 [ 55.519238][ T1972] ? stack_trace_save+0xa6/0xf0 [ 55.524071][ T1972] ? avc_has_perm+0x163/0x250 [ 55.528731][ T1972] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 55.534085][ T1972] ? x64_sys_call+0x4b/0x9a0 [ 55.538674][ T1972] ? selinux_nlmsg_lookup+0x38f/0x440 [ 55.544033][ T1972] netlink_rcv_skb+0x1e9/0x430 [ 55.548906][ T1972] ? rtnetlink_bind+0x80/0x80 [ 55.553585][ T1972] ? netlink_ack+0xb10/0xb10 [ 55.558174][ T1972] ? _copy_from_iter+0x4a4/0x10a0 [ 55.563228][ T1972] ? __netlink_lookup+0x387/0x3b0 [ 55.568249][ T1972] rtnetlink_rcv+0x1c/0x20 [ 55.572668][ T1972] netlink_unicast+0x86c/0xa30 [ 55.577439][ T1972] netlink_sendmsg+0x879/0xb80 [ 55.582196][ T1972] ? netlink_getsockopt+0x530/0x530 [ 55.587385][ T1972] ? alloc_file+0x59/0x580 [ 55.591788][ T1972] ? security_socket_sendmsg+0x82/0xa0 [ 55.597231][ T1972] ? netlink_getsockopt+0x530/0x530 [ 55.602417][ T1972] ____sys_sendmsg+0x5be/0x8f0 [ 55.607262][ T1972] ? __sys_sendmsg_sock+0x40/0x40 [ 55.612358][ T1972] ? import_iovec+0x7c/0xb0 [ 55.616845][ T1972] ___sys_sendmsg+0x236/0x2e0 [ 55.621503][ T1972] ? __sys_sendmsg+0x280/0x280 [ 55.626248][ T1972] ? percpu_counter_add_batch+0x13c/0x160 [ 55.631955][ T1972] ? __fdget+0x1a1/0x230 [ 55.636186][ T1972] __x64_sys_sendmsg+0x201/0x2d0 [ 55.641111][ T1972] ? ___sys_sendmsg+0x2e0/0x2e0 [ 55.645945][ T1972] ? __kasan_check_write+0x14/0x20 [ 55.651078][ T1972] ? switch_fpu_return+0x15d/0x2c0 [ 55.656185][ T1972] x64_sys_call+0x4b/0x9a0 [ 55.660809][ T1972] do_syscall_64+0x4c/0xa0 [ 55.665236][ T1972] ? clear_bhb_loop+0x50/0xa0 [ 55.669912][ T1972] ? clear_bhb_loop+0x50/0xa0 [ 55.674765][ T1972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.680665][ T1972] RIP: 0033:0x7f6e9f587f19 [ 55.685071][ T1972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.704682][ T1972] RSP: 002b:00007f6e9dfd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.713098][ T1972] RAX: ffffffffffffffda RBX: 00007f6e9f804fa0 RCX: 00007f6e9f587f19 [ 55.721065][ T1972] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 55.729024][ T1972] RBP: 00007f6e9f616f6d R08: 0000000000000000 R09: 0000000000000000 [ 55.737089][ T1972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.745703][ T1972] R13: 00007f6e9f805038 R14: 00007f6e9f804fa0 R15: 00007ffee42be988 [ 55.753810][ T1972] [ 55.787640][ T1976] printk: console [ttyS0] disabled [ 55.829980][ T1976] printk: console [ttyS0] enabled [ 55.850849][ T1970] F2FS-fs (loop7): Start checkpoint disabled! [ 55.877287][ T1970] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 55.903316][ T463] attempt to access beyond end of device [ 55.903316][ T463] loop7: rw=2049, want=45104, limit=40427 [ 55.914757][ T307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.933363][ T307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.947949][ T307] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.961096][ T307] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.970402][ T307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.986120][ T307] usb 10-1: config 0 descriptor?? [ 56.078829][ T1995] loop5: detected capacity change from 0 to 128 [ 56.097367][ T1995] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 56.113391][ T1995] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.148863][ T1995] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 34: comm syz.5.619: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 56.167470][ T1995] EXT4-fs (loop5): Remounting filesystem read-only [ 56.174097][ T1995] EXT4-fs error (device loop5) in do_split:2097: Corrupt filesystem [ 56.182701][ T1995] EXT4-fs (loop5): Remounting filesystem read-only [ 56.223330][ T1999] loop5: detected capacity change from 0 to 128 [ 56.245877][ T1999] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 56.261839][ T1999] attempt to access beyond end of device [ 56.261839][ T1999] loop5: rw=34817, want=155, limit=128 [ 56.318237][ T10] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 56.362233][ T2001] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 56.381902][ T2001] kvm [2000]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 56.391488][ T2001] kvm [2000]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 56.409458][ T2001] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 56.455257][ T307] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 56.468383][ T307] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 56.483154][ T307] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 56.542672][ T2011] printk: console [ttyS0] disabled [ 56.556942][ T2011] printk: console [ttyS0] enabled [ 56.726756][ T307] usb 10-1: USB disconnect, device number 2 [ 56.791786][ T2029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 56.828874][ T2035] loop5: detected capacity change from 0 to 1024 [ 56.854367][ T2040] kvm [2028]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 56.872360][ T2040] kvm [2028]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 56.885488][ T2035] EXT4-fs (loop5): Ignoring removed oldalloc option [ 56.908361][ T2043] netlink: 36 bytes leftover after parsing attributes in process `syz.7.638'. [ 56.925328][ T2035] EXT4-fs (loop5): Ignoring removed orlov option [ 56.936778][ T2040] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 56.953160][ T2043] netlink: 40 bytes leftover after parsing attributes in process `syz.7.638'. [ 56.986927][ T2035] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue. Quota mode: none. [ 57.041223][ T2046] kvm [2045]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 57.100983][ T30] audit: type=1400 audit(1794279458.645:8473): avc: denied { name_bind } for pid=2058 comm="syz.8.644" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 57.185586][ T2035] SELinux: Context : is not valid (left unmapped). [ 57.195313][ T2061] kvm [2060]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 57.204619][ T30] audit: type=1400 audit(1794279458.725:8474): avc: denied { watch } for pid=2065 comm="syz.2.648" path="/140/file1" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.242048][ T2035] EXT4-fs error (device loop5): ext4_lookup:1860: inode #12: comm syz.5.635: unexpected EA_INODE flag [ 57.285015][ T30] audit: type=1400 audit(1794279458.785:8475): avc: denied { relabelto } for pid=2034 comm="syz.5.635" name="rdma.current" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 57.386037][ T2081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 57.454678][ T2089] loop7: detected capacity change from 0 to 8192 [ 57.463468][ T2094] kvm [2080]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 57.495366][ T30] audit: type=1400 audit(1794279459.045:8476): avc: denied { ioctl } for pid=2095 comm="syz.5.659" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.529376][ T2094] kvm [2080]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 57.585243][ T2094] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 57.673763][ T2112] devtmpfs: Unknown parameter '´ËAJQ|ÕÉ ŠQZ¡3&LvªPÎ@ÃùëLT´bqBÖbã‚.¼žöŒ µzV~Yµ£éð [ 57.673763][ T2112] 4Ôìö! x¾¼ñyþ}äj' [ 57.687195][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 57.830681][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.842147][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.853840][ T2114] device bridge_slave_0 entered promiscuous mode [ 57.865893][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.877300][ T2114] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.889046][ T2114] device bridge_slave_1 entered promiscuous mode [ 57.947880][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.954964][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.962218][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.969258][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.017947][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.030018][ T30] audit: type=1400 audit(1794279459.575:8477): avc: denied { write } for pid=2118 comm="syz.8.669" name="mjpeg" dev="configfs" ino=18157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.058848][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.079260][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.086555][ T305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.120939][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.132602][ T30] audit: type=1400 audit(1794279459.605:8478): avc: denied { add_name } for pid=2118 comm="syz.8.669" name="m1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.165896][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.172941][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.183893][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.192021][ T30] audit: type=1400 audit(1794279459.615:8479): avc: denied { getopt } for pid=2120 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.212436][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.219504][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.236109][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.244524][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.252691][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.261954][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.270464][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.279015][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.287282][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 58.298549][ T10] device bridge_slave_1 left promiscuous mode [ 58.305022][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.312203][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.320932][ T305] usb 3-1: Product: syz [ 58.325393][ T305] usb 3-1: Manufacturer: syz [ 58.330020][ T305] usb 3-1: SerialNumber: syz [ 58.338169][ T10] device bridge_slave_0 left promiscuous mode [ 58.344332][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.352186][ T10] device veth1_macvtap left promiscuous mode [ 58.358394][ T10] device veth0_vlan left promiscuous mode [ 58.376187][ T305] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 58.413270][ T2114] device veth0_vlan entered promiscuous mode [ 58.419684][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.430321][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.443113][ T2114] device veth1_macvtap entered promiscuous mode [ 58.450077][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.473260][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.500334][ T2136] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 58.517929][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.538050][ T2134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 58.555948][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.564046][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.591413][ T2132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.676'. [ 58.604017][ T2143] set_capacity_and_notify: 1 callbacks suppressed [ 58.604031][ T2143] loop8: detected capacity change from 0 to 256 [ 58.637979][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.649465][ T2143] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 58.669686][ T2144] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 58.679617][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.695225][ T30] audit: type=1400 audit(1794279460.245:8480): avc: denied { mount } for pid=2142 comm="syz.8.678" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.721225][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.745470][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.768529][ T2148] loop5: detected capacity change from 0 to 2048 [ 58.790899][ T30] audit: type=1400 audit(1794279460.285:8481): avc: denied { unmount } for pid=1188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.840122][ T6] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 58.874338][ T6] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.885609][ T10] tipc: Disabling bearer [ 58.890850][ T10] tipc: Left network mode [ 58.895305][ T2148] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 58.928227][ T2155] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.994598][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 59.044378][ T2162] loop7: detected capacity change from 0 to 1024 [ 59.100075][ T2159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.131187][ T2162] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.142550][ T2159] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.155515][ T305] usb 3-1: USB disconnect, device number 2 [ 59.182451][ T2159] device bridge_slave_0 entered promiscuous mode [ 59.198014][ T2159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.208668][ T2162] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.229325][ T2159] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.249778][ T2159] device bridge_slave_1 entered promiscuous mode [ 59.375059][ T10] device bridge_slave_1 left promiscuous mode [ 59.394708][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.402611][ T45] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 59.434890][ T10] device bridge_slave_0 left promiscuous mode [ 59.443817][ T45] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 59.456342][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.475192][ T10] device veth1_macvtap left promiscuous mode [ 59.491335][ T45] EXT4-fs (loop7): This should not happen!! Data will be lost [ 59.491335][ T45] [ 59.504651][ T10] device veth0_vlan left promiscuous mode [ 59.521860][ T45] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 59.576807][ T45] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 59.605828][ T2167] loop5: detected capacity change from 0 to 40427 [ 59.625026][ T45] EXT4-fs (loop7): This should not happen!! Data will be lost [ 59.625026][ T45] [ 59.650474][ T2167] F2FS-fs (loop5): invalid crc value [ 59.704302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.734965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.742776][ T2167] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 59.764493][ T2188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 59.795953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.814964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.844931][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.851977][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.888794][ T2167] F2FS-fs (loop5): Start checkpoint disabled! [ 59.902123][ T2195] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 59.914700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.933322][ T2167] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 59.948394][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.984745][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.991799][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.066016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.102987][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.138426][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.164035][ T306] attempt to access beyond end of device [ 60.164035][ T306] loop5: rw=2049, want=40968, limit=40427 [ 60.181573][ T2209] loop2: detected capacity change from 0 to 128 [ 60.208224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.251786][ T2159] device veth0_vlan entered promiscuous mode [ 60.267195][ T2209] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 60.289372][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.309078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.317234][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 60.317243][ T30] audit: type=1400 audit(1794279461.865:8488): avc: denied { setattr } for pid=2213 comm="syz.4.705" name="nfnetlink_queue" dev="proc" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.361723][ T2159] device veth1_macvtap entered promiscuous mode [ 60.368374][ T2209] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.426296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.433764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.445183][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.464737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.472836][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.496941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.505814][ T2209] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.701: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 60.533688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.555238][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.572450][ T2209] EXT4-fs (loop2): Remounting filesystem read-only [ 60.579290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.594997][ T2209] EXT4-fs error (device loop2) in do_split:2097: Corrupt filesystem [ 60.608672][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 60.619023][ T2209] EXT4-fs (loop2): Remounting filesystem read-only [ 60.627732][ T2220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 60.709569][ T2225] loop4: detected capacity change from 0 to 128 [ 60.777373][ T2225] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.795249][ T2225] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 60.847245][ T2225] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.945479][ T463] device bridge_slave_1 left promiscuous mode [ 60.975816][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.011117][ T463] device bridge_slave_0 left promiscuous mode [ 61.045443][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.065602][ T463] device veth1_macvtap left promiscuous mode [ 61.075953][ T463] device veth0_vlan left promiscuous mode [ 61.180891][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.192428][ T2249] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.204102][ T2249] device bridge_slave_0 entered promiscuous mode [ 61.214804][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.226167][ T2249] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.236819][ T2249] device bridge_slave_1 entered promiscuous mode [ 61.321510][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.328981][ T6] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 61.339297][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.355911][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.368525][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.381077][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.388168][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.404252][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.417406][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.430378][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.437453][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.458215][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.470184][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.482572][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.501363][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.517265][ T2249] device veth0_vlan entered promiscuous mode [ 61.527843][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.538207][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.549975][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.566348][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.579725][ T2249] device veth1_macvtap entered promiscuous mode [ 61.598552][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.616531][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.640939][ T2255] loop3: detected capacity change from 0 to 16 [ 61.653716][ T2257] EXT4-fs warning (device sda1): verify_group_input:176: Cannot read last block (266218) [ 61.671677][ T2255] erofs: (device loop3): mounted with root inode @ nid 36. [ 61.679251][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 61.764664][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.802584][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.826437][ T2268] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 61.834471][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 61.845915][ T2268] syzkaller1: Refused to change device type [ 61.853816][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.888003][ T2273] ip_tables: iptables: counters copy to user failed while replacing table [ 61.953650][ T2244] loop5: detected capacity change from 0 to 131072 [ 61.983329][ T2244] F2FS-fs (loop5): invalid crc value [ 62.013011][ T2244] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.060445][ T2244] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.071781][ T2244] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 62.078795][ T2244] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 62.106026][ T2244] F2FS-fs (loop5): Found FS corruption, run fsck to fix. [ 62.154622][ T305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 62.165144][ T6] usb 3-1: string descriptor 0 read error: -71 [ 62.171355][ T30] audit: type=1326 audit(1794279463.715:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.727" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e62ef19 code=0x7fc00000 [ 62.206138][ T6] usb 3-1: Found UVC 0.00 device (046d:0825) [ 62.221485][ T6] usb 3-1: No valid video chain found. [ 62.232876][ T6] usb 3-1: USB disconnect, device number 3 [ 62.241579][ T30] audit: type=1326 audit(1794279463.715:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.727" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f312e62ef19 code=0x7fc00000 [ 62.316626][ T30] audit: type=1326 audit(1794279463.745:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.727" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e62ef19 code=0x7fc00000 [ 62.414678][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 62.503839][ T2296] tipc: Started in network mode [ 62.517137][ T2296] tipc: Node identity f298d96a94d3, cluster identity 4711 [ 62.534747][ T305] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 62.543308][ T305] usb 4-1: config 2 has no interface number 0 [ 62.550787][ T2296] tipc: Enabled bearer , priority 10 [ 62.557719][ T305] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 62.570446][ T2295] tipc: Resetting bearer [ 62.576332][ T305] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.587445][ T2295] tipc: Disabling bearer [ 62.664228][ T2309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34 (272 ns) > initial count (72 ns). Using initial count to start timer. [ 62.754680][ T305] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 62.771473][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.779743][ T305] usb 4-1: Product: syz [ 62.784072][ T305] usb 4-1: Manufacturer: syz [ 62.789044][ T305] usb 4-1: SerialNumber: syz [ 62.944611][ T20] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 63.013931][ T2339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer. [ 63.040961][ T305] usb 4-1: USB disconnect, device number 4 [ 63.126998][ T2342] loop4: detected capacity change from 0 to 32768 [ 63.155878][ T2342] loop4: p1 p3 < p5 p6 p7 p8 > p4 [ 63.163951][ T2342] loop4: p4 start 1426063360 is beyond EOD, truncated [ 63.171721][ T2342] loop4: p5 size 46336 extends beyond EOD, truncated [ 63.179028][ T2342] loop4: p6 size 134217728 extends beyond EOD, truncated [ 63.186793][ T2342] loop4: p7 start 270335 is beyond EOD, truncated [ 63.256301][ T101] loop4: p1 p3 < p5 p6 p7 p8 > p4 [ 63.262186][ T101] loop4: p4 start 1426063360 is beyond EOD, truncated [ 63.269233][ T20] usb 3-1: not running at top speed; connect to a high speed hub [ 63.277089][ T101] loop4: p5 size 46336 extends beyond EOD, truncated [ 63.284180][ T101] loop4: p6 size 134217728 extends beyond EOD, truncated [ 63.293108][ T101] loop4: p7 start 270335 is beyond EOD, truncated [ 63.328933][ T2346] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.354717][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.368580][ T332] udevd[332]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 63.379505][ T405] udevd[405]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.391299][ T390] udevd[390]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 63.402182][ T812] udevd[812]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 63.413817][ T886] udevd[886]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 63.428658][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 63.446817][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.496047][ T20] usb 3-1: Found UVC 1.00 device (046d:0825) [ 63.503157][ T20] usb 3-1: No streaming interface found for terminal 2. [ 63.713650][ T6] usb 3-1: USB disconnect, device number 4 [ 64.107465][ T2380] loop3: detected capacity change from 0 to 128 [ 64.152701][ T2380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.172022][ T2380] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.206777][ T2353] loop0: detected capacity change from 0 to 131072 [ 64.225557][ T2353] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 64.263502][ T2353] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.297093][ T2353] F2FS-fs (loop0): invalid crc value [ 64.310055][ T2384] kvm: MWAIT instruction emulated as NOP! [ 64.322997][ T2353] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.380669][ T2353] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.394277][ T2353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 64.551484][ T2400] device syzkaller0 entered promiscuous mode [ 64.570430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.590742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.617868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.646985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.665354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.681999][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.715580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.740802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.914449][ T2414] FAULT_INJECTION: forcing a failure. [ 64.914449][ T2414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.945861][ T2416] xt_hashlimit: size too large, truncated to 1048576 [ 64.972775][ T2414] CPU: 0 PID: 2414 Comm: syz.2.789 Not tainted syzkaller #0 [ 64.980083][ T2414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.990131][ T2414] Call Trace: [ 64.993393][ T2414] [ 64.996320][ T2414] __dump_stack+0x21/0x30 [ 65.000641][ T2414] dump_stack_lvl+0x110/0x170 [ 65.005300][ T2414] ? show_regs_print_info+0x20/0x20 [ 65.010483][ T2414] dump_stack+0x15/0x20 [ 65.014651][ T2414] should_fail+0x3ab/0x500 [ 65.019063][ T2414] should_fail_usercopy+0x1a/0x20 [ 65.024076][ T2414] _copy_from_user+0x20/0xd0 [ 65.028657][ T2414] __sys_sendto+0x2e9/0x620 [ 65.033234][ T2414] ? __ia32_sys_getpeername+0x90/0x90 [ 65.038593][ T2414] __x64_sys_sendto+0xe5/0x100 [ 65.043344][ T2414] x64_sys_call+0x178/0x9a0 [ 65.047833][ T2414] do_syscall_64+0x4c/0xa0 [ 65.052245][ T2414] ? clear_bhb_loop+0x50/0xa0 [ 65.056906][ T2414] ? clear_bhb_loop+0x50/0xa0 [ 65.061568][ T2414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.067450][ T2414] RIP: 0033:0x7f69c565074e [ 65.071853][ T2414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.091441][ T2414] RSP: 002b:00007f69c40dce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 65.099838][ T2414] RAX: ffffffffffffffda RBX: 00007f69c40de6c0 RCX: 00007f69c565074e [ 65.107798][ T2414] RDX: 0000000000000020 RSI: 00007f69c40dd000 RDI: 0000000000000006 [ 65.115752][ T2414] RBP: 0000000000000000 R08: 00007f69c40dcf04 R09: 000000000000000c [ 65.123704][ T2414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 65.131656][ T2414] R13: 00007f69c40dcf58 R14: 00007f69c40dd000 R15: 0000000000000000 [ 65.139612][ T2414] [ 65.513589][ T2427] loop5: detected capacity change from 0 to 40427 [ 65.560675][ T2427] F2FS-fs (loop5): invalid crc value [ 65.604417][ T2427] F2FS-fs (loop5): Mismatch valid blocks 5 vs. 13 [ 65.617874][ T2460] loop3: detected capacity change from 0 to 256 [ 65.633693][ T2462] loop2: detected capacity change from 0 to 1024 [ 65.655164][ T2427] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 65.685207][ T2460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 65.739957][ T2462] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 66.105080][ T45] device bridge_slave_1 left promiscuous mode [ 66.111309][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.118887][ T45] device bridge_slave_0 left promiscuous mode [ 66.125177][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.132959][ T45] device veth1_macvtap left promiscuous mode [ 66.139333][ T45] device veth0_vlan left promiscuous mode [ 66.145106][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 66.394603][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 66.514609][ T20] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 66.522860][ T20] usb 3-1: config 0 has no interface number 0 [ 66.529407][ T20] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 66.539887][ T20] usb 3-1: config 0 interface 196 has no altsetting 0 [ 66.704616][ T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 66.713716][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.721914][ T20] usb 3-1: Product: syz [ 66.726279][ T20] usb 3-1: Manufacturer: syz [ 66.730890][ T20] usb 3-1: SerialNumber: syz [ 66.739319][ T20] usb 3-1: config 0 descriptor?? [ 66.754636][ T2476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.854496][ T2492] loop0: detected capacity change from 0 to 128 [ 66.891561][ T2492] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 66.918451][ T2492] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.205591][ T20] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 67.420438][ T2476] UDC core: couldn't find an available UDC or it's busy: -16 [ 67.427912][ T2476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.845816][ T6] usb 3-1: USB disconnect, device number 5 [ 67.885123][ T6] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 69.063138][ T2545] loop2: detected capacity change from 0 to 512 [ 69.106371][ T2545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.145427][ T2545] EXT4-fs (loop2): 1 truncate cleaned up [ 69.151195][ T2545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.081089][ T2557] loop0: detected capacity change from 0 to 32768 [ 70.106308][ T2557] loop0: p1 p3 < p5 p6 p7 p8 > p4 [ 70.113696][ T2557] loop0: p4 start 1426063360 is beyond EOD, truncated [ 70.120668][ T2557] loop0: p5 size 46336 extends beyond EOD, truncated [ 70.127878][ T2557] loop0: p6 size 134217728 extends beyond EOD, truncated [ 70.135552][ T2557] loop0: p7 start 270335 is beyond EOD, truncated [ 70.364855][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 70.371468][ C0] bridge0: topology change detected, propagating [ 71.035308][ T2570] loop5: detected capacity change from 0 to 128 [ 71.060131][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.070625][ T2572] ip_tables: iptables: counters copy to user failed while replacing table [ 71.085540][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.110805][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.124848][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.136435][ T2570] EXT4-fs (loop5): Test dummy encryption mode enabled [ 71.153169][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.162732][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.171102][ T2570] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 71.186183][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.194246][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.202912][ T2570] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.444672][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.684873][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 72.804655][ T6] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 72.812946][ T6] usb 1-1: config 0 has no interface number 0 [ 72.819313][ T6] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 72.829388][ T6] usb 1-1: config 0 interface 196 has no altsetting 0 [ 72.994807][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 73.003898][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.012041][ T6] usb 1-1: Product: syz [ 73.016288][ T6] usb 1-1: Manufacturer: syz [ 73.020861][ T6] usb 1-1: SerialNumber: syz [ 73.028172][ T6] usb 1-1: config 0 descriptor?? [ 73.044706][ T2582] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.505556][ T6] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 73.720310][ T2582] UDC core: couldn't find an available UDC or it's busy: -16 [ 73.727788][ T2582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.144949][ T6] usb 1-1: USB disconnect, device number 4 [ 74.184973][ T6] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 74.770632][ T2630] input: syz1 as /devices/virtual/input/input10 [ 74.778662][ T2632] loop5: detected capacity change from 0 to 256 [ 74.822541][ T2632] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 74.932816][ T1427] bridge0: port 3(syz_tun) entered disabled state [ 74.943845][ T1427] device syz_tun left promiscuous mode [ 74.950001][ T1427] bridge0: port 3(syz_tun) entered disabled state [ 74.975097][ T463] tipc: Left network mode [ 75.058611][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.084314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.115580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.139384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.167543][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.191681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.217660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.240428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=805 state=1 status=67 (errno 9: Bad file descriptor) [ 75.261863][ T30] audit: type=1400 audit(1794279476.805:8492): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14411]" dev="pipefs" ino=14411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 75.595708][ T463] device bridge_slave_1 left promiscuous mode [ 75.601824][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.616513][ T463] device bridge_slave_0 left promiscuous mode [ 75.622618][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.630585][ T463] device veth1_macvtap left promiscuous mode [ 75.636772][ T463] device veth0_vlan left promiscuous mode [ 75.815713][ T463] tipc: Left network mode [ 76.146222][ T463] device bridge_slave_1 left promiscuous mode [ 76.152331][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.159855][ T463] device bridge_slave_0 left promiscuous mode [ 76.166105][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.173828][ T463] device bridge_slave_1 left promiscuous mode [ 76.180282][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.187852][ T463] device bridge_slave_0 left promiscuous mode [ 76.193942][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.201804][ T463] device bridge_slave_1 left promiscuous mode [ 76.208209][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.215750][ T463] device bridge_slave_0 left promiscuous mode [ 76.221835][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.230008][ T463] device veth1_macvtap left promiscuous mode [ 76.236046][ T463] device veth0_vlan left promiscuous mode [ 76.241846][ T463] device veth1_macvtap left promiscuous mode [ 76.248011][ T463] device veth0_vlan left promiscuous mode [ 76.253796][ T463] device veth1_macvtap left promiscuous mode [ 76.260058][ T463] device veth0_vlan left promiscuous mode